
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier: oAAg8CyDwSNaxMg2++exi5YVH+GgsmMnVFNEJZ0mn0E=
Subject key identifier: B2:DE:6C:60:49:23:C8:FA:7A:31:2D:A1:55:9E:CC:A4:6C:F9:2E:75
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial: 033A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number: 032B
Signing time: Mon 13 Jul 2026 01:11:04 +0000
Manifest this update: Mon 13 Jul 2026 01:11:03 +0000
Manifest next update: Mon 20 Jul 2026 01:11:03 +0000
Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: AO9ZXDHwX+28GdnY2Z21nqKXsYQlnWkQjAcZCOaipKE=)
2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 01:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Validity
Not Before: Jul 13 01:11:03 2026 GMT
Not After : Jul 20 01:11:03 2026 GMT
Subject: CN=6a543b27-2c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:fc:44:55:5e:a0:2e:a7:8a:0f:c7:c8:b9:
b3:4c:10:83:7a:93:0d:ac:68:57:56:46:f0:36:76:
2b:de:c1:54:20:98:72:5d:08:f1:6d:49:86:4b:45:
7d:4f:0a:90:23:4b:26:96:e4:7f:42:e6:06:a3:05:
6a:52:df:e7:a3:e1:98:c4:f3:22:ff:5b:14:c0:0e:
88:d6:c5:11:f1:02:29:09:5a:32:49:f0:74:2b:ca:
62:77:46:53:01:0e:e9:0f:4e:31:1d:b5:f9:28:36:
b1:02:4f:86:ad:2e:ed:2c:13:ad:47:e6:00:9e:59:
ae:13:67:a2:e0:af:9c:bf:24:db:db:ab:86:57:63:
e6:a7:6e:20:16:93:cc:0c:28:f1:c2:79:01:a4:98:
04:88:00:ff:e3:4b:e9:0d:df:bb:b1:b2:45:df:6e:
9c:b7:69:f5:fc:d4:8e:14:91:90:41:0f:a1:d5:c3:
a6:1b:6c:cf:7a:25:b5:8e:d6:2e:35:c2:f6:fd:5b:
08:af:c6:3e:c3:61:8b:84:83:3c:b2:52:2d:fe:64:
75:54:c3:aa:85:38:8f:20:2c:fe:bb:51:01:71:08:
46:10:90:19:17:ae:f7:85:e6:1e:39:72:0a:20:33:
13:3c:6b:86:46:20:cd:d2:f1:f6:53:35:a1:e9:bc:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:6C:60:49:23:C8:FA:7A:31:2D:A1:55:9E:CC:A4:6C:F9:2E:75
X509v3 Authority Key Identifier:
keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:50:97:25:a0:4a:9b:6b:b3:26:33:1b:77:a0:67:37:ba:c0:
da:b6:1e:73:40:f2:c9:f4:22:c0:ed:66:11:de:fa:e3:8a:22:
21:96:4a:a1:03:4b:8a:2d:a0:84:50:d7:57:01:86:b6:61:3b:
f8:a0:40:aa:ee:72:a4:74:64:fb:b1:ff:1a:77:6b:97:13:57:
6d:bf:1d:54:84:30:15:33:d6:bc:8d:fd:3b:ea:c1:27:30:cb:
7e:b7:52:75:3d:46:9b:77:c1:9e:c5:b0:45:36:a7:64:d7:45:
ba:dd:f9:4f:3c:c7:53:fd:6f:ca:1d:d7:7a:69:58:0d:75:97:
b9:fb:5d:0b:2c:a0:f1:e1:d1:df:28:66:ec:08:13:ee:0b:dc:
87:95:1a:f0:21:ff:91:c8:3e:f5:64:0b:cc:82:f6:7d:88:4a:
0b:3f:af:21:f8:e8:5f:d5:02:47:ee:35:f6:b6:30:de:02:72:
80:7d:a8:e4:4c:f2:97:1b:d5:ac:a6:e6:59:63:e1:76:43:ac:
b8:47:37:90:88:e6:8d:7f:c1:03:3c:a2:dc:2f:4f:3a:0d:76:
65:7c:b7:8c:ee:1d:0e:90:3f:b8:d9:a8:06:07:67:8c:a3:f8:
5a:18:ba:49:29:f6:79:48:d2:dc:11:b6:f5:f0:88:66:30:bc:
da:50:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:52 2026 by rpki-client