
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
File: KQN7v5LysPTDMKHN1KdiVs16VCI.mft (raw, json)
Hash identifier: t9R2p6kiQjEbtq71sL4Oui8l3Dc5L8ZTQG5tLyavWuY=
Subject key identifier: F5:E5:27:9B:E8:B5:79:68:B9:E8:6A:C2:27:07:82:AF:A2:9A:2F:2F
Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22
Certificate issuer: /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
Manifest number: 014C
Signing time: Thu 11 Jun 2026 07:30:13 +0000
Manifest this update: Thu 11 Jun 2026 07:30:12 +0000
Manifest next update: Thu 18 Jun 2026 07:30:12 +0000
Files and hashes: 1: KQN7v5LysPTDMKHN1KdiVs16VCI.crl (hash: LFUHd0oxQLvkbIH9nmBFPcEPN05k/d+10MhGetgMt7k=)
2: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (hash: 1xxchiebCxLNftly6au7Pkd2xXnWXWVrUcEG++FarVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl
rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 07:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B89, serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
Validity
Not Before: Jun 11 07:30:12 2026 GMT
Not After : Jun 18 07:30:12 2026 GMT
Subject: CN=6a2a6404-665e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:d4:b2:b0:a2:1b:e8:8a:88:08:d6:ea:2b:
c8:ec:40:9b:9a:00:42:b4:4b:39:6f:61:84:f7:7f:
f8:5c:ef:5b:74:3c:aa:2d:a4:e1:5c:6b:fe:da:37:
0b:69:07:4f:97:47:97:3a:25:98:62:34:e7:df:0c:
9a:c9:2e:7d:a1:25:2d:dc:94:cb:2f:e1:90:f2:b7:
c4:4a:51:26:47:9b:46:7e:1b:89:43:4f:66:30:fe:
6d:89:26:61:c8:e5:56:b6:6b:f3:86:37:08:85:3c:
75:ba:ec:2f:aa:f5:c6:c6:96:e2:52:e4:58:81:24:
a3:73:5f:7d:e4:35:19:6a:00:fe:ff:76:a4:a5:7e:
00:87:a3:18:8c:42:8b:48:15:b3:99:47:03:e5:d8:
08:cc:42:76:da:c6:be:6b:18:c5:d3:21:42:06:f3:
90:ed:cf:14:73:b8:2c:f4:1a:5e:b2:8b:c7:91:3c:
05:d5:4e:7c:74:9d:ec:c3:1d:ff:0c:e1:28:4f:8a:
e4:86:c3:18:78:fe:99:88:3a:94:aa:2f:13:a2:ed:
03:72:b8:78:5c:46:98:b0:09:ce:fa:2e:1f:f8:96:
d3:73:39:50:5f:9a:ec:e9:90:12:79:c3:2c:f9:ed:
c7:6c:77:6e:56:f9:85:cf:4c:54:62:21:95:49:ec:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E5:27:9B:E8:B5:79:68:B9:E8:6A:C2:27:07:82:AF:A2:9A:2F:2F
X509v3 Authority Key Identifier:
keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:18:f9:85:4a:c6:ef:2c:aa:f1:dc:64:e8:52:00:6e:ff:b0:
cc:de:f5:8e:80:dd:07:28:12:72:d8:95:45:b5:e3:a0:b1:52:
32:c7:5b:ea:ce:27:df:3b:bf:f2:e2:3b:ca:5a:39:33:c1:a7:
e4:65:40:fe:f1:10:07:3c:ad:fa:d7:6b:d8:66:b1:f9:bd:9e:
9c:bc:9d:d5:46:22:5b:68:4e:35:33:f4:b4:9b:84:87:67:e7:
e3:dd:dd:cc:5f:96:b8:31:ed:5f:04:d6:2c:9d:ba:a6:61:3c:
4b:ac:4a:87:2a:27:1c:8e:7c:03:39:e9:28:a3:78:40:83:b5:
7a:f3:24:34:56:ad:65:5d:ab:62:96:2d:6b:6d:d2:cf:37:fb:
0a:5f:cb:0e:da:f5:a0:72:5a:66:f1:5e:43:3e:04:94:54:f5:
1c:bb:41:93:3a:33:f7:11:2f:df:ac:de:a6:b2:74:03:54:ba:
b2:b0:4a:11:d2:69:e6:9f:b1:b7:2a:ea:6d:bf:eb:a1:6e:72:
fe:37:82:c2:e7:76:25:83:7a:5d:48:2b:01:b6:ab:67:dc:0f:
70:60:ed:9d:e2:9d:08:68:fa:1e:21:71:b3:53:2f:fd:09:ed:
be:d0:10:d6:bb:0a:56:dd:88:f0:64:7e:a0:93:af:00:cf:2e:
e9:b5:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:10:33 2026 by rpki-client