
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json)
Hash identifier: aRsToKSdYuZ5n7kLpdotLV78hPJgVGmwWCCxnTVKWm8=
Subject key identifier: FB:94:8C:7F:47:C0:2E:86:F2:13:56:56:7C:91:95:51:3B:6D:36:CC
Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
Manifest number: 01EE
Signing time: Wed 25 Mar 2026 02:49:22 +0000
Manifest this update: Wed 25 Mar 2026 02:49:21 +0000
Manifest next update: Wed 01 Apr 2026 02:49:21 +0000
Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: HT5bR8gmod3dZHiGqbcfn/DNvoNLIfJn6Qh+EBz7e3I=)
2: 4AB01838FF1D11F0816C691B85EE528E.roa (hash: 73GQqCwii1vmNrsS7r1xrrm5FcLJovRSf9upFdGwKjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Validity
Not Before: Mar 25 02:49:21 2026 GMT
Not After : Apr 1 02:49:21 2026 GMT
Subject: CN=69c34d32-feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:a4:18:e0:b0:4a:7e:01:79:80:1e:d0:4c:
51:49:fa:a0:9b:c5:30:cc:91:44:e2:eb:db:39:30:
aa:db:4d:20:ac:df:bc:d2:c9:51:aa:38:c7:fe:2f:
e7:84:23:43:5b:db:1c:67:4c:47:21:63:97:e6:9d:
ef:ff:bc:91:8b:fc:af:c4:7b:8b:8e:97:aa:44:9e:
15:7e:af:39:d0:07:37:78:e6:a8:26:36:4b:4a:dd:
af:5c:16:34:34:e6:2b:34:77:53:d3:6c:bf:cd:3b:
a2:93:bb:f3:b4:0a:d4:97:90:37:44:f5:35:9e:2d:
75:51:cd:fe:68:46:30:95:5c:50:51:45:09:2b:56:
5e:db:a1:00:23:1e:ff:9e:ed:0c:81:ea:a0:2c:9e:
54:33:bd:5b:3c:a8:8f:cc:e2:0c:95:62:5b:af:89:
73:8b:ca:4d:8d:e7:76:20:f4:95:92:01:ff:87:90:
88:aa:8b:70:32:5f:d6:5e:83:c2:98:b1:78:4e:86:
87:01:88:45:cb:be:39:a4:d2:51:0b:50:cf:f7:89:
8e:f2:95:ff:9b:83:12:a6:e6:fe:4e:00:06:9a:ad:
bc:1e:36:9a:36:3f:1b:43:1e:11:a6:d7:fb:70:a8:
e8:4f:03:f1:2f:e6:4b:70:90:94:90:29:91:5c:c4:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:94:8C:7F:47:C0:2E:86:F2:13:56:56:7C:91:95:51:3B:6D:36:CC
X509v3 Authority Key Identifier:
keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:dc:ed:1b:10:8a:3c:b2:6c:4a:8e:e7:db:e0:f3:80:56:70:
ad:01:d1:4b:f2:54:f3:5f:3b:4a:3f:eb:0e:f0:c1:39:c0:0c:
24:b5:c0:ff:ad:3b:18:0f:be:42:92:d6:52:58:f8:d3:e2:b2:
5d:21:a1:84:36:e9:88:13:77:11:b7:cd:15:57:ca:07:1e:d5:
19:5d:d9:43:61:31:59:6b:59:eb:7d:fd:59:14:5f:a5:ba:ae:
47:a5:c3:5e:6a:11:d3:a6:95:c0:78:49:b2:2d:4f:10:74:c7:
72:9b:30:b0:a6:29:d3:33:a9:b3:9e:b6:4f:db:18:f7:b1:42:
00:b6:98:b6:97:96:25:4d:a6:d3:3c:ed:87:01:d3:8c:61:26:
da:03:b6:aa:a0:ba:3d:98:2c:4f:a1:c5:81:c6:cc:88:5b:ef:
57:7d:bd:1c:ac:00:93:c8:c1:f7:8d:07:fe:85:3f:90:bc:91:
61:bd:a8:bb:62:19:18:f2:a0:34:2f:16:44:f6:0b:b9:5c:53:
57:18:45:c1:29:be:59:89:ba:79:20:a2:05:0d:45:e9:a4:90:
32:bd:b7:1b:44:15:10:05:7e:74:a1:cf:de:d5:38:5a:75:eb:
56:0d:ec:f7:9c:82:02:2d:81:ab:1a:1d:4c:cc:a0:61:36:f4:
49:1f:3f:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0
QjkyQUQ4RDgwHhcNMjYwMzI1MDI0OTIxWhcNMjYwNDAxMDI0OTIxWjAYMRYwFAYD
VQQDEw02OWMzNGQzMi1mZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMOkGOCwSn4BeYAe0ExRSfqgm8UwzJFE4uvbOTCq200grN+80slRqjjH/i/n
hCNDW9scZ0xHIWOX5p3v/7yRi/yvxHuLjpeqRJ4Vfq850Ac3eOaoJjZLSt2vXBY0
NOYrNHdT02y/zTuik7vztArUl5A3RPU1ni11Uc3+aEYwlVxQUUUJK1Ze26EAIx7/
nu0MgeqgLJ5UM71bPKiPzOIMlWJbr4lzi8pNjed2IPSVkgH/h5CIqotwMl/WXoPC
mLF4ToaHAYhFy745pNJRC1DP94mO8pX/m4MSpub+TgAGmq28HjaaNj8bQx4Rptf7
cKjoTwPxL+ZLcJCUkCmRXMTIUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuUjH9H
wC6G8hNWVnyRlVE7bTbMMB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy
NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS
UTZoWkdqZEZwVDVMa3EyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr9ztGxCKPLJsSo7n2+DzgFZwrQHRS/JU8187Sj/rDvDBOcAMJLXA/607GA++
QpLWUlj40+KyXSGhhDbpiBN3EbfNFVfKBx7VGV3ZQ2ExWWtZ6339WRRfpbquR6XD
XmoR06aVwHhJsi1PEHTHcpswsKYp0zOps562T9sY97FCALaYtpeWJU2m0zzthwHT
jGEm2gO2qqC6PZgsT6HFgcbMiFvvV329HKwAk8jB940H/oU/kLyRYb2ou2IZGPKg
NC8WRPYLuVxTVxhFwSm+WYm6eSCiBQ1F6aSQMr23G0QVEAV+dKHP3tU4WnXrVg3s
95yCAi2BqxodTMygYTb0SR8/rQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:19 2026 by rpki-client