
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json)
Hash identifier: uiRKbUWfuVRlZoH9VeMswHVowxOZV+f7jS+qPSmpZug=
Subject key identifier: E7:50:49:A2:FC:4A:B9:34:12:85:50:F4:DC:7E:C6:89:C9:F5:BA:BD
Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Certificate serial: 04AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
Manifest number: 049D
Signing time: Wed 13 May 2026 00:05:54 +0000
Manifest this update: Wed 13 May 2026 00:05:54 +0000
Manifest next update: Wed 20 May 2026 00:05:54 +0000
Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: +CO20NoXLjFTL+CafnM4yW55SLUKTApKZbkjUcQbuag=)
2: 8AB7936E5FF111F092635949C4F9AE02.roa (hash: B+tg3MGzU6RZBeuCdNyRx0cM0Jlgf3lhdx/0R3MqTSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195 (0x4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Validity
Not Before: May 13 00:05:54 2026 GMT
Not After : May 20 00:05:54 2026 GMT
Subject: CN=6a03c062-4e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:19:27:ac:2f:30:a2:55:78:c2:2f:24:0c:
c2:c4:be:0d:f1:d3:41:b0:92:8d:6b:fa:18:81:81:
e4:9b:9c:30:ea:e9:26:7a:a2:0e:7d:bf:ad:20:32:
9a:9c:00:95:ba:3b:7b:86:e6:9c:db:1a:99:9a:2e:
0c:cd:67:6f:a6:44:58:35:2b:00:a3:76:da:e5:ba:
c8:c4:01:f5:5d:c7:fc:cf:a6:9b:e9:94:4b:9e:0e:
65:f6:c0:fc:da:cd:0a:f3:ed:60:33:96:67:1a:2a:
98:32:8d:aa:9f:78:32:76:f8:0e:a5:36:0a:c5:65:
0f:ff:09:fa:12:9f:66:2b:c3:3d:ea:a4:41:11:68:
38:f5:fc:25:f0:05:b1:91:b0:62:d5:0b:d0:64:a9:
cb:54:d8:ea:32:03:4f:d2:70:35:0e:b4:91:0e:09:
fb:84:2f:61:1d:99:d0:d2:36:2b:39:dc:ad:01:35:
5b:29:5e:3f:ea:b7:49:6e:78:56:50:9b:a8:73:ab:
35:43:1e:f4:12:46:53:71:81:52:2b:46:5b:94:d7:
2d:91:01:53:7c:8e:24:23:65:3f:6d:01:c8:20:e0:
73:a5:f9:39:ab:94:8d:2c:cc:eb:4d:17:89:57:c1:
83:38:15:02:65:db:56:e4:e4:03:87:b4:75:5a:c5:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:49:A2:FC:4A:B9:34:12:85:50:F4:DC:7E:C6:89:C9:F5:BA:BD
X509v3 Authority Key Identifier:
keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:fd:b8:2c:a5:c1:6f:1a:2d:90:2d:33:6f:1a:88:0e:a0:30:
48:47:c6:da:73:2d:fb:9e:ac:1f:74:69:52:65:d8:db:49:d8:
4e:e7:80:99:2a:e7:cd:4e:34:88:63:7f:af:b7:ee:0a:d5:35:
4c:26:9f:f4:5f:d9:94:5c:0d:7a:c2:f4:32:2d:21:8b:7e:92:
ca:30:a0:6e:8b:00:ba:e5:0c:0a:e6:49:df:5f:75:e4:ea:1e:
5c:5c:f5:20:62:79:4e:1c:93:20:d2:7c:1d:7b:dc:56:03:4c:
d7:fc:9e:91:1e:40:7e:ca:c5:c3:fc:d3:2e:74:a6:d2:c5:f2:
b0:e2:2d:c9:e7:10:a0:e8:8b:8f:ec:80:dd:51:82:1f:81:cb:
99:e1:ff:d0:43:62:e9:b7:41:b2:ed:49:89:fe:ff:9f:f5:63:
11:a9:c4:ce:7b:2d:21:7d:c1:6d:74:24:1b:29:c9:61:bf:d8:
70:02:bb:fd:16:7b:6a:fc:25:61:02:1a:5e:d5:4e:8e:a6:b0:
bb:98:4a:98:37:ae:33:f8:69:bc:ad:c5:60:5b:d1:14:ab:9c:
9c:d2:b1:80:5b:94:81:8e:65:76:48:84:35:e4:bb:79:c7:ea:
32:38:6f:11:04:23:73:5f:65:33:42:26:4d:c3:23:52:0c:de:
c7:36:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:36 2026 by rpki-client