
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
File: kQglePceS4YFfcPrBwP-ZYnmaJE.mft (raw, json)
Hash identifier: D+rog+3VxdxwzzzOjqDxC6uycFjksM7Fy83Jvk+joK8=
Subject key identifier: D1:C5:C5:D0:E3:F4:D7:A6:69:3D:B5:2D:AD:E9:33:39:B1:C7:B6:27
Authority key identifier: 91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
Certificate issuer: /CN=A91BC039/serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
Manifest number: 0111
Signing time: Thu 16 Apr 2026 23:13:38 +0000
Manifest this update: Thu 16 Apr 2026 23:13:38 +0000
Manifest next update: Thu 23 Apr 2026 23:13:38 +0000
Files and hashes: 1: kQglePceS4YFfcPrBwP-ZYnmaJE.crl (hash: no6BP8oM8MRVuqQJhLr46EEbJl2iQOr104QJ0nTjDa0=)
2: 1167F6B2A18211EFA7475221C4F9AE02.roa (hash: YCpUxQ8dgkmMh3e5UHsZ7Ir2L2aOgpsDHkfqNgWqSFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC039, serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Validity
Not Before: Apr 16 23:13:38 2026 GMT
Not After : Apr 23 23:13:38 2026 GMT
Subject: CN=69e16d22-0a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:4f:c3:35:09:ba:05:c1:de:f5:44:96:62:
9b:cf:77:a8:15:91:62:56:e2:64:2a:e8:fb:ad:b3:
7b:a4:98:65:33:c8:95:1e:ea:c8:ff:36:6c:b0:2b:
4e:46:93:d7:39:41:a3:35:7d:3c:d0:7e:41:56:31:
18:44:76:16:4b:f2:99:6a:af:fc:83:12:f7:9e:ce:
8b:29:58:bb:e6:65:69:65:e7:fb:4b:22:64:fc:c0:
6a:56:4d:45:a2:c8:35:ff:f1:98:51:17:58:61:4c:
d0:a6:c4:cb:6c:53:2b:e7:db:14:dd:a1:86:c5:5d:
ee:db:3f:24:b7:de:6d:09:60:de:87:d4:45:d1:cd:
2c:fa:01:f5:b2:16:e4:88:ee:ca:39:51:b3:60:4e:
5b:0a:7c:ef:a6:19:cf:95:4e:45:5c:e1:fd:43:4c:
e0:69:83:83:4d:18:f8:2e:e2:c3:7a:02:99:de:6e:
43:7a:93:95:21:3d:7b:86:6d:fc:9e:45:5b:0d:94:
c2:7e:bc:d3:75:e5:49:44:35:bb:7a:15:e7:c5:96:
e9:f1:e0:6b:4f:12:f3:97:3d:da:ac:a0:2d:e2:19:
f3:a2:78:b5:ff:a6:4f:d3:7f:c6:fc:75:18:0e:a7:
34:35:a1:56:2f:8d:3c:25:d3:e5:56:89:16:c1:44:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C5:C5:D0:E3:F4:D7:A6:69:3D:B5:2D:AD:E9:33:39:B1:C7:B6:27
X509v3 Authority Key Identifier:
keyid:91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:05:cb:e0:6a:c1:c4:dc:4d:49:3c:dc:eb:db:b0:b3:d9:26:
65:8e:02:af:10:d3:8e:e7:af:26:98:95:61:4a:61:b5:51:44:
68:44:47:3b:bf:34:29:b9:38:e5:10:ca:7f:7a:89:5f:45:d2:
30:fb:fe:58:ae:9f:f2:59:9a:e9:c3:6b:39:90:04:2f:84:cc:
a4:1d:e3:25:37:fa:8c:2a:c7:9f:e4:01:ab:d5:67:28:e6:ac:
96:dc:8e:1b:5d:d3:ea:7f:39:b4:de:25:d0:2c:bc:93:c9:6d:
00:22:47:e6:b8:89:bf:c3:1f:a9:f4:75:52:2e:fa:25:c3:53:
04:65:08:ef:9e:b2:d6:ad:8b:5b:f9:c4:aa:25:7a:25:e3:62:
c9:31:c2:0a:d0:e7:74:ef:87:f3:af:d5:78:62:32:e2:c2:dc:
91:43:1c:34:88:09:36:a1:89:08:18:b4:e5:0a:19:e9:ff:ed:
78:4d:f9:bb:2f:50:ad:bd:d8:a4:ee:00:7c:3a:e8:00:bb:d5:
a7:33:4b:0e:1f:64:50:3b:2e:8b:c7:03:fa:cf:c1:37:03:b2:
54:03:c0:ab:e4:97:22:13:63:29:0b:e7:3f:0f:9f:af:75:bf:
e8:b1:f8:68:b8:a5:42:5c:db:12:f9:71:21:e9:41:ca:2b:43:
0c:e2:9f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:17 2026 by rpki-client