
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json)
Hash identifier: F0QNzAs1FaFn9DtPAvZAPBUkzUyLLAKW5iqMTgg9JeM=
Subject key identifier: 6A:C8:23:64:DE:42:69:F5:53:DE:4C:06:D6:1F:3D:8F:8B:3E:6A:95
Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
Manifest number: C1
Signing time: Fri 17 Jul 2026 08:10:13 +0000
Manifest this update: Fri 17 Jul 2026 08:10:12 +0000
Manifest next update: Fri 24 Jul 2026 08:10:12 +0000
Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: FofpGwzblPMJ3yaLbvU8X2BYJ+27AnSg8uBa0awO+CU=)
2: 85B52606F44311F089BA68A95F6F56BC.roa (hash: Ex29dRzH8LkzDGimmK0Vm7ywjUej+dvGo6cnaEEBQnY=)
3: 4DB1CEBCF44311F08E818BA85F6F56BC.roa (hash: 28TOJyzIUoQ+gHS12Ia30yDze1P2PrrZaNrtbhDyvQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Validity
Not Before: Jul 17 08:10:12 2026 GMT
Not After : Jul 24 08:10:12 2026 GMT
Subject: CN=6a59e365-62fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:e9:41:9d:4d:cc:c8:6c:1d:fe:ac:cc:da:
d8:f6:d1:55:bc:c3:69:ee:8b:00:17:8e:10:b1:9b:
a8:ed:43:2b:3b:97:5d:76:6a:92:38:79:30:b9:0a:
a2:56:fa:83:26:4e:04:13:4e:a9:dd:72:a0:88:98:
a7:56:dc:97:74:72:7e:35:f2:da:8d:78:cc:dc:65:
83:5e:77:4a:92:2c:47:29:c9:dc:64:c6:55:6c:a4:
88:c2:d1:4e:38:09:a7:fe:5e:6a:41:8e:b3:08:7a:
43:34:10:05:ee:91:ea:42:d3:a3:c9:ea:83:06:eb:
75:b2:db:2e:3b:d4:7f:d7:5d:d2:51:68:56:f5:93:
e2:07:41:f3:06:ea:24:b0:ca:3d:35:a3:cf:bf:f1:
49:4c:78:07:88:f6:bd:a6:60:67:1b:65:31:9f:38:
b4:60:b0:8c:27:f4:4b:2d:b6:01:20:a6:8b:ae:ea:
1e:cd:bd:05:b5:01:10:aa:04:7d:1c:3b:3c:45:9e:
1e:96:31:61:8b:4f:5e:22:7d:1a:7e:e5:c2:98:4b:
df:b3:4d:65:36:70:62:08:a4:50:fd:68:cb:af:46:
55:14:73:5a:2a:71:03:d9:f9:a9:b4:f2:1c:3e:5a:
54:83:0e:aa:02:a1:f7:db:31:f2:b9:be:7f:27:88:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C8:23:64:DE:42:69:F5:53:DE:4C:06:D6:1F:3D:8F:8B:3E:6A:95
X509v3 Authority Key Identifier:
keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:78:8c:13:38:06:09:a0:17:62:f7:45:00:4b:ce:ba:ab:4d:
5e:1c:70:41:e4:49:6f:0b:1c:66:74:8c:71:40:26:7e:71:50:
2f:14:c7:30:00:fb:a1:d0:b7:d9:25:cc:65:67:89:71:87:fc:
2d:da:20:88:58:20:2b:51:d3:c7:b0:28:e1:31:0f:61:58:14:
f8:1b:ba:9a:57:20:68:72:5d:0a:a2:84:dd:30:27:8b:b9:d2:
c6:b3:8c:b9:3e:e6:67:0a:fe:31:03:77:c2:b6:aa:5c:5b:3b:
d0:f5:51:e9:e3:f6:92:b0:4e:b9:d1:60:90:e7:32:27:9f:ef:
53:b3:92:10:b2:25:23:3d:7b:52:e4:56:68:60:67:27:50:94:
79:d2:1d:b5:45:62:db:24:6b:2c:ce:81:11:35:1b:38:c2:e4:
84:6e:5e:2c:f8:52:08:e8:71:6c:71:39:9f:8e:d2:a2:01:fb:
b1:ce:f3:f2:a4:aa:d6:36:81:09:bd:0e:ca:ce:4c:a1:a0:0c:
bf:5d:ca:6b:50:48:46:9c:6b:8a:6f:3f:e9:01:1f:2b:53:52:
1f:81:d0:40:7e:e0:68:2e:01:f5:15:5d:e8:b1:b1:fc:e7:25:
34:53:fa:7b:b7:1c:cd:52:28:34:88:08:a4:29:74:71:ae:8f:
b5:bb:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:32 2026 by rpki-client