
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier: VkYBWmsu1div2h3XegE3TXt2Uj0DqLXc3ByyUX6hm8c=
Subject key identifier: C1:AF:25:D9:22:6A:DE:B5:DB:EA:63:08:CF:02:CC:CD:F7:69:4F:E4
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial: 0522
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number: 051B
Signing time: Tue 21 Jul 2026 00:25:16 +0000
Manifest this update: Tue 21 Jul 2026 00:25:16 +0000
Manifest next update: Tue 28 Jul 2026 00:25:16 +0000
Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: Q6cVRgxKQwXqVw0Ve4y9nEH2gnqMo9h4bN3kCQz1ewc=)
2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: F+I43DaEg4RPjKbDgo7LbT/oq9DuBWqE4SqCTrHW1b0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Validity
Not Before: Jul 21 00:25:16 2026 GMT
Not After : Jul 28 00:25:16 2026 GMT
Subject: CN=6a5ebc6c-077e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:cf:07:4e:cb:c6:c7:1a:d8:04:ea:5e:75:
f6:8a:94:c5:82:18:70:8d:ce:b2:ea:7f:91:83:68:
8e:83:fc:c2:f0:c0:bf:6a:91:74:74:9e:24:71:d7:
00:0c:1f:f7:6b:3e:ec:e3:c4:12:50:f3:fc:fc:b5:
83:53:8d:b9:47:ef:ba:52:b1:3c:da:5b:45:ff:aa:
c3:94:77:4c:1f:af:be:48:d0:d5:0d:bb:3b:66:3a:
e5:f0:ec:cf:3c:84:9a:80:bb:a1:70:f7:ae:12:87:
a3:43:0a:25:ff:66:4e:22:ea:23:54:57:43:6a:c5:
b3:33:87:c3:f4:94:c6:70:2a:8a:a6:cc:71:15:66:
00:49:db:44:b9:f5:fe:d1:9e:7f:63:37:71:79:a0:
19:6b:f5:b5:37:e4:cc:61:ce:d8:d4:b0:d9:cd:3c:
1a:73:d0:b2:33:ab:c4:f4:0d:0a:c4:21:38:81:52:
93:9f:64:d2:55:56:96:fd:bc:30:ce:0c:f6:d4:f8:
fd:20:aa:c7:aa:a8:97:44:e1:95:05:cd:87:f8:f4:
ea:d7:05:98:da:f0:63:13:81:9e:e1:c6:bd:fc:45:
e4:63:31:fd:06:e1:91:6a:7a:5b:01:31:20:08:cb:
7d:c4:67:5d:28:13:a9:8d:39:c8:fc:71:80:de:66:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:25:D9:22:6A:DE:B5:DB:EA:63:08:CF:02:CC:CD:F7:69:4F:E4
X509v3 Authority Key Identifier:
keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:60:bf:09:c1:fe:5a:e7:9f:ae:d9:f0:dc:71:0c:a1:79:
c1:00:40:28:bb:04:b1:23:62:d3:59:61:ff:a3:cd:9e:60:f4:
77:ec:04:d1:06:7b:59:06:03:3a:de:6c:f0:f5:51:74:c4:c2:
f8:74:ea:ed:9f:96:df:db:19:3e:cf:41:d3:74:34:ef:a6:99:
64:1c:36:4f:ed:52:da:77:a2:07:53:dc:cc:ae:d5:7c:e2:92:
58:c0:53:2e:a5:3d:04:4a:b3:81:af:10:24:48:e9:4e:7b:d4:
97:5c:a0:f3:b6:71:a4:40:6b:90:ba:14:79:7e:7a:ae:14:49:
a6:5d:4e:99:f3:50:60:6a:7c:2a:eb:c8:56:5e:93:37:ea:88:
42:ef:1f:16:aa:44:fd:b0:34:00:60:36:88:9c:cf:ef:69:2a:
c8:6a:b5:49:a3:92:6b:20:61:d5:c9:69:99:b0:4a:c3:42:eb:
b7:7b:21:4c:09:7e:92:d4:fc:e0:52:c0:e7:c8:b1:1b:ee:d2:
54:b1:d0:10:c2:65:8d:96:59:7e:12:ee:77:99:ce:44:1c:aa:
3d:99:3f:b5:40:5d:c0:c6:f2:ec:68:af:0f:2c:f1:46:cf:84:
52:34:bd:bf:51:b0:75:96:51:4c:90:7f:35:1c:bf:66:27:df:
c3:32:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:38:05 2026 by rpki-client