
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
File: KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json)
Hash identifier: 1hMB+kmJL0tEUQtyLyKyMsNuDwL1KWngPtt7/vn51Do=
Subject key identifier: 39:C4:8F:0B:95:6B:36:C1:8F:02:BC:B2:CB:E6:A5:A6:B5:87:11:85
Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
Certificate issuer: /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
Manifest number: 13
Signing time: Sun 05 Apr 2026 08:20:57 +0000
Manifest this update: Sun 05 Apr 2026 08:20:56 +0000
Manifest next update: Sun 12 Apr 2026 08:20:56 +0000
Files and hashes: 1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: 7cfWESx8KA3mPKet3/HW5auMILUpDBRXFcxBQROXxFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Validity
Not Before: Apr 5 08:20:56 2026 GMT
Not After : Apr 12 08:20:56 2026 GMT
Subject: CN=69d21b68-8da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:fd:96:1e:4e:e9:65:fc:37:3a:bf:5e:d7:
b8:6c:2b:09:c5:07:a6:29:6c:17:c3:ad:5e:52:10:
13:28:cf:57:23:d3:58:59:bf:f4:6d:e1:ee:02:f8:
9c:ec:0a:e0:aa:f0:76:84:4c:0f:94:df:c3:26:a8:
3d:0f:86:f0:07:e6:bb:5e:e9:b6:15:0d:f9:1c:ff:
08:fb:50:70:44:c3:07:07:c1:48:dc:a5:26:59:ce:
42:84:d1:61:ca:3e:4a:41:77:09:ec:89:70:6c:50:
6b:53:59:8d:65:75:b8:fd:ea:87:df:42:31:e4:31:
04:e8:d8:2b:bb:1e:d8:92:48:7a:12:b1:e5:16:b2:
11:1d:bb:c5:c4:c5:16:7b:77:d3:c8:60:9c:6c:63:
31:e9:5b:61:c2:fd:96:c8:7e:c4:35:e0:74:90:f2:
e4:47:32:e0:2f:bd:aa:50:e8:da:c9:fa:be:98:89:
e1:01:c3:43:1a:49:d9:93:77:03:54:15:ad:e5:6e:
99:d9:c7:18:91:da:52:c8:c7:2f:31:88:65:a2:3b:
60:da:e0:5c:4d:dd:e8:bd:3f:b1:50:11:cf:29:63:
fb:c9:5f:c0:ac:49:7a:31:e7:5c:5b:54:f8:e5:f4:
51:62:79:ff:95:18:75:89:7c:35:e1:1f:9b:3e:6d:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:8F:0B:95:6B:36:C1:8F:02:BC:B2:CB:E6:A5:A6:B5:87:11:85
X509v3 Authority Key Identifier:
keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:c0:33:e4:57:67:39:6f:91:cb:17:f0:65:c9:3e:b5:cf:4e:
4d:08:3c:f3:8c:fd:55:ab:38:e9:e1:6f:1f:61:5c:0e:ca:a8:
4f:f9:a3:d1:75:66:42:5a:51:2a:7f:01:39:c6:59:fb:8c:16:
d3:86:28:83:b7:1d:2a:84:fe:18:94:d9:55:d6:77:dd:cb:bd:
f6:e4:7e:cf:2d:95:1a:f3:43:b5:56:24:89:60:d4:de:6b:94:
a9:ba:a9:61:5b:15:11:f2:3b:c3:cf:a8:2f:4e:0c:80:9e:3b:
a1:d3:fd:bf:a2:02:72:60:51:18:5d:6e:5f:14:31:41:66:b5:
df:a0:2f:c0:15:e2:6c:2e:30:9e:a5:85:6f:f1:c7:3c:0d:08:
dd:5d:96:42:26:e3:9a:f1:66:a9:e9:71:0b:fb:c7:1f:73:d6:
a2:8e:2b:2c:ff:b2:ca:fd:30:ee:7c:d1:0b:9f:9a:1a:1d:87:
e2:f3:b5:66:6c:2e:8a:86:36:af:fe:1b:f6:59:1f:94:a4:80:
51:37:11:f6:5c:e7:c0:cc:ee:02:9f:f4:b5:89:95:0b:9d:8d:
b1:cd:5b:4d:ad:0d:d1:91:c3:3e:a7:ac:f2:d7:c7:56:f5:e3:
06:38:35:d6:cc:37:c4:04:59:24:1d:58:e3:80:f0:1b:a0:23:
e4:22:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:38 2026 by rpki-client