
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json)
Hash identifier: u1qYnR1XsfAY1x9ptgssOFFrqA8HwZnO5oSlvNNYnPY=
Subject key identifier: 96:B7:59:BB:60:AE:BB:07:93:69:EF:75:79:9D:72:AA:21:F3:76:E7
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
Manifest number: 0178
Signing time: Wed 25 Mar 2026 03:57:44 +0000
Manifest this update: Wed 25 Mar 2026 03:57:44 +0000
Manifest next update: Wed 01 Apr 2026 03:57:44 +0000
Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: vA03CbUgy+dmTjq5XKU3vGzVBq2qoGJP/Pl0RxsfVJ0=)
2: 56C9937C28C911F086331776C4F9AE02.roa (hash: hLHf0yHg07NxcBaia4emdp8wLJZ5yswiWeZpuukCb8M=)
3: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: 30l77jxXegJoF7jXMHGnkdZkivl7c3joIlWbA5gQlco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Validity
Not Before: Mar 25 03:57:44 2026 GMT
Not After : Apr 1 03:57:44 2026 GMT
Subject: CN=69c35d38-2264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:31:a9:43:3f:9e:7b:9c:88:43:5e:5b:ef:
86:30:a4:2a:50:19:28:a7:39:ef:0d:7c:f4:30:e5:
28:03:37:ae:7f:73:ae:26:2a:45:6d:e3:b6:0b:21:
1d:99:4e:d1:0c:10:38:36:24:bb:45:6c:66:d8:e0:
80:33:15:2d:bf:00:92:d9:71:d9:70:ae:36:70:cf:
05:29:b9:a6:a6:37:f1:12:33:ec:44:fd:ce:27:86:
4a:d3:54:7e:03:a0:97:1a:6d:04:5a:4d:dc:94:0e:
dd:8b:c2:40:ee:02:fb:30:27:39:17:96:a8:41:fd:
df:f5:da:0f:54:40:90:16:6c:3e:a5:58:cd:e2:f0:
0a:9d:7b:c2:fe:28:9f:a4:33:f5:95:40:0d:79:ad:
03:78:e2:81:f4:e5:fb:7c:00:34:90:5e:42:04:fa:
87:bc:68:27:61:aa:b2:a7:2e:6a:f7:77:e0:81:8a:
fc:b4:ac:2f:4f:ad:05:a1:bc:84:c2:3d:c9:54:d9:
2b:c1:0d:fa:4b:e2:d8:89:8d:86:c7:a3:39:af:8b:
d7:e5:b4:a7:69:3b:bc:f2:72:24:28:0a:1c:a5:1a:
a9:a0:02:fa:34:eb:21:c3:59:58:f2:38:ad:12:0f:
0d:2d:98:4a:0a:04:cd:94:c5:eb:eb:9b:53:32:6b:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:59:BB:60:AE:BB:07:93:69:EF:75:79:9D:72:AA:21:F3:76:E7
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:96:c9:dc:5d:36:55:67:1f:7e:62:71:ec:a1:4e:3e:b0:
73:f3:9a:41:19:bc:54:42:74:39:dd:dd:53:49:87:7b:bd:63:
d5:60:b1:f2:de:1e:c0:4d:87:7a:e0:b3:44:85:f9:6d:18:3e:
da:5c:82:ef:c3:52:8c:a1:3e:fb:22:c2:d2:12:da:d0:18:b5:
47:69:c9:b7:2f:ed:07:2f:87:b0:d4:1f:92:6d:86:be:f4:14:
be:c4:20:66:bd:3b:9b:1e:e6:37:ae:6e:a4:ba:8e:45:30:71:
f8:0a:76:a3:6e:c9:d5:16:b9:cc:6a:0e:8d:03:32:17:62:fd:
28:b0:0b:76:99:4a:7e:81:14:c5:af:98:12:24:86:c1:f8:83:
a0:a2:4a:8a:a0:b8:f7:23:61:ad:3b:09:e7:78:3d:41:63:6d:
1d:27:eb:b3:9c:02:55:73:6c:48:92:1d:52:56:ae:95:8b:f8:
35:66:ee:19:b5:60:f9:6e:0d:f3:1d:f9:95:1c:6f:24:18:23:
ee:ff:86:91:54:31:95:ad:7c:e8:6e:bf:3d:2e:2e:69:92:b4:
30:72:01:b9:4b:8b:17:fd:02:c1:ac:a3:e6:f0:34:2b:08:63:
7b:83:a2:15:78:a7:af:a4:38:75:11:33:39:4c:df:00:04:b3:
e5:66:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:22 2026 by rpki-client