
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
File: keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json)
Hash identifier: 5I+VbrJEprTSQkqWLPra8SZR93LNbOR7o4A7uHCk720=
Subject key identifier: 56:26:AC:5C:53:19:A4:44:64:A1:0C:54:83:02:09:F7:B9:C9:37:35
Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5
Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
Manifest number: 01F1
Signing time: Sun 01 Mar 2026 04:01:15 +0000
Manifest this update: Sun 01 Mar 2026 04:01:14 +0000
Manifest next update: Sun 08 Mar 2026 04:01:14 +0000
Files and hashes: 1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: Xfuv4f/5ateRQkMo/1Oca854QN/KJuN8u9Qjs9WT2Vc=)
2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: tkkYz0ghUklFSNnUvurDs2pFNwSVM0cpaVXq98edoAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl
rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
Validity
Not Before: Mar 1 04:01:14 2026 GMT
Not After : Mar 8 04:01:14 2026 GMT
Subject: CN=69a3ba0a-0365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:07:0c:9d:2a:55:aa:53:d5:ad:d2:8a:8e:
05:f0:57:d2:53:82:7b:1b:74:b3:2b:a6:cd:be:44:
8e:a4:bd:be:48:cf:84:36:9d:f4:05:e1:44:1e:eb:
5a:a2:61:8c:8e:d1:6c:31:cc:e2:b3:f0:e2:9b:5e:
6e:b5:2b:a5:6e:12:67:a3:dc:a2:e2:13:06:76:c7:
e8:86:98:b0:cf:cb:29:44:9c:0b:f5:60:7d:22:0d:
2e:9a:bc:5b:cd:b2:e3:f4:1f:9e:1d:4f:89:b1:2e:
87:8f:69:5a:4e:e6:d3:61:3d:6f:5c:09:3c:1e:64:
39:d2:40:58:0c:48:75:80:af:ff:56:85:f1:7a:4b:
df:f9:48:a7:ce:ac:73:bb:d5:a1:2c:6f:24:ac:a8:
49:2f:e1:26:95:2f:d4:8d:77:99:96:98:14:60:f4:
f3:a4:b3:e8:83:27:09:a8:82:23:f4:d8:85:e3:d4:
f3:05:14:23:53:d5:51:26:5f:02:82:ac:39:1a:50:
43:01:39:55:3d:40:af:fa:af:ec:5e:9a:b2:7e:63:
e4:de:1b:e1:53:88:8f:df:70:8a:e8:bb:0e:0d:51:
94:c3:53:06:f6:be:67:40:83:51:5c:dc:75:4e:53:
53:02:06:cd:1a:3d:37:29:57:6f:09:3d:28:e0:ab:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:26:AC:5C:53:19:A4:44:64:A1:0C:54:83:02:09:F7:B9:C9:37:35
X509v3 Authority Key Identifier:
keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:fa:0d:ee:4b:05:a1:ba:da:43:61:be:87:71:72:13:b2:
ae:1e:49:7a:41:67:f9:16:7a:18:f7:c9:7c:81:91:49:b4:85:
ee:48:41:e1:22:d9:8a:66:2c:dd:30:94:8c:b2:a5:a7:6a:2a:
b2:c5:f7:1c:3a:45:f6:80:83:86:f5:3d:8f:3b:ea:a8:ad:d5:
a2:73:02:3f:fd:0f:c4:21:a9:1d:b8:e7:58:3a:29:ba:8c:8e:
3b:0e:51:c0:16:9d:4c:93:57:77:1a:d1:9c:71:1a:78:7b:0a:
fe:10:82:18:12:c1:dc:8a:b0:fb:24:44:60:63:fe:45:74:09:
17:50:0a:9e:09:27:ec:5f:ca:29:8d:01:69:b2:dc:79:c1:d2:
e3:50:a1:31:63:0a:55:76:34:57:c8:28:b7:b0:ec:31:3e:c6:
72:1b:14:47:4f:5e:bd:8d:82:65:cb:e4:d9:b1:23:49:9f:f2:
07:ed:4c:92:95:bf:70:ce:91:ac:0a:b2:45:a7:c3:a0:18:ac:
45:4c:ff:3b:56:66:ec:36:ad:e7:b0:7a:15:b3:31:bf:e9:5e:
84:c8:bd:9c:08:6a:4c:db:ed:c5:59:01:2c:ed:96:e0:c7:d9:
a8:82:bd:a8:4c:07:d1:e1:d8:7c:6d:22:9e:5d:20:32:d8:80:
7f:48:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:57 2026 by rpki-client