
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
File: KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json)
Hash identifier: nCKZCPlvEVAIPoAWZ8DYc0NWtZmp/zFtXlV3b5U5byM=
Subject key identifier: 35:A3:4F:9B:AF:99:E6:5E:3C:44:49:75:A3:A9:53:6D:DD:A1:45:6C
Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Certificate serial: 0C1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
Manifest number: 0C0D
Signing time: Sun 04 Oct 2026 18:55:01 +0000
Manifest this update: Sun 04 Oct 2026 18:55:00 +0000
Manifest next update: Sun 11 Oct 2026 18:55:00 +0000
Files and hashes: 1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: ydJQ+XIlfp3LeAjI9S9wDs2Oh1PQyfQM398d3ctMAU4=)
2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: fU6jAByCtwsmVxuWyqdXtNZEjmhch8Znr65pNsBAKDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3099 (0xc1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3456, serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Validity
Not Before: Oct 4 18:55:00 2026 GMT
Not After : Oct 11 18:55:00 2026 GMT
Subject: CN=6ac2a104-1453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:f7:94:72:cd:69:14:0c:bc:42:f3:e0:87:
cd:26:fb:39:e2:5b:f6:d6:30:9f:0a:8f:a8:55:5d:
90:c1:b2:e2:5c:35:db:8f:0c:6f:40:2f:cc:85:88:
75:3c:57:e9:0f:58:d1:76:10:b5:e5:4a:ad:44:55:
4a:c9:5b:7a:5f:0e:a1:e8:ba:0c:15:80:28:75:33:
cc:30:3b:50:69:04:13:77:e7:94:4f:6a:f5:d0:c7:
e7:75:54:20:74:f3:42:95:7e:56:aa:41:aa:59:8c:
8d:21:4a:f3:d9:31:86:1f:f6:af:27:f9:ea:d0:f5:
33:92:96:c1:5a:61:0d:34:7f:7e:17:04:49:4e:3c:
09:17:12:17:cc:22:f4:14:23:53:34:6a:b3:45:5c:
62:73:e3:48:5d:81:af:ae:7f:b9:11:6f:de:b3:66:
f5:87:4b:c0:25:d2:73:f4:4b:9e:af:b3:8f:93:e8:
16:de:7c:56:18:46:0c:e0:11:db:24:e7:98:64:93:
e4:e2:23:9f:5b:71:49:e9:ea:da:83:eb:35:06:fe:
f7:ad:b2:f6:d6:79:d8:12:b2:82:fc:5f:50:5c:38:
2c:de:e3:d0:25:6e:96:84:7c:3e:da:74:61:ba:89:
ac:17:a8:84:e4:23:14:36:0f:62:1b:a7:11:ba:ee:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:4F:9B:AF:99:E6:5E:3C:44:49:75:A3:A9:53:6D:DD:A1:45:6C
X509v3 Authority Key Identifier:
keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:b0:04:23:f6:43:89:d1:54:81:41:cf:b7:72:4d:c7:8d:9b:
89:a7:2e:17:65:93:8e:0c:87:4c:a1:0a:bf:0b:6b:65:41:5d:
5f:78:d5:be:9d:e9:25:64:ff:38:d9:16:bc:80:8f:e9:cf:1d:
7a:39:b7:50:d2:c0:fa:91:f7:a7:cf:d6:1b:96:2b:fe:30:f6:
d8:eb:b9:87:7a:82:ee:68:0b:47:76:8d:07:ca:b2:36:0c:99:
a0:aa:45:c8:a8:ce:c3:7a:61:ce:16:5b:1d:4a:83:e3:fb:4e:
fe:07:56:c9:ab:cb:68:ad:d4:c3:f5:c9:15:a7:dc:64:b4:bd:
b7:d5:05:10:72:6c:5c:c1:0a:ef:41:90:5a:34:2e:2f:8f:94:
29:75:28:4e:6c:e9:e6:ca:fb:d2:0d:92:e3:38:94:dc:3d:2f:
92:b8:f4:23:9b:fc:9b:99:9f:e6:0b:03:f6:2a:f4:a1:1c:42:
d8:2c:ae:58:d7:60:9a:80:3e:d8:85:08:29:9a:16:54:36:0f:
27:0a:29:5a:80:77:25:32:72:76:dc:9d:af:c2:fd:f1:1f:8c:
2c:27:59:35:c5:08:36:ab:89:96:42:39:08:0f:60:71:bb:01:
3d:da:f2:a9:9d:5d:da:aa:fc:50:da:1a:4a:e8:55:6b:76:87:
fe:e6:ff:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:39:17 2026 by rpki-client