
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json)
Hash identifier: Qt6Y3KNaZY+v0gpm/1/brDykA+7Y4tTf+RFK4czAJc4=
Subject key identifier: CA:73:B9:97:D1:DA:E0:2B:B6:1B:1B:0C:A6:07:BC:61:97:E7:55:A5
Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Certificate serial: 0498
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
Manifest number: 048A
Signing time: Sat 04 Apr 2026 23:49:45 +0000
Manifest this update: Sat 04 Apr 2026 23:49:44 +0000
Manifest next update: Sat 11 Apr 2026 23:49:44 +0000
Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: obSbExwXPq/A7GtF6YzQir3VZD5bCLGet59QiYBCKjo=)
2: 8AB7936E5FF111F092635949C4F9AE02.roa (hash: B+tg3MGzU6RZBeuCdNyRx0cM0Jlgf3lhdx/0R3MqTSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176 (0x498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Validity
Not Before: Apr 4 23:49:44 2026 GMT
Not After : Apr 11 23:49:44 2026 GMT
Subject: CN=69d1a399-7232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:26:72:0b:f7:02:77:f4:61:15:24:94:2a:
a9:64:6b:d4:39:ea:e1:cc:29:01:ea:9b:50:4a:40:
d3:3b:b2:1b:4e:e8:17:ed:6d:83:8d:1b:74:6f:f4:
b0:1e:d7:e9:40:7c:92:75:14:38:5b:cd:73:68:14:
47:f4:35:fa:cd:23:ff:28:a1:a3:7b:d6:2a:07:fa:
30:77:d4:9a:41:fd:c1:e9:e9:1d:94:cb:b1:63:fa:
8e:d9:d7:9a:b8:88:22:02:73:f7:f6:3b:2a:4a:20:
57:f2:f5:77:51:04:3b:ac:5f:bd:a2:3d:be:38:02:
5e:8b:5b:e5:cc:b3:68:8c:b5:33:03:8e:45:ad:06:
b8:65:0c:e0:89:6b:07:fa:44:43:49:63:0d:89:74:
a3:c8:ac:7e:05:1d:73:27:c5:d8:18:82:70:e0:61:
9a:77:5e:26:d4:c5:38:c4:cd:4f:5e:0e:64:a7:45:
66:2e:68:ed:0d:28:a3:32:9a:1b:28:c3:6f:4b:3e:
b4:2a:99:30:68:00:aa:db:4a:5a:a0:71:b4:49:77:
64:f6:a1:9f:11:13:e3:c9:40:b3:ef:19:15:b1:84:
25:39:d1:19:f6:38:83:6d:9a:ec:51:a6:64:52:c3:
b6:8b:a5:0e:e1:a5:a5:5d:26:7a:df:1c:f0:8f:b1:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:B9:97:D1:DA:E0:2B:B6:1B:1B:0C:A6:07:BC:61:97:E7:55:A5
X509v3 Authority Key Identifier:
keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:19:13:08:72:27:da:3e:67:cf:73:be:57:a5:bf:1d:3a:9f:
73:07:4c:66:48:6b:d1:4a:e6:50:02:db:57:6b:e2:d5:f8:78:
59:dc:eb:cd:ed:cc:3b:13:5c:df:37:0e:aa:01:04:ad:54:06:
8c:9b:de:e8:03:c7:c1:f5:15:38:5d:c7:bc:2d:13:a6:ae:88:
5f:f1:05:c8:6a:86:42:08:63:7e:f6:66:57:19:ed:be:de:42:
75:ff:37:cc:9d:37:57:7e:d8:26:4a:02:db:31:f6:19:56:77:
45:a3:8b:18:95:c8:59:35:6f:98:34:46:bb:67:06:9d:fc:2f:
62:cd:d2:a2:32:e4:dd:06:af:d8:5d:0b:24:50:5f:27:a1:a1:
ea:62:e3:aa:ab:c6:2d:08:e9:7e:75:c0:16:10:2b:b3:71:4f:
8f:75:a7:92:0c:53:4e:86:9c:de:7e:3d:4a:39:98:4d:4f:6f:
bf:3e:9a:dc:41:9b:97:0a:6f:a0:66:38:cb:36:b6:49:43:f2:
ca:c2:38:91:f5:e5:92:ba:91:f5:1f:ee:82:60:75:4d:2b:ca:
14:bd:a5:0e:41:cb:9f:0f:f6:c4:52:7b:b8:bd:4d:b7:de:80:
27:0a:27:fa:64:db:81:eb:5d:88:39:a0:67:5b:95:05:d1:5f:
e7:1e:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:28 2026 by rpki-client