
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json)
Hash identifier: WvR+PWK1owY+FW2a2spSy9EcswThsQ+npmzPTXfk/Zk=
Subject key identifier: B4:C3:A4:E1:B9:81:62:A4:69:98:E1:BD:EF:2F:2B:DB:E5:04:59:07
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
Manifest number: 01BB
Signing time: Wed 29 Jul 2026 05:11:07 +0000
Manifest this update: Wed 29 Jul 2026 05:11:06 +0000
Manifest next update: Wed 05 Aug 2026 05:11:06 +0000
Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: VvQOvZVHdE8am8MIinf+2jlVBhxnloz6jwJ291Q271g=)
2: 56C9937C28C911F086331776C4F9AE02.roa (hash: JxwdiP8Pc7CiVQDzrJXTJybxsA7vxegE08o3FUjWbHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Validity
Not Before: Jul 29 05:11:06 2026 GMT
Not After : Aug 5 05:11:06 2026 GMT
Subject: CN=6a698b6b-828b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:8c:f7:3c:45:82:a1:5e:bd:6c:f4:d8:90:
6f:d4:b7:dd:b0:9c:b4:a1:2e:cd:5d:45:aa:a0:df:
fa:48:de:9e:b1:ff:63:60:12:44:ff:90:d4:bd:0a:
58:3e:80:c6:4e:34:a4:12:aa:59:ff:ca:58:59:13:
7f:0e:66:68:13:30:fb:28:05:ec:54:64:11:42:c6:
cf:49:87:b9:89:0d:54:fd:7b:18:b7:87:e8:14:9f:
67:72:9b:40:2c:ff:80:3c:53:cc:21:9e:b2:b7:f0:
b7:f9:f2:c1:5e:8e:52:82:ae:c5:8e:97:66:db:30:
93:91:7b:bc:b9:2b:6d:59:86:a3:62:4b:35:21:3b:
60:60:7c:5f:0e:5b:f1:70:c7:85:cb:18:a2:82:bd:
94:a9:26:bf:7d:a7:1d:5b:13:e8:a0:b7:f9:d3:6c:
f2:07:d9:43:dc:d7:db:16:6b:f3:c8:1c:23:3f:69:
06:07:89:b9:39:f7:3e:c1:2d:fa:c1:5a:a1:78:67:
d8:cc:22:89:79:f6:bd:20:bb:5c:13:9d:42:76:1a:
8c:04:8b:47:eb:59:93:b0:fd:f3:e9:d4:3a:14:fd:
aa:47:4b:28:82:f7:c5:ef:9e:90:da:83:a5:a9:5c:
41:ec:60:dc:cb:23:a5:63:39:41:6c:fe:9c:e0:94:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C3:A4:E1:B9:81:62:A4:69:98:E1:BD:EF:2F:2B:DB:E5:04:59:07
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:3d:2e:e6:7f:60:9e:e9:53:c0:03:4c:01:bb:88:dc:16:4b:
6f:d8:47:0c:d7:20:27:31:5c:c4:2e:2b:2a:7e:ab:99:30:3c:
b4:02:1d:77:3b:9e:8f:6f:61:a9:01:b3:e6:b8:0f:77:57:ef:
4f:38:e0:ff:9c:a6:f4:91:f8:9e:d2:25:37:44:ea:a3:86:25:
27:25:af:b0:00:ef:c0:87:f0:6b:37:ca:be:1a:2f:8c:23:d1:
5b:83:03:46:0c:e3:84:f8:d9:69:55:ec:1b:da:a5:cb:ba:60:
c1:bd:57:c4:73:db:5c:4c:55:6c:9b:94:a5:ec:d4:15:44:a2:
ce:78:ff:90:2c:95:7a:80:02:26:f4:8a:ea:a9:09:1d:70:8f:
dc:40:23:ec:df:b5:34:f5:2c:d7:64:a7:eb:e5:88:e2:ae:fd:
93:0e:13:d0:ec:37:f3:79:0e:3d:6f:07:64:b2:84:41:d4:ec:
c0:3d:ea:48:50:13:e9:4a:cc:3a:ae:11:d0:56:9d:9b:7a:cf:
c1:90:1d:35:cb:37:61:ca:0f:fd:11:46:be:86:9b:0b:f5:47:
f2:e7:69:eb:49:50:da:97:d9:5f:48:3b:37:2c:62:7b:1e:fd:
77:59:d2:6d:21:1f:3a:70:64:ed:e4:fb:61:a0:c2:f6:1b:39:
f7:66:bc:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG
MkE1RjZGQkIwHhcNMjYwNzI5MDUxMTA2WhcNMjYwODA1MDUxMTA2WjAYMRYwFAYD
VQQDEw02YTY5OGI2Yi04MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsMyM9zxFgqFevWz02JBv1LfdsJy0oS7NXUWqoN/6SN6esf9jYBJE/5DUvQpY
PoDGTjSkEqpZ/8pYWRN/DmZoEzD7KAXsVGQRQsbPSYe5iQ1U/XsYt4foFJ9ncptA
LP+APFPMIZ6yt/C3+fLBXo5Sgq7Fjpdm2zCTkXu8uSttWYajYks1ITtgYHxfDlvx
cMeFyxiigr2UqSa/facdWxPooLf502zyB9lD3NfbFmvzyBwjP2kGB4m5Ofc+wS36
wVqheGfYzCKJefa9ILtcE51CdhqMBItH61mTsP3z6dQ6FP2qR0sogvfF756Q2oOl
qVxB7GDcyyOlYzlBbP6c4JQKvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTDpOG5
gWKkaZjhve8vK9vlBFkHMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD
RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt
SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFD0u5n9gnulTwANMAbuI3BZLb9hHDNcgJzFcxC4rKn6rmTA8tAIddzuej29h
qQGz5rgPd1fvTzjg/5ym9JH4ntIlN0Tqo4YlJyWvsADvwIfwazfKvhovjCPRW4MD
RgzjhPjZaVXsG9qly7pgwb1XxHPbXExVbJuUpezUFUSiznj/kCyVeoACJvSK6qkJ
HXCP3EAj7N+1NPUs12Sn6+WI4q79kw4T0Ow383kOPW8HZLKEQdTswD3qSFAT6UrM
Oq4R0Fadm3rPwZAdNcs3YcoP/RFGvoabC/VH8udp60lQ2pfZX0g7Nyxiex79d1nS
bSEfOnBk7eT7YaDC9hs592a8Lg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:18:05 2026 by rpki-client