
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json)
Hash identifier: +FRYBW6d85echUK9PXWOG/FdB/0F4VXIZ32MUB0TxhM=
Subject key identifier: 76:07:3C:07:8D:5E:06:5F:E7:65:1D:65:DB:E4:22:33:7F:9E:E4:8E
Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Certificate serial: 353E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
Manifest number: 353E
Signing time: Wed 20 May 2026 14:49:33 +0000
Manifest this update: Wed 20 May 2026 14:49:32 +0000
Manifest next update: Wed 27 May 2026 14:49:32 +0000
Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: 3S4gliX3/ZBBNFq8nkwEbQtRf3Vl2cpnlaKCXEA5Khs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13630 (0x353e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Validity
Not Before: May 20 14:49:32 2026 GMT
Not After : May 27 14:49:32 2026 GMT
Subject: CN=6a0dc9fd-c158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:d1:a1:05:9d:02:dd:0d:41:f9:ec:7c:5c:
b2:dc:90:b8:da:fe:dd:a0:60:8c:36:29:ca:26:22:
dd:ce:71:0d:6b:36:ce:23:93:13:0f:25:34:80:97:
96:18:23:88:24:e3:cc:51:00:5b:a3:9a:ed:11:38:
bc:d1:61:56:c0:79:86:38:c4:20:de:26:15:5c:ce:
5e:ca:c9:95:bb:13:36:34:88:e3:2f:ba:ac:bb:ce:
6d:3f:b3:00:94:08:b2:8d:c9:0d:fe:8d:48:0b:ca:
b3:e5:9b:36:63:b9:07:ba:b0:a6:8f:c2:94:d8:91:
7f:69:3f:05:b9:c9:bd:f9:96:a8:64:b6:9c:66:77:
95:7b:ef:29:0e:7d:67:e4:70:6c:b0:84:e0:1f:6c:
bc:e5:7a:8c:91:34:14:f9:56:75:2e:f6:8f:23:b3:
07:db:7b:90:f8:88:72:f3:d0:dc:a7:66:3c:87:50:
21:d6:62:1a:d4:d8:10:e4:9d:54:f0:18:ea:c5:9a:
61:f6:e7:ea:03:ed:da:93:ff:c9:0e:39:99:c2:4b:
e1:2c:37:59:58:a5:59:ae:06:ee:a5:63:23:97:c9:
b2:73:85:a9:19:fd:9d:a9:4c:15:fc:c6:a8:c0:62:
b1:d3:84:0f:ea:a7:a4:b7:82:87:90:d6:24:56:c1:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:3C:07:8D:5E:06:5F:E7:65:1D:65:DB:E4:22:33:7F:9E:E4:8E
X509v3 Authority Key Identifier:
keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:46:a3:f0:56:02:7c:47:aa:f0:92:19:a1:0f:37:f4:7d:
d5:21:a7:30:b5:26:0d:05:77:c6:a5:61:46:f5:9a:d1:9a:f0:
1e:80:c5:40:42:db:1f:61:e2:b0:09:ea:4e:f5:c9:a1:12:e1:
6b:09:a7:9c:7f:76:ac:a5:66:e1:56:05:2b:d6:04:f7:bb:77:
04:4e:fd:16:62:0e:de:83:3d:91:bb:7b:e0:74:7a:1d:6e:84:
c9:14:f3:d5:eb:83:59:8a:2d:ed:29:c6:08:fd:7c:c4:25:5f:
06:3b:88:43:4a:ee:10:e5:76:52:4b:f1:de:81:40:92:20:63:
e2:3b:54:23:b5:a9:38:15:ad:fc:ce:b5:b3:52:7d:34:85:f2:
df:19:79:93:c3:ec:80:38:1e:9f:68:d6:19:8d:f4:13:5c:a2:
1c:84:f2:85:58:c8:f6:6e:0f:c1:36:a8:dd:93:26:f9:d9:76:
74:b6:79:1f:16:ae:d1:16:88:3b:a5:db:5c:3c:30:fd:39:9d:
49:fc:3d:dc:1d:27:9b:2e:f8:9a:c8:0e:ad:6b:d3:fe:29:d0:
b4:77:8c:3f:66:52:d4:07:89:bd:17:c3:3a:e7:84:66:93:28:
d5:d9:6d:12:76:d7:ca:71:a5:1e:0d:b6:9c:30:0d:2a:24:a3:
78:41:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:33 2026 by rpki-client