
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json)
Hash identifier: ogJqEZvMFQ1HLiQZbHtKVmm96PLlQStVG+ZGl+SI/kI=
Subject key identifier: 4B:53:6C:DF:89:7F:58:1D:CC:0F:B2:24:C1:5B:D3:7A:D8:24:9A:68
Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
Manifest number: 024F
Signing time: Sat 03 Oct 2026 03:08:38 +0000
Manifest this update: Sat 03 Oct 2026 03:08:37 +0000
Manifest next update: Sat 10 Oct 2026 03:08:37 +0000
Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: gavq4il4oYRsZw2ZdspFMkcGeSwALLQtRVMJCVIO5Xo=)
2: 4AB01838FF1D11F0816C691B85EE528E.roa (hash: 73GQqCwii1vmNrsS7r1xrrm5FcLJovRSf9upFdGwKjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Validity
Not Before: Oct 3 03:08:37 2026 GMT
Not After : Oct 10 03:08:37 2026 GMT
Subject: CN=6ac071b6-1d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:30:99:25:29:22:6f:c9:6c:d0:8d:97:a3:
fe:ee:bb:c4:54:7d:09:2c:c7:b7:1d:1b:55:33:02:
b9:3c:2f:2c:a2:65:1e:5d:ff:2d:6d:d6:53:8b:99:
24:1a:75:38:29:c7:cc:c5:70:08:e8:d3:39:68:2e:
a2:49:2f:df:04:73:35:81:f5:03:c3:e0:c1:fa:58:
aa:43:c3:4d:45:6c:f9:92:2e:69:0b:3c:9b:27:ef:
25:2f:83:67:c3:66:a3:63:28:38:4f:a2:bd:a2:17:
0c:50:2f:0a:14:82:17:85:c4:9d:5b:a9:ed:0a:b4:
27:c8:8e:78:a1:e2:0e:e4:9e:a5:e3:f7:3b:25:b2:
df:00:ee:67:7e:46:b4:1a:00:e1:62:e8:ed:8d:02:
ab:eb:cd:59:43:d3:0b:22:8b:02:bc:2f:14:f5:ec:
d8:62:8a:a2:4c:ce:69:63:5a:48:ac:a7:ff:f7:de:
69:d2:39:d9:1b:86:57:ea:93:a7:c5:33:e3:bb:35:
19:95:42:7c:a4:d6:62:30:36:14:8b:68:04:d2:71:
2e:2f:6f:c7:ff:0b:68:cb:b7:7e:05:06:66:da:ec:
bd:0d:46:28:13:72:96:65:50:18:65:67:b6:bb:18:
07:41:fe:95:bf:72:f0:55:83:45:d4:e0:e3:0e:9b:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:6C:DF:89:7F:58:1D:CC:0F:B2:24:C1:5B:D3:7A:D8:24:9A:68
X509v3 Authority Key Identifier:
keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bf:de:41:31:25:6a:6f:38:d5:03:63:ee:2c:67:8a:03:16:
3c:ba:ca:bf:60:fb:82:17:17:2e:da:35:e2:d5:53:12:04:1b:
da:dd:cd:17:1d:ba:dc:8b:84:93:e7:23:5c:15:90:b7:15:6e:
69:8c:ca:ab:6c:76:f1:e2:df:a8:9f:d0:08:a9:55:f4:d1:2a:
ab:7e:a8:15:3e:f6:ef:8b:7d:10:65:b3:ca:d1:a7:57:02:e7:
a3:12:bf:6d:5a:87:c1:77:af:24:39:8c:ed:d3:f4:c1:c5:bd:
6a:a8:f7:f1:46:32:87:68:c6:8b:67:de:f4:cd:1c:0b:50:7c:
25:bd:3e:b9:55:c2:ed:09:b1:7e:e3:16:c9:4a:9a:5a:f2:ad:
30:8a:3a:2d:e4:87:81:f7:87:13:f7:87:79:a9:38:0d:07:82:
0f:76:64:29:87:8f:31:45:ca:ea:79:7d:6a:34:5f:a8:bd:9b:
2d:19:02:bb:c6:b3:8b:6f:e4:27:77:00:66:b5:26:41:79:12:
f5:cf:f4:d1:c3:dd:7b:06:6b:aa:74:8e:20:8d:aa:44:3f:72:
02:47:fd:44:de:04:d1:4e:db:03:9f:df:4e:18:81:e7:f0:ba:
a0:48:95:13:8e:bb:71:fc:55:9a:3f:8c:01:0b:23:49:73:8c:
fc:a4:8e:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0
QjkyQUQ4RDgwHhcNMjYxMDAzMDMwODM3WhcNMjYxMDEwMDMwODM3WjAYMRYwFAYD
VQQDEw02YWMwNzFiNi0xZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTcwmSUpIm/JbNCNl6P+7rvEVH0JLMe3HRtVMwK5PC8somUeXf8tbdZTi5kk
GnU4KcfMxXAI6NM5aC6iSS/fBHM1gfUDw+DB+liqQ8NNRWz5ki5pCzybJ+8lL4Nn
w2ajYyg4T6K9ohcMUC8KFIIXhcSdW6ntCrQnyI54oeIO5J6l4/c7JbLfAO5nfka0
GgDhYujtjQKr681ZQ9MLIosCvC8U9ezYYoqiTM5pY1pIrKf/995p0jnZG4ZX6pOn
xTPjuzUZlUJ8pNZiMDYUi2gE0nEuL2/H/wtoy7d+BQZm2uy9DUYoE3KWZVAYZWe2
uxgHQf6Vv3LwVYNF1ODjDps2hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtTbN+J
f1gdzA+yJMFb03rYJJpoMB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy
NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS
UTZoWkdqZEZwVDVMa3EyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH7/eQTElam841QNj7ixnigMWPLrKv2D7ghcXLto14tVTEgQb2t3NFx263IuE
k+cjXBWQtxVuaYzKq2x28eLfqJ/QCKlV9NEqq36oFT7274t9EGWzytGnVwLnoxK/
bVqHwXevJDmM7dP0wcW9aqj38UYyh2jGi2fe9M0cC1B8Jb0+uVXC7QmxfuMWyUqa
WvKtMIo6LeSHgfeHE/eHeak4DQeCD3ZkKYePMUXK6nl9ajRfqL2bLRkCu8azi2/k
J3cAZrUmQXkS9c/00cPdewZrqnSOII2qRD9yAkf9RN4E0U7bA5/fThiB5/C6oEiV
E467cfxVmj+MAQsjSXOM/KSOMw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:38:21 2026 by rpki-client