
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json)
Hash identifier: 9/nKvYXB8UwO6fKj6FvKSpp44BUtN2UMWV+KdWKUwq0=
Subject key identifier: ED:C9:44:79:6F:72:ED:B2:E9:57:43:46:45:45:5B:B1:80:BF:DC:99
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
Manifest number: 01A7
Signing time: Wed 23 Sep 2026 03:59:12 +0000
Manifest this update: Wed 23 Sep 2026 03:59:11 +0000
Manifest next update: Wed 30 Sep 2026 03:59:11 +0000
Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: RArOc4kxregevSDNb9F0xb8iK41EhMUZtNAca2SiJ4E=)
2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 0mQHZNKSu/fOdeBAKFYNxdU/VQzOEWz87PHkDUFkGGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Validity
Not Before: Sep 23 03:59:11 2026 GMT
Not After : Sep 30 03:59:11 2026 GMT
Subject: CN=6ab34e8f-2991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:b2:ec:66:fb:c9:57:f3:dc:48:4c:ef:d6:
69:c6:ab:82:a6:12:bb:6c:bc:46:6e:fb:f7:ef:b2:
b9:ee:a5:1d:01:c6:be:10:22:13:7b:87:de:d8:90:
84:9f:86:ed:90:18:09:02:7a:6d:8f:44:3e:36:12:
bf:94:93:eb:4d:48:93:0a:0d:3e:fd:02:9c:32:ee:
8b:26:41:ec:07:31:44:10:cf:33:37:cf:8c:a2:4e:
09:73:eb:a5:f5:65:42:fd:67:e3:b6:3a:5b:2e:0f:
7f:34:0d:2d:da:21:09:22:64:99:cc:78:29:5f:6a:
72:ad:34:ea:9d:a5:7e:75:1c:a2:1c:92:61:b4:64:
69:af:7b:79:9b:85:3f:d7:dd:a4:47:01:29:39:b1:
31:ed:7b:53:be:e6:fa:38:2a:55:f2:80:f0:ab:17:
77:cc:d7:e3:16:58:33:ba:c7:f5:ae:d9:a3:db:25:
e8:4d:43:f9:0a:17:f1:dc:10:07:d5:01:c5:83:96:
2e:d2:bf:8a:87:6b:17:b9:93:98:4d:70:a9:8a:fd:
f0:a7:52:50:c9:a5:5e:bf:36:be:10:1f:85:cd:40:
da:b4:9b:05:70:fc:99:e3:ff:ac:1f:0e:17:e2:0a:
5a:34:41:2e:8d:cc:6d:36:0b:e9:e9:d5:19:f4:d7:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:44:79:6F:72:ED:B2:E9:57:43:46:45:45:5B:B1:80:BF:DC:99
X509v3 Authority Key Identifier:
keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:7a:62:2c:76:45:8b:70:20:08:61:31:95:bf:23:b9:28:c9:
21:45:47:2c:1e:76:ac:c2:50:55:84:30:33:67:2b:d9:0a:f2:
6e:33:3a:d1:70:b5:a6:bd:c7:9c:3e:3c:ba:bc:37:86:bd:1c:
8c:56:7a:aa:cd:5d:75:b3:b2:48:69:18:d7:15:8e:2e:65:92:
26:67:06:33:fb:b5:fc:cf:5e:ff:bc:f8:03:f9:4c:9a:f8:41:
a0:e2:b7:46:b9:09:4a:29:66:31:0e:ee:b4:94:92:ac:b6:41:
ff:cf:df:11:8c:63:64:d6:bb:a4:9c:7a:c2:09:fb:af:a9:8b:
a6:8b:a9:f6:b0:d4:9a:7a:af:cb:a0:34:74:c0:1d:47:42:3a:
d6:91:66:eb:8e:30:8a:d3:e2:06:97:5e:76:18:02:17:50:66:
38:8f:02:5e:2c:8f:0e:0b:c3:ae:4d:f2:52:b5:3e:ac:53:02:
7c:01:2d:f3:3c:11:35:01:61:0f:ef:69:8d:1e:96:84:7a:9d:
6c:27:b0:8c:85:36:61:cf:f8:8c:6d:65:d5:d1:db:3c:24:08:
c3:a7:f5:8a:63:de:26:a3:ad:0f:45:30:52:a0:52:18:6e:75:
54:c6:f3:a0:9e:a0:45:4b:a7:51:6b:8c:73:77:88:05:3d:a0:
c7:7a:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:23:11 2026 by rpki-client