
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
File: KQN7v5LysPTDMKHN1KdiVs16VCI.mft (raw, json)
Hash identifier: jbDR/m6gbKNRCxj29j17z47VP62LCM4aYaYSkARSUSI=
Subject key identifier: 32:11:94:0A:06:05:76:67:08:63:1C:AE:BE:DB:28:AC:CC:1C:25:8B
Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22
Certificate issuer: /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
Manifest number: 0181
Signing time: Wed 23 Sep 2026 04:27:22 +0000
Manifest this update: Wed 23 Sep 2026 04:27:22 +0000
Manifest next update: Wed 30 Sep 2026 04:27:22 +0000
Files and hashes: 1: KQN7v5LysPTDMKHN1KdiVs16VCI.crl (hash: k/BD6NsydRZBI3BYWfw83AuF44vMmgVGCGqW1eUuKKk=)
2: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (hash: 1xxchiebCxLNftly6au7Pkd2xXnWXWVrUcEG++FarVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl
rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B89, serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
Validity
Not Before: Sep 23 04:27:22 2026 GMT
Not After : Sep 30 04:27:22 2026 GMT
Subject: CN=6ab3552a-d798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:e7:0d:6a:3e:11:92:74:0b:66:19:1f:f2:
b7:fe:52:5c:c1:f5:1d:c1:1e:8b:55:e7:6a:04:9a:
07:30:a5:4b:6d:b7:85:20:1f:66:79:77:ac:4d:47:
2c:d8:09:5f:0f:ad:20:04:b5:b0:d4:01:67:5a:3b:
08:5e:25:9a:7d:b7:35:a3:d7:f7:7b:45:7b:6d:aa:
1d:16:cc:4b:1a:eb:1e:f7:7c:2e:ac:12:59:f5:c2:
ce:5b:3b:02:16:c2:5d:d4:b0:69:7a:f2:9c:cf:66:
b1:01:7e:48:52:cd:be:78:f8:54:d6:63:59:50:ab:
ef:fe:76:69:a9:20:3d:2c:53:a2:da:f2:69:15:63:
74:dc:5c:44:ad:63:2a:7d:d3:a6:7d:be:50:ce:f5:
00:3e:73:20:80:50:8b:bf:40:25:8f:fc:90:df:90:
80:6e:92:d3:57:8c:9f:ec:cb:62:af:79:1a:d0:60:
63:fc:ee:94:9e:e1:e2:14:b6:c7:92:c6:be:c4:21:
0b:e4:b5:39:0e:6c:33:10:fd:a6:61:06:c1:47:6b:
52:23:2c:05:df:60:ad:2a:6a:80:01:de:6b:76:7c:
97:fe:68:d5:b0:31:55:d2:e7:d2:9f:48:eb:91:80:
b0:3a:59:db:2c:70:d4:17:25:6c:3a:5f:22:96:4f:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:11:94:0A:06:05:76:67:08:63:1C:AE:BE:DB:28:AC:CC:1C:25:8B
X509v3 Authority Key Identifier:
keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:62:2d:d3:6b:a2:0d:a6:a3:1b:f1:23:fd:1e:8c:4a:cf:99:
eb:5e:b9:bb:26:5b:25:17:75:e5:37:6f:cf:fe:33:ab:a2:8f:
c7:2d:89:cf:10:57:cf:3b:d9:72:f9:6d:73:23:af:14:88:9a:
be:d4:ae:81:11:67:84:b2:e9:80:9b:4b:ce:3a:d4:f3:4c:b1:
05:5b:7e:88:2c:06:0b:fc:29:6f:4e:0b:f4:fc:41:12:de:ff:
3d:89:65:30:83:23:3c:07:be:ab:61:6c:3f:ad:c1:52:35:61:
2d:3b:23:6f:1e:22:44:e8:1c:0d:25:0d:c3:7e:0e:fb:b7:2d:
86:73:b0:f6:b0:d0:6b:7e:a1:e8:6d:8f:0e:94:1f:24:0e:b7:
fa:77:72:60:5e:fa:ea:19:65:a0:bf:a4:b2:15:a9:b2:29:95:
53:a4:c1:df:43:57:ee:78:f8:cd:c4:cb:53:f1:6d:67:c8:3a:
78:0a:6a:f0:4f:7e:7b:ef:a6:46:d7:6f:ff:3c:98:77:13:d3:
79:1f:44:b9:3b:13:5e:c4:d9:16:25:8b:a6:c3:d3:9b:8c:59:
44:2e:5b:40:20:e4:38:d4:d5:21:e1:36:22:41:17:6e:f4:59:
1a:f3:8a:36:02:9b:84:b9:44:5e:58:80:ed:2d:26:84:66:5d:
7b:85:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:29:24 2026 by rpki-client