
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json)
Hash identifier: YF5wNVqPuzE0zRjAi213bCqQks1ESMsCz8oAWOS+Sj0=
Subject key identifier: 1C:97:63:8A:EF:54:AA:95:3A:5B:CB:43:98:19:3C:14:9B:87:72:05
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
Manifest number: 01F3
Signing time: Sun 15 Nov 2026 03:35:50 +0000
Manifest this update: Sun 15 Nov 2026 03:35:49 +0000
Manifest next update: Sun 22 Nov 2026 03:35:49 +0000
Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: xiJ/+WteVN6vXvoz4eBVByYPKt9VfXwK6jLKWyZU1yM=)
2: 56C9937C28C911F086331776C4F9AE02.roa (hash: JxwdiP8Pc7CiVQDzrJXTJybxsA7vxegE08o3FUjWbHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Validity
Not Before: Nov 15 03:35:49 2026 GMT
Not After : Nov 22 03:35:49 2026 GMT
Subject: CN=6af92895-527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:14:a7:a7:cd:09:a9:d6:e6:7d:8b:5e:1d:
9f:0e:40:bf:ef:60:f0:85:05:66:04:9d:d4:33:f7:
9b:d6:3f:84:21:f8:01:05:59:7f:b2:07:31:ef:84:
97:cb:9c:0a:a2:81:b3:df:e0:53:28:2f:fb:3d:5d:
87:63:ee:f3:5c:46:a6:b6:6d:59:94:3c:03:d4:8e:
29:62:8d:b5:03:17:2b:03:c7:8e:63:0b:75:e9:c3:
e8:81:62:e9:db:ac:6d:7a:7a:8b:cf:e3:09:58:4c:
b4:58:45:8f:18:4b:3d:97:7e:9d:ce:be:c0:83:12:
c5:fc:09:cb:0d:2a:1b:8c:ee:eb:7a:41:3d:6f:65:
64:8c:53:c6:c1:a5:72:e4:15:bf:c3:cc:f6:95:30:
6d:5e:d4:01:63:0c:91:e6:8b:7d:06:06:80:96:66:
8b:da:f4:f2:85:9c:69:ca:00:9f:91:80:8f:27:94:
bd:47:1f:b6:41:6a:90:ff:77:7b:ea:8d:88:aa:4b:
f9:1e:d6:4f:c9:7f:49:ac:7c:20:7a:44:73:a7:ed:
34:0a:4d:53:9c:22:f7:c7:f0:ec:7b:fe:ed:64:7b:
b1:45:79:00:3d:f4:19:be:98:a9:f9:29:28:34:fb:
48:3d:77:f0:b0:81:28:8a:ef:7a:00:15:9b:5c:7d:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:63:8A:EF:54:AA:95:3A:5B:CB:43:98:19:3C:14:9B:87:72:05
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:d1:06:13:00:ac:ad:d5:b0:91:64:66:0c:8b:af:83:6f:e5:
ec:e7:b7:64:74:5c:25:ba:87:04:92:b9:ea:6f:6f:6d:0e:8f:
90:16:13:00:89:5c:1a:73:6c:8c:f1:2d:f3:f9:59:dd:95:7b:
09:02:c0:da:b8:e8:f7:23:9f:12:4b:1e:3a:79:0c:9d:16:7d:
75:6b:79:ca:27:08:ce:6f:1a:f8:eb:b2:6b:ab:bd:0c:23:d4:
57:ee:97:48:b3:7c:9d:22:21:ed:27:5a:44:43:8b:96:fb:a3:
9f:c5:01:0a:b3:6d:e5:02:81:61:02:60:ad:35:33:88:f8:6a:
51:5f:48:0e:a5:96:42:30:f4:61:5e:f4:c4:56:8f:8c:af:fb:
09:d1:6f:e4:77:db:05:bb:e2:8a:13:de:42:70:db:00:c7:f3:
b7:49:e2:33:74:b0:34:85:75:2f:84:49:23:5c:80:74:75:ec:
15:6e:70:69:39:fc:25:fe:fe:10:c3:91:7e:ba:e1:b2:d5:88:
aa:5f:47:0a:97:a6:1c:fb:68:a1:49:25:ca:e6:df:f5:58:fc:
01:18:5f:cc:24:a5:65:d3:84:30:2a:15:d6:2b:80:b7:92:59:
87:a9:27:f0:93:5b:06:6d:9f:c3:4d:d9:1f:38:9b:86:f8:bc:
24:cf:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:10 2026 by rpki-client