
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json)
Hash identifier: Bt4zkva+Ao/Y5E/+iZtOpXeDOvwNf8FfDlfifHJiHuQ=
Subject key identifier: C5:26:36:6D:73:1C:E9:85:78:86:0E:16:15:AE:8D:D1:FB:13:4E:51
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
Manifest number: 0186
Signing time: Fri 17 Apr 2026 04:16:06 +0000
Manifest this update: Fri 17 Apr 2026 04:16:05 +0000
Manifest next update: Fri 24 Apr 2026 04:16:05 +0000
Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: Zn5rXbHP8idu9UlthlK0xRAzQPW/qCPoAnocPlJDFnQ=)
2: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: tehmXdSXWDxQ3HwVAZbpjn22MNGQBxQcNE9cFpMit6U=)
3: 56C9937C28C911F086331776C4F9AE02.roa (hash: JxwdiP8Pc7CiVQDzrJXTJybxsA7vxegE08o3FUjWbHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Validity
Not Before: Apr 17 04:16:05 2026 GMT
Not After : Apr 24 04:16:05 2026 GMT
Subject: CN=69e1b406-64b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:e9:60:38:8b:07:06:03:08:10:85:eb:51:
44:62:cf:c3:e3:9b:9e:10:20:3e:15:75:52:d0:e0:
bb:c0:cd:2e:ef:d8:6e:1c:b8:57:67:32:28:6c:31:
38:e0:2e:c2:c9:4c:7f:f6:86:fc:b5:62:f9:f4:9e:
08:4b:4d:91:24:fd:9d:b9:94:1a:e1:ef:af:4d:22:
d1:0d:d3:e4:38:c5:78:3c:3c:49:b9:30:4b:ba:91:
27:c3:e3:d0:a2:ad:02:bb:e6:1e:5a:85:7f:0b:91:
de:bf:13:62:e3:14:12:67:84:24:a5:3a:43:e9:f7:
d8:00:d9:46:67:76:01:3f:7e:e5:3f:f0:d4:04:55:
96:76:d0:ea:87:55:bf:a2:13:74:64:72:35:78:17:
ae:a8:88:c7:2d:81:fb:ca:1c:bf:85:8b:38:f3:df:
c6:52:ba:83:4a:40:57:bd:7e:9b:4b:98:41:2b:df:
c3:cc:e2:ac:7d:7d:64:43:fe:47:dc:15:b3:26:c0:
58:85:e0:ae:1c:b8:58:81:bc:83:c2:6e:e3:ba:c6:
32:6a:66:af:1d:81:79:41:53:09:b7:11:50:5c:3e:
4c:60:28:49:e6:95:69:ab:b8:e6:3d:fd:29:fb:4d:
02:71:8e:e5:08:f9:c6:e5:b4:2f:69:cf:81:9b:e8:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:36:6D:73:1C:E9:85:78:86:0E:16:15:AE:8D:D1:FB:13:4E:51
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:88:76:d7:7b:2c:d8:72:26:7a:4e:4a:24:f2:76:bf:87:
d7:a4:16:8b:b1:e7:9a:81:99:59:bb:47:40:7d:fe:4a:02:cf:
44:9d:c7:74:5e:83:22:36:b6:78:4f:1e:1b:e2:2b:87:4b:bc:
12:aa:e9:84:12:0b:9c:e0:6d:cc:24:4b:18:02:c3:ce:9a:89:
11:34:23:98:69:17:aa:51:ee:84:cb:6f:3f:9d:29:df:1b:e3:
cf:3e:07:dd:71:9f:23:f5:ad:c8:c4:c4:cb:d3:cd:ad:01:0a:
1e:2b:16:5c:bb:21:8a:a7:a6:28:6f:6d:0e:03:c9:28:48:16:
4f:2c:74:05:47:22:df:49:50:23:2b:41:30:a4:f1:ba:65:ce:
7b:78:3a:86:7a:eb:cf:1b:4e:3c:03:51:dd:a4:34:00:68:f4:
dc:c0:01:5f:b0:97:d1:69:4f:e8:c1:48:eb:2c:ff:03:68:3e:
bc:8f:14:45:44:cd:d0:91:57:4a:a1:95:5d:3a:1a:bc:3e:49:
45:c6:52:81:31:9c:90:f5:07:da:44:76:41:70:f0:de:b0:b6:
27:9c:b4:57:26:29:c6:95:c1:43:9b:97:e9:b5:d1:f8:fe:21:
91:67:8a:a7:b4:1d:95:d2:a4:fc:b7:f1:8b:ad:fa:5e:0a:9c:
ce:a2:7b:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG
MkE1RjZGQkIwHhcNMjYwNDE3MDQxNjA1WhcNMjYwNDI0MDQxNjA1WjAYMRYwFAYD
VQQDEw02OWUxYjQwNi02NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi4LpYDiLBwYDCBCF61FEYs/D45ueECA+FXVS0OC7wM0u79huHLhXZzIobDE4
4C7CyUx/9ob8tWL59J4IS02RJP2duZQa4e+vTSLRDdPkOMV4PDxJuTBLupEnw+PQ
oq0Cu+YeWoV/C5HevxNi4xQSZ4QkpTpD6ffYANlGZ3YBP37lP/DUBFWWdtDqh1W/
ohN0ZHI1eBeuqIjHLYH7yhy/hYs489/GUrqDSkBXvX6bS5hBK9/DzOKsfX1kQ/5H
3BWzJsBYheCuHLhYgbyDwm7jusYyamavHYF5QVMJtxFQXD5MYChJ5pVpq7jmPf0p
+00CcY7lCPnG5bQvac+Bm+gIrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUmNm1z
HOmFeIYOFhWujdH7E05RMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD
RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt
SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARASIdtd7LNhyJnpOSiTydr+H16QWi7HnmoGZWbtHQH3+SgLPRJ3HdF6DIja2
eE8eG+Irh0u8EqrphBILnOBtzCRLGALDzpqJETQjmGkXqlHuhMtvP50p3xvjzz4H
3XGfI/WtyMTEy9PNrQEKHisWXLshiqemKG9tDgPJKEgWTyx0BUci30lQIytBMKTx
umXOe3g6hnrrzxtOPANR3aQ0AGj03MABX7CX0WlP6MFI6yz/A2g+vI8URUTN0JFX
SqGVXToavD5JRcZSgTGckPUH2kR2QXDw3rC2J5y0VyYpxpXBQ5uX6bXR+P4hkWeK
p7QdldKk/Lfxi636XgqczqJ70Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:27 2026 by rpki-client