
$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json)
Hash identifier: 8dl7QgXcP/eZJcGY0boEGAmysEP/aUXhBK0hUHdyb0o=
Subject key identifier: 68:52:AC:C8:46:47:DE:1E:45:23:DE:29:6F:3C:D8:E1:1A:ED:86:ED
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
Manifest number: 014F
Signing time: Sun 05 Apr 2026 04:33:33 +0000
Manifest this update: Sun 05 Apr 2026 04:33:32 +0000
Manifest next update: Sun 12 Apr 2026 04:33:32 +0000
Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: FJ18fRZqSznUP5cqC5n5t/krB/Fcp5lgDOAzmWGFQJo=)
2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: czoz5UivPk2DZLmeDI+JHyZhgkVk8064UwjiPvLfMg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Validity
Not Before: Apr 5 04:33:32 2026 GMT
Not After : Apr 12 04:33:32 2026 GMT
Subject: CN=69d1e61c-3117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:51:1a:25:ca:25:16:bc:c5:5f:49:bd:fd:
2f:c2:96:2a:65:dc:a5:b5:fd:c6:11:bf:c1:d8:e3:
0e:db:ca:ea:7d:a7:c5:79:cc:80:aa:cd:ad:e5:8a:
99:ec:ac:e9:eb:f5:00:1f:1b:7c:9b:88:c5:df:a0:
16:6e:5b:35:f4:2f:7b:6b:2e:74:18:78:2b:ca:cc:
d8:bc:8d:35:69:59:5c:30:7d:0c:a4:55:8a:ca:cb:
96:f1:5c:b8:8c:e2:ac:61:99:10:63:b9:5c:92:66:
56:4f:bd:22:57:ba:97:1a:69:46:a2:5c:46:ca:af:
75:8b:12:f1:e6:2f:cf:6d:32:74:d8:c0:38:ec:8e:
6d:4a:b8:7f:5c:dd:1a:f0:63:3e:c1:65:16:33:9a:
6a:87:fe:11:8e:75:20:74:5d:e2:e4:1f:dc:53:9a:
49:fe:7e:76:31:97:f8:e7:ac:73:e2:a3:71:dc:cf:
f0:a5:2c:bf:10:9b:5a:cc:c3:d9:fe:a9:27:c0:04:
b4:c4:d5:22:34:c9:84:69:69:92:4b:58:18:20:6f:
4a:55:03:08:0b:82:20:a3:68:df:44:35:73:aa:0b:
ee:79:11:88:6a:f5:f7:e0:70:6e:9a:47:26:04:8c:
5c:0f:39:90:dd:fc:0d:ac:3d:56:27:dc:99:67:52:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:AC:C8:46:47:DE:1E:45:23:DE:29:6F:3C:D8:E1:1A:ED:86:ED
X509v3 Authority Key Identifier:
keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:20:e9:a6:e9:e2:e9:48:01:5e:aa:c5:e2:0d:95:6d:92:
b7:d8:f2:f3:45:99:a1:8b:14:7f:1d:71:e3:25:07:cd:48:90:
ad:81:5e:65:2a:3a:8d:a2:75:7a:75:12:ca:90:5f:e8:26:b6:
56:a1:a9:52:62:24:62:26:00:83:25:40:ff:f1:76:a4:25:1d:
e2:1a:d6:b4:81:97:fb:51:84:26:ba:f8:96:d7:c7:f2:bb:01:
68:f9:88:8f:e1:68:e3:e0:6a:3b:67:37:7b:2e:3c:78:2c:e3:
bb:e4:ac:e0:96:35:13:4b:b9:31:90:89:ca:d2:9e:1b:4f:8c:
05:23:13:1f:40:42:07:a1:ab:9d:91:fa:41:fa:cd:22:3c:1b:
89:f7:5d:c5:99:13:09:88:d1:cd:09:4b:cc:21:34:1a:e6:43:
b2:ed:6d:1e:a6:0b:e4:31:01:70:6c:57:98:2e:65:9a:33:90:
b3:5e:8b:af:bf:b8:3d:52:0f:67:02:f8:85:d8:bd:51:63:a1:
c9:1c:77:bf:b2:ce:44:96:f0:ff:39:60:ac:06:b7:f6:d6:97:
40:bc:0f:cd:33:bf:e8:89:ab:c5:80:9d:4a:2d:86:63:23:d9:
9e:90:e4:a3:68:a0:e8:66:d4:b8:05:9e:b4:2c:d3:76:83:af:
60:54:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:44 2026 by rpki-client