
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json)
Hash identifier: Ezg/WHG0WSAuD4V/OuW57YoR6tT5kg0DgA3HRdMOhNE=
Subject key identifier: AB:22:DA:E8:50:B6:AD:0F:1E:E1:46:34:20:B2:9A:77:20:5E:62:47
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
Manifest number: 01B8
Signing time: Thu 23 Jul 2026 05:24:28 +0000
Manifest this update: Thu 23 Jul 2026 05:24:27 +0000
Manifest next update: Thu 30 Jul 2026 05:24:27 +0000
Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: WIgYxa1G9UoObphCDPIovKnPylNF9v0vKnYVqD+qQZY=)
2: 56C9937C28C911F086331776C4F9AE02.roa (hash: JxwdiP8Pc7CiVQDzrJXTJybxsA7vxegE08o3FUjWbHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Validity
Not Before: Jul 23 05:24:27 2026 GMT
Not After : Jul 30 05:24:27 2026 GMT
Subject: CN=6a61a58c-6737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:90:38:8a:a3:56:6d:13:98:fe:91:20:cf:
6d:03:ca:44:8b:d8:43:24:89:99:19:29:ae:10:66:
69:87:30:59:20:5b:34:16:f9:21:52:af:7a:6a:88:
06:cb:1c:f9:0a:e6:4f:44:d3:f8:ac:4d:ef:6d:ab:
7c:9e:02:b2:f0:7e:14:db:98:e8:85:93:0f:0f:d3:
83:73:39:b4:f2:3d:90:ee:7a:3b:05:98:53:24:29:
c3:67:87:44:96:06:dd:04:5d:a2:0e:36:f9:a8:7d:
b1:f9:6d:de:62:b4:83:1c:f8:d9:a6:85:03:dd:19:
e4:1c:1c:e2:28:06:ba:2a:21:90:13:c9:c0:4a:8b:
68:6b:ce:be:a8:78:3b:15:c2:2c:5f:10:df:d4:09:
a2:99:54:e9:34:e7:ab:e1:f2:47:28:7d:f8:a3:04:
26:4a:0f:88:64:b8:ea:af:15:39:d2:52:5f:cb:97:
e2:6a:ec:d0:15:17:36:70:e6:4c:07:ac:ee:36:01:
76:0a:fe:8c:63:a1:0d:f8:a1:3c:84:70:76:6e:03:
97:e7:d6:55:45:dc:14:12:c7:f8:55:c8:a4:ca:06:
bc:6b:7d:6b:40:1f:5d:53:e1:d9:cb:d4:cf:f4:7f:
03:61:78:38:d4:5e:19:4a:1c:1b:91:df:76:94:4b:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:22:DA:E8:50:B6:AD:0F:1E:E1:46:34:20:B2:9A:77:20:5E:62:47
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:01:68:ee:1a:63:81:19:7d:6d:39:52:66:0b:57:6a:d0:82:
72:4f:63:6f:f1:48:8b:a4:13:e7:58:e8:c2:2a:21:91:69:24:
0d:29:d0:66:94:65:82:23:0d:8a:a2:99:64:ea:66:79:75:4c:
f7:31:0b:b5:d1:6f:8a:cd:94:01:42:13:7d:86:93:ab:bf:9e:
8d:7e:1f:a8:a2:b8:cd:6c:da:0b:89:1d:f0:c7:e0:9e:78:a8:
f1:50:8d:be:98:8e:ab:88:53:c2:e3:8c:5f:fe:b4:a0:bf:16:
fa:b8:9c:32:da:56:fe:10:4c:92:d3:f2:f4:2f:5f:8b:bf:6b:
b5:01:12:49:fa:02:ff:68:cd:8f:8b:7e:f5:e1:91:5d:53:56:
5d:23:9d:c5:c1:92:b2:22:97:9e:15:bb:1e:63:71:9a:9a:70:
21:d8:2a:9f:71:93:18:0f:d2:60:5b:ef:af:a6:b5:4a:ff:38:
85:2f:24:e1:6c:d4:b2:5e:68:e8:40:0e:99:40:38:c0:97:33:
84:74:7f:76:4c:5e:c7:82:67:89:9a:77:e9:c4:52:1b:bc:ac:
b3:a6:8b:b4:c1:8a:14:3e:ff:5f:4b:ac:6f:f1:fd:94:85:51:
98:e7:ab:9c:39:a6:c6:3a:7e:16:ca:e6:7c:a0:4a:b9:51:b6:
89:a1:f8:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG
MkE1RjZGQkIwHhcNMjYwNzIzMDUyNDI3WhcNMjYwNzMwMDUyNDI3WjAYMRYwFAYD
VQQDEw02YTYxYTU4Yy02NzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnOQOIqjVm0TmP6RIM9tA8pEi9hDJImZGSmuEGZphzBZIFs0FvkhUq96aogG
yxz5CuZPRNP4rE3vbat8ngKy8H4U25johZMPD9ODczm08j2Q7no7BZhTJCnDZ4dE
lgbdBF2iDjb5qH2x+W3eYrSDHPjZpoUD3RnkHBziKAa6KiGQE8nASotoa86+qHg7
FcIsXxDf1AmimVTpNOer4fJHKH34owQmSg+IZLjqrxU50lJfy5fiauzQFRc2cOZM
B6zuNgF2Cv6MY6EN+KE8hHB2bgOX59ZVRdwUEsf4Vcikyga8a31rQB9dU+HZy9TP
9H8DYXg41F4ZShwbkd92lEsHHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsi2uhQ
tq0PHuFGNCCymncgXmJHMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD
RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt
SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADwFo7hpjgRl9bTlSZgtXatCCck9jb/FIi6QT51jowiohkWkkDSnQZpRlgiMN
iqKZZOpmeXVM9zELtdFvis2UAUITfYaTq7+ejX4fqKK4zWzaC4kd8Mfgnnio8VCN
vpiOq4hTwuOMX/60oL8W+ricMtpW/hBMktPy9C9fi79rtQESSfoC/2jNj4t+9eGR
XVNWXSOdxcGSsiKXnhW7HmNxmppwIdgqn3GTGA/SYFvvr6a1Sv84hS8k4WzUsl5o
6EAOmUA4wJczhHR/dkxex4JniZp36cRSG7yss6aLtMGKFD7/X0usb/H9lIVRmOer
nDmmxjp+FsrmfKBKuVG2iaH4pQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:53 2026 by rpki-client