
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
File: kQglePceS4YFfcPrBwP-ZYnmaJE.mft (raw, json)
Hash identifier: QcCa8Qi44UsKbtg7f3XoIin0Ir/WYSwObtXze0LJFM0=
Subject key identifier: 71:6E:F8:B9:64:24:18:B2:41:9B:D8:7E:FB:3D:2E:7E:3B:D3:F4:E4
Authority key identifier: 91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
Certificate issuer: /CN=A91BC039/serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
Manifest number: FA
Signing time: Mon 02 Mar 2026 23:27:15 +0000
Manifest this update: Mon 02 Mar 2026 23:27:14 +0000
Manifest next update: Mon 09 Mar 2026 23:27:14 +0000
Files and hashes: 1: kQglePceS4YFfcPrBwP-ZYnmaJE.crl (hash: 5c4ULm/Z/UvUQjUVUUoR68TDjFoKRAIOAgo4oXJCO/E=)
2: 1167F6B2A18211EFA7475221C4F9AE02.roa (hash: YCpUxQ8dgkmMh3e5UHsZ7Ir2L2aOgpsDHkfqNgWqSFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 23:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC039, serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Validity
Not Before: Mar 2 23:27:14 2026 GMT
Not After : Mar 9 23:27:14 2026 GMT
Subject: CN=69a61cd3-1f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:39:d7:80:68:5b:0a:ba:20:ea:e1:3e:b0:
a5:fb:dc:2b:d8:04:80:60:6f:07:43:ac:ae:a2:a9:
51:2a:aa:2a:34:88:cc:11:b9:b8:6b:54:c8:3e:5f:
dd:6c:49:16:fe:56:75:c4:93:38:5f:12:7e:6e:b3:
16:05:2b:ce:c8:04:03:64:73:4b:f9:8e:c2:c6:7b:
5f:2d:d3:46:75:20:07:fe:52:24:e6:95:69:6e:b2:
bc:c8:f5:d9:12:1d:af:41:27:c2:55:12:5b:24:c6:
c9:e5:a2:be:28:4f:b9:44:69:4e:37:a0:0b:37:7b:
9f:7e:dd:2d:b0:a2:aa:01:fa:35:96:40:29:b7:08:
f2:79:68:e8:ee:6c:c5:b8:64:ce:a1:ad:92:a4:86:
4f:e7:71:fc:b9:94:2e:34:04:e7:1f:7d:6b:2d:c6:
e2:b5:e1:0a:8d:40:4d:4c:3c:10:d5:77:36:ec:54:
8c:bb:5f:41:98:cc:2d:0f:52:6b:43:52:c8:0d:b0:
15:ee:67:ac:37:6f:f4:96:b0:f5:d3:fb:79:77:a6:
f8:92:ec:17:fd:80:6b:4d:9f:80:0f:89:4d:f0:2c:
2f:a7:32:b3:1c:3c:b6:6d:9e:78:13:a9:9e:80:4f:
75:5d:1f:d8:7c:be:30:ac:1a:71:3b:3a:79:11:a2:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6E:F8:B9:64:24:18:B2:41:9B:D8:7E:FB:3D:2E:7E:3B:D3:F4:E4
X509v3 Authority Key Identifier:
keyid:91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8b:3c:92:f5:c8:b7:1c:e0:6e:11:b1:ac:2a:25:d9:c5:f8:
27:54:30:01:4a:11:d0:10:02:ce:e5:7d:d3:af:18:23:27:93:
60:8f:d6:f1:3c:e7:5d:5a:d3:58:72:81:09:a0:77:0a:76:59:
7b:a5:c3:c1:e7:98:49:d2:6c:a7:45:96:68:73:6b:be:70:36:
69:d3:ef:35:46:93:9f:d2:b0:5e:c4:4b:ad:bf:d5:31:8e:7e:
91:d4:10:d4:42:6b:54:c0:1b:a6:59:e6:65:fb:30:d6:d2:b7:
24:86:90:58:10:b5:81:23:30:51:7c:8b:02:5d:2b:1c:c5:91:
b6:6f:62:21:29:ba:5a:df:ef:f8:8b:8f:c8:07:0c:f7:92:48:
90:a1:10:91:be:c2:90:8e:d3:e6:ce:fa:be:1d:1e:24:a2:7b:
50:90:38:db:b8:06:32:01:33:9d:c2:87:6e:a9:88:48:dd:7c:
7a:55:28:f6:c0:0b:6c:85:63:1e:25:60:a5:f0:d1:d6:b7:56:
a4:a8:24:77:36:cf:4e:8b:24:7d:0e:b9:a4:19:f4:5d:5b:3a:
61:d6:7e:ef:db:35:e1:da:49:b1:96:22:21:9a:51:66:21:8f:
4d:ab:87:79:fa:ed:12:07:eb:bb:0a:8b:53:34:33:09:1c:14:
b3:1f:09:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMwMzkxMTAvBgNVBAUTKDkxMDgyNTc4RjcxRTRCODYwNTdEQzNFQjA3MDNGRTY1
ODlFNjY4OTEwHhcNMjYwMzAyMjMyNzE0WhcNMjYwMzA5MjMyNzE0WjAYMRYwFAYD
VQQDEw02OWE2MWNkMy0xZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnf0514BoWwq6IOrhPrCl+9wr2ASAYG8HQ6yuoqlRKqoqNIjMEbm4a1TIPl/d
bEkW/lZ1xJM4XxJ+brMWBSvOyAQDZHNL+Y7CxntfLdNGdSAH/lIk5pVpbrK8yPXZ
Eh2vQSfCVRJbJMbJ5aK+KE+5RGlON6ALN3ufft0tsKKqAfo1lkAptwjyeWjo7mzF
uGTOoa2SpIZP53H8uZQuNATnH31rLcbiteEKjUBNTDwQ1Xc27FSMu19BmMwtD1Jr
Q1LIDbAV7mesN2/0lrD10/t5d6b4kuwX/YBrTZ+AD4lN8CwvpzKzHDy2bZ54E6me
gE91XR/YfL4wrBpxOzp5EaKAGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFu+Llk
JBiyQZvYfvs9Ln470/TkMB8GA1UdIwQYMBaAFJEIJXj3HkuGBX3D6wcD/mWJ5miR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS8xNTM0QTA1QUEx
NzQxMUVGQkY2MTY2MjRDNEY5QUUwMi9rUWdsZVBjZVM0WUZmY1ByQndQLVpZbm1h
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tRZ2xlUGNlUzRZRmZjUHJCd1AtWllubWFKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzAzOS8xNTM0QTA1QUExNzQxMUVGQkY2MTY2MjRDNEY5QUUwMi9rUWdsZVBjZVM0
WUZmY1ByQndQLVpZbm1hSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoIs8kvXItxzgbhGxrCol2cX4J1QwAUoR0BACzuV9068YIyeTYI/W8TznXVrT
WHKBCaB3CnZZe6XDweeYSdJsp0WWaHNrvnA2adPvNUaTn9KwXsRLrb/VMY5+kdQQ
1EJrVMAbplnmZfsw1tK3JIaQWBC1gSMwUXyLAl0rHMWRtm9iISm6Wt/v+IuPyAcM
95JIkKEQkb7CkI7T5s76vh0eJKJ7UJA427gGMgEzncKHbqmISN18elUo9sALbIVj
HiVgpfDR1rdWpKgkdzbPToskfQ65pBn0XVs6YdZ+79s14dpJsZYiIZpRZiGPTauH
efrtEgfruwqLUzQzCRwUsx8J2w==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:52 2026 by rpki-client