
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
File: KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json)
Hash identifier: KuvAQVoHqd/hXtXBHMSCvX1986UN//hnBtYdU03pByU=
Subject key identifier: EB:77:44:EA:DA:8D:41:27:F6:01:CE:BF:58:37:BE:A1:56:F4:7A:DA
Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Certificate serial: 0BF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
Manifest number: 0BE5
Signing time: Wed 22 Jul 2026 19:14:44 +0000
Manifest this update: Wed 22 Jul 2026 19:14:43 +0000
Manifest next update: Wed 29 Jul 2026 19:14:43 +0000
Files and hashes: 1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: IMPeMQj25/WS9cPob2heZfgZZn9GkIgA6FhUHQEUgLc=)
2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: owbB/QFVhS3E4rWN71OSFx1s7RgWi4YjBcaDXgNNaiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3058 (0xbf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3456, serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Validity
Not Before: Jul 22 19:14:43 2026 GMT
Not After : Jul 29 19:14:43 2026 GMT
Subject: CN=6a6116a4-0ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:af:ed:a4:c8:3c:2b:88:e6:df:ba:11:9f:
f7:4a:c6:37:1e:76:0f:48:7a:8a:b0:d6:96:a8:ef:
3c:5f:fd:0c:db:c6:7c:cd:57:fc:43:5f:70:9a:2a:
b3:19:be:d3:cf:7a:d9:60:91:b7:b9:88:2c:35:50:
7c:af:fd:9f:33:a7:c2:c2:b5:80:68:08:ca:86:ab:
cb:56:df:9c:d9:ba:a5:a4:98:ed:f0:0c:d3:8f:d7:
11:72:00:d3:50:03:90:23:a9:9b:8c:42:2b:92:1a:
62:69:f0:59:b7:b0:81:7c:56:e8:97:87:b7:6c:32:
e2:2d:e9:63:5a:18:6c:5b:b7:90:c9:5d:bd:b2:52:
77:88:bd:aa:67:11:c0:ee:12:67:85:41:84:33:0f:
ad:7d:b5:66:da:ba:cf:1a:f6:39:e9:23:c5:a4:35:
aa:aa:75:02:98:30:94:53:e9:1e:b5:f7:87:5c:12:
98:dc:75:9d:3e:88:ec:d1:30:3c:1b:60:dd:92:47:
55:79:61:cb:19:61:14:a2:93:5d:70:b1:51:ad:43:
d3:00:25:aa:09:08:c3:b2:fd:58:f8:1e:d7:38:cc:
c0:6e:bc:ba:ec:9b:80:6d:8a:46:b5:9f:bc:e7:de:
bc:89:5b:e8:14:eb:5b:85:39:de:8e:46:f1:b1:c6:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:44:EA:DA:8D:41:27:F6:01:CE:BF:58:37:BE:A1:56:F4:7A:DA
X509v3 Authority Key Identifier:
keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:9f:df:09:80:f7:64:a1:db:a9:04:46:e7:20:8b:36:04:
3a:9b:de:1f:23:fb:b0:38:cc:db:9d:38:5c:e8:fb:52:ff:07:
11:98:93:60:05:44:3b:bb:12:e8:fa:80:e4:fc:00:20:b9:9d:
17:81:74:47:17:b5:dc:d6:f8:2f:e8:66:95:1a:a1:39:db:1d:
17:e8:6a:a4:86:39:1f:af:9d:f0:99:54:82:85:a2:ea:8c:68:
a7:45:ea:44:e9:bc:da:be:41:77:3b:f2:28:36:ee:c6:63:37:
1e:1e:f7:db:9d:53:c5:41:59:f9:70:e1:d0:8b:93:80:08:69:
88:ed:25:40:bf:a4:dd:64:91:d6:ca:79:c4:ac:ec:fa:8f:a0:
dd:78:74:8f:b2:64:d7:f4:8f:e4:52:bb:54:53:0d:d2:b3:c2:
56:b6:47:8e:74:49:64:67:df:34:7e:52:a0:bd:4d:4d:b6:da:
25:37:c9:cc:c5:ad:f8:2d:7c:84:68:8c:8c:9c:4f:3c:82:fd:
30:9f:8b:87:e1:96:c4:9b:e9:0c:75:f3:f9:dd:06:a3:5a:09:
7b:e8:0b:f2:cf:0a:4e:d0:56:d7:ba:92:c5:29:8b:8e:26:8e:
59:3a:dd:f9:6b:c1:84:e8:43:12:1f:73:6a:ce:aa:70:23:25:
7c:80:8a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:16:08 2026 by rpki-client