
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json)
Hash identifier: TVx09EZdeUrXfO//rzKb8kUef3+g2cQ26OeQnKDH8Bs=
Subject key identifier: 3F:58:FC:28:B8:07:F1:50:73:41:44:1C:A7:62:C4:B1:2F:FE:CE:B0
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
Manifest number: 01B5
Signing time: Fri 17 Jul 2026 05:03:10 +0000
Manifest this update: Fri 17 Jul 2026 05:03:09 +0000
Manifest next update: Fri 24 Jul 2026 05:03:09 +0000
Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: Nq9LNyCzySRjmRg5h34kVOk4d+Hc1GV+RLi5VzVOKPc=)
2: 56C9937C28C911F086331776C4F9AE02.roa (hash: JxwdiP8Pc7CiVQDzrJXTJybxsA7vxegE08o3FUjWbHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Validity
Not Before: Jul 17 05:03:09 2026 GMT
Not After : Jul 24 05:03:09 2026 GMT
Subject: CN=6a59b78d-463f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:9e:04:1d:04:7a:8f:66:f7:30:b1:e2:f4:
53:b7:bc:7a:e6:11:27:ec:7c:d9:a6:e9:62:73:8b:
1f:01:5b:d6:6d:ec:27:0d:2d:92:03:42:23:dd:24:
c7:e7:59:a6:80:32:d1:4d:19:c9:ae:c9:37:62:e1:
6c:2a:5b:b2:90:86:54:ae:07:9e:e4:d4:e7:a1:9f:
b7:10:19:0a:e1:79:b1:a3:35:33:41:a5:38:a9:ad:
2a:98:69:11:60:d9:ab:01:50:df:d2:d3:0c:15:99:
d2:b7:e2:da:eb:17:2e:46:fc:8f:ed:06:0d:95:91:
78:b3:48:52:99:59:f3:c5:66:01:b6:39:17:91:3c:
ce:52:2e:0b:e7:58:60:e0:fb:99:16:94:69:58:b6:
00:91:a5:c7:6e:31:9c:9d:8f:71:ab:ad:a2:b4:7d:
1b:28:b9:8f:8a:5d:53:68:da:8f:17:22:28:37:b7:
16:c8:c1:15:4c:28:77:7c:29:f2:cb:73:9a:c5:6c:
35:62:3c:fb:67:45:b9:ef:f5:a8:46:50:b9:53:fb:
01:1f:5c:3a:16:0b:71:b7:4f:d8:1f:4d:59:53:2e:
96:b6:a0:70:46:ea:88:c8:30:83:8c:61:d0:86:3c:
0f:09:ed:92:77:5c:16:af:f0:00:dc:f9:33:36:3e:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:58:FC:28:B8:07:F1:50:73:41:44:1C:A7:62:C4:B1:2F:FE:CE:B0
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:01:d9:21:31:d6:fd:a3:3c:1d:9b:58:b4:46:76:ea:55:8a:
7a:18:38:1f:ec:80:42:09:5c:d3:58:af:bd:74:01:c5:74:42:
e6:ae:bb:57:4f:f4:2a:04:55:0d:19:82:36:04:8c:9e:5e:bf:
37:5a:bb:83:6e:2d:68:1d:cb:9a:05:68:fb:a0:4b:40:f0:95:
f7:4a:33:2a:d5:73:77:9f:0a:6f:f3:81:80:7b:97:44:7b:5c:
81:e5:dc:6f:6d:02:ce:bf:4c:f7:07:9b:f8:62:c5:d0:b3:9c:
84:bb:9f:f2:74:4a:a9:f9:ef:5c:2a:7c:b6:1f:80:74:ba:c0:
d9:d9:4a:e1:6d:71:6e:a6:9b:94:18:7a:fc:af:21:ee:d8:38:
24:04:57:b6:1d:1b:36:05:fd:90:2a:af:34:2d:01:2c:de:fe:
f7:3c:14:7d:33:38:d6:24:56:5b:70:ff:23:29:27:bd:98:cc:
d4:7e:72:4f:07:42:1b:fa:bb:59:15:11:af:a8:c2:e6:6f:18:
dd:96:c4:0e:3b:f3:e6:46:8b:5f:ae:b9:3d:db:2a:d6:4d:8a:
14:ba:00:f8:b7:fd:91:96:db:c0:2f:58:d1:0d:70:c9:73:e7:
eb:ae:83:df:41:be:32:c4:9b:a2:e0:ab:48:34:b2:c6:59:17:
87:62:4f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:15 2026 by rpki-client