
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json)
Hash identifier: HF7lYHjWSTi4iKRBTHHyqqZDOa0jAZhGo7kkVm03FpQ=
Subject key identifier: 3D:83:9F:22:0F:21:AC:EB:36:0A:E5:EC:5B:74:DB:46:47:CD:A6:35
Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
Manifest number: 0253
Signing time: Sun 11 Oct 2026 02:57:45 +0000
Manifest this update: Sun 11 Oct 2026 02:57:45 +0000
Manifest next update: Sun 18 Oct 2026 02:57:45 +0000
Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: 7qafoP2LH+qUgCOfl5TUPffm7hnmtIx4bxxeuK3LAdA=)
2: 4AB01838FF1D11F0816C691B85EE528E.roa (hash: 73GQqCwii1vmNrsS7r1xrrm5FcLJovRSf9upFdGwKjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Validity
Not Before: Oct 11 02:57:45 2026 GMT
Not After : Oct 18 02:57:45 2026 GMT
Subject: CN=6acafb29-37f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:50:2c:c2:71:80:0b:16:97:81:cb:ae:23:
93:03:34:2b:de:7a:7b:2d:b4:70:32:f6:3d:75:a3:
f4:f8:2e:81:bf:0d:9a:a1:70:5e:71:14:9d:a5:2a:
92:8a:ce:4b:50:e2:4a:0a:ca:cf:95:e1:d5:11:2f:
f1:a9:00:55:02:6c:f2:ec:1b:8d:d4:17:cb:10:0d:
45:4f:fb:84:2a:a7:7e:a1:3e:7b:f0:1f:4e:19:c8:
03:b3:04:72:4b:5f:ba:a7:39:71:1d:b6:29:e6:42:
66:67:c3:c6:8f:eb:2c:04:9b:d9:1a:e2:90:56:01:
02:1b:38:1f:eb:ae:02:0f:37:bb:49:74:14:e5:14:
74:51:62:b1:59:71:53:dc:52:87:bf:07:07:4c:fe:
9d:47:47:da:97:a5:4e:a3:47:a8:e6:80:0b:62:d7:
8c:96:ee:f2:fe:b8:45:e0:fa:b5:61:1c:e6:f3:50:
3f:bd:f8:7c:7a:10:1a:ef:78:d0:19:9c:27:ef:08:
d3:e0:6d:96:cd:78:a4:0f:0f:82:2a:03:a7:2f:33:
2e:69:36:2f:b5:77:77:81:3f:3c:d0:56:52:bd:c8:
52:a3:e5:c2:b8:7e:a7:06:9d:4a:02:31:3f:71:5d:
82:03:e1:15:08:7e:5a:04:aa:51:60:94:9a:6e:eb:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:83:9F:22:0F:21:AC:EB:36:0A:E5:EC:5B:74:DB:46:47:CD:A6:35
X509v3 Authority Key Identifier:
keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:10:ac:aa:a6:71:38:31:c1:84:1e:0c:38:cf:75:a8:5b:cc:
b6:6d:52:a4:f6:c6:a5:52:8f:40:3e:e7:a3:5c:e8:20:db:61:
a0:a5:43:8d:39:f9:db:cd:1f:09:9d:d8:ef:5f:89:16:47:c1:
d8:4a:63:33:92:2a:e9:87:4b:58:f7:ab:1c:46:d7:61:08:06:
f1:6c:8a:90:c0:a4:1b:b4:1f:a9:b4:c4:60:da:2c:1a:73:9b:
89:a4:c5:8a:05:4b:d7:58:4e:5a:59:bc:05:dc:99:c1:71:8d:
3f:d1:5d:f1:6a:c7:66:d9:1f:ac:57:d0:47:19:ab:de:7d:f7:
95:bd:85:5b:44:be:1b:03:ad:d5:c1:8c:cd:0b:34:b8:86:99:
74:62:5c:4e:21:77:8f:b9:c8:42:b8:32:fc:74:8e:be:19:41:
4a:d2:14:e4:11:46:e4:18:3f:80:6d:43:e0:2f:b4:b1:4b:51:
77:14:b1:a9:3b:c0:4a:50:29:5b:b9:4e:3f:3e:2b:55:df:57:
04:18:42:7c:3e:11:af:b8:14:77:75:58:22:ce:af:37:49:7b:
e7:b2:09:5d:e2:70:e0:fc:ad:11:c2:3f:20:29:d1:9b:70:7d:
80:11:ba:4b:7e:08:a3:3a:41:4a:24:6c:1f:3f:17:f0:93:87:
e9:81:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:56:32 2026 by rpki-client