
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json)
Hash identifier: xAm1Bc57dcaoXCws9zjNUXzkN1JwwHf4lKmgHlxhaQg=
Subject key identifier: 2C:23:3C:AD:C5:F9:FE:6D:FA:04:D2:88:55:CE:5A:CE:5A:A0:65:4D
Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
Manifest number: 0238
Signing time: Wed 19 Aug 2026 03:18:22 +0000
Manifest this update: Wed 19 Aug 2026 03:18:22 +0000
Manifest next update: Wed 26 Aug 2026 03:18:22 +0000
Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: md/NswwCuz8bahvwUVhESNed1TTzmJf0FAGNyztRsi4=)
2: 4AB01838FF1D11F0816C691B85EE528E.roa (hash: 73GQqCwii1vmNrsS7r1xrrm5FcLJovRSf9upFdGwKjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Validity
Not Before: Aug 19 03:18:22 2026 GMT
Not After : Aug 26 03:18:22 2026 GMT
Subject: CN=6a85207e-2334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5d:ec:44:6c:ea:de:05:8c:2a:e4:06:fd:62:
4f:fb:ac:a2:08:ad:6a:76:f4:49:12:7b:98:e3:3b:
4e:f8:63:95:fb:94:4a:54:94:f6:bf:59:e5:4b:65:
ea:79:c0:15:ae:16:44:78:c8:32:94:9c:9e:96:cb:
34:8c:cf:f5:04:dc:37:43:5f:da:24:9f:1a:75:c1:
6c:6a:12:10:f9:85:97:df:11:0d:47:f7:3b:9b:d9:
d2:bc:1e:85:8d:ee:e5:c6:7e:b0:f0:20:63:91:b2:
57:87:31:e7:d9:5b:93:39:33:d0:d7:de:ea:ff:38:
27:ce:41:30:44:d4:7f:2f:f9:85:f1:ac:7d:6c:65:
d2:59:f6:d2:8b:c1:ec:97:47:02:0d:be:1f:c1:07:
8e:db:87:1b:47:7a:a7:21:03:fb:ab:d8:17:8e:c3:
54:bc:c2:77:bf:b5:3d:12:49:a3:99:b3:ea:bd:7a:
7f:fc:3f:31:d1:c1:27:0c:c6:34:5b:77:90:ac:38:
56:66:a3:2f:79:6d:02:6a:20:5e:f2:65:b0:72:8c:
fc:8f:69:81:68:5c:13:38:64:4e:f1:94:15:1e:aa:
f9:11:b1:2d:bf:d7:7e:29:ad:34:37:29:85:05:04:
36:ed:0b:f2:31:c7:34:14:95:24:b3:c0:38:00:c2:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:23:3C:AD:C5:F9:FE:6D:FA:04:D2:88:55:CE:5A:CE:5A:A0:65:4D
X509v3 Authority Key Identifier:
keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:13:39:f8:a3:7e:45:3d:25:fa:3c:4d:f1:9c:6f:ec:15:9f:
e5:63:f2:33:19:f8:78:1a:a1:d0:d7:39:bf:14:3b:67:7c:be:
bb:04:bc:b8:23:fd:61:4d:d7:87:e9:68:0d:c8:d2:6f:1e:89:
0c:aa:c6:50:84:18:46:ee:10:ed:04:ba:6b:ea:c0:b8:44:23:
89:1a:69:94:70:bf:6c:51:96:57:e8:96:9b:c8:86:be:8c:90:
5d:75:2f:cd:7f:f7:08:fd:3f:38:70:96:61:05:56:80:97:58:
b0:0f:c8:e3:1b:cd:22:ef:07:69:bc:ac:2b:6b:47:ed:c2:73:
37:cc:7f:7f:76:01:a9:9d:37:a5:8b:a2:7d:29:f3:04:b7:3e:
b0:f9:00:68:70:d0:82:fd:a5:a1:11:bb:7c:f3:33:3e:d0:10:
fe:e1:44:ac:13:8f:fb:8d:e0:81:ce:ae:35:ea:77:ea:33:9a:
f0:ed:c1:e4:21:b5:35:f5:2b:b1:84:8e:d9:c1:ab:76:97:32:
56:4c:fa:0f:0c:4d:90:f4:bb:23:d3:cb:40:b1:42:9c:15:9d:
e7:b9:f8:da:59:f6:8e:37:b2:98:0c:a9:7d:d6:8c:9b:ea:77:
a1:41:03:a4:80:f2:ed:09:69:10:8f:5b:ad:f7:8f:ed:71:aa:
45:89:32:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0
QjkyQUQ4RDgwHhcNMjYwODE5MDMxODIyWhcNMjYwODI2MDMxODIyWjAYMRYwFAYD
VQQDEw02YTg1MjA3ZS0yMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg13sRGzq3gWMKuQG/WJP+6yiCK1qdvRJEnuY4ztO+GOV+5RKVJT2v1nlS2Xq
ecAVrhZEeMgylJyelss0jM/1BNw3Q1/aJJ8adcFsahIQ+YWX3xENR/c7m9nSvB6F
je7lxn6w8CBjkbJXhzHn2VuTOTPQ197q/zgnzkEwRNR/L/mF8ax9bGXSWfbSi8Hs
l0cCDb4fwQeO24cbR3qnIQP7q9gXjsNUvMJ3v7U9EkmjmbPqvXp//D8x0cEnDMY0
W3eQrDhWZqMveW0CaiBe8mWwcoz8j2mBaFwTOGRO8ZQVHqr5EbEtv9d+Ka00NymF
BQQ27QvyMcc0FJUks8A4AMLUzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwjPK3F
+f5t+gTSiFXOWs5aoGVNMB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy
NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS
UTZoWkdqZEZwVDVMa3EyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASRM5+KN+RT0l+jxN8Zxv7BWf5WPyMxn4eBqh0Nc5vxQ7Z3y+uwS8uCP9YU3X
h+loDcjSbx6JDKrGUIQYRu4Q7QS6a+rAuEQjiRpplHC/bFGWV+iWm8iGvoyQXXUv
zX/3CP0/OHCWYQVWgJdYsA/I4xvNIu8HabysK2tH7cJzN8x/f3YBqZ03pYuifSnz
BLc+sPkAaHDQgv2loRG7fPMzPtAQ/uFErBOP+43ggc6uNep36jOa8O3B5CG1NfUr
sYSO2cGrdpcyVkz6DwxNkPS7I9PLQLFCnBWd57n42ln2jjeymAypfdaMm+p3oUED
pIDy7QlpEI9brfeP7XGqRYky/g==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:11 2026 by rpki-client