
$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json)
Hash identifier: iOYiOoHdfW5a54zeEhtO+WRjrrIAGgA1QNY9fSMvZXM=
Subject key identifier: 31:E2:AE:46:D1:7E:20:CB:7B:64:7B:FD:8C:EA:92:68:B0:37:01:B0
Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Certificate serial: 0354
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
Manifest number: 034D
Signing time: Wed 19 Aug 2026 01:20:00 +0000
Manifest this update: Wed 19 Aug 2026 01:19:59 +0000
Manifest next update: Wed 26 Aug 2026 01:19:59 +0000
Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: bQLUY9xZGGFuFLH3PqT1BmGFuTuKdwBydMDyDya52Po=)
2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: LczRyamjv+q6qql4U5+k9/pRxqo+Z2BSI6X/Qd9169k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852 (0x354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Validity
Not Before: Aug 19 01:19:59 2026 GMT
Not After : Aug 26 01:19:59 2026 GMT
Subject: CN=6a8504c0-4c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:1b:f4:5d:02:f1:34:31:b4:7d:4b:ec:7f:
5f:46:18:c5:74:78:c4:2d:24:99:16:e8:1d:cd:dc:
40:2b:2f:08:1d:74:c2:96:1c:53:2a:8b:b8:09:a2:
b5:94:8c:c3:25:ec:6f:a7:2b:99:bd:58:48:2c:1e:
69:33:14:a4:e4:5f:ca:a2:a8:75:f1:a8:b6:b0:fe:
50:90:d7:3c:6e:f0:e3:7c:43:7a:48:a7:15:ae:e4:
76:e0:90:c2:83:ef:75:97:3b:5b:13:16:2b:95:dd:
8a:f5:ca:0d:7d:36:fb:61:a9:80:17:33:e5:d9:94:
4b:c9:63:8b:db:4c:88:ba:9c:7d:b7:3d:b1:54:79:
4c:70:d0:2c:cd:2d:39:c7:d3:d4:d2:67:a3:81:a1:
91:bd:60:c7:80:b0:ab:e9:5b:34:5f:a8:cf:b3:5b:
74:2e:8f:c4:97:d6:92:3c:41:51:59:d2:51:2c:fa:
ce:47:2d:32:fd:e1:13:95:ba:26:ad:04:7d:44:98:
a3:bc:80:fb:3c:72:34:26:cd:87:37:fa:a6:1d:91:
d1:e1:16:32:b0:3b:5e:0e:79:e1:8c:70:77:ba:2c:
58:06:ad:46:d2:a8:37:19:b9:5c:bf:7a:97:56:9f:
e1:36:68:8b:a2:5c:64:66:ba:8e:17:68:21:40:23:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:AE:46:D1:7E:20:CB:7B:64:7B:FD:8C:EA:92:68:B0:37:01:B0
X509v3 Authority Key Identifier:
keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:3c:b0:c4:3c:9d:31:c3:96:1b:50:27:68:a6:96:33:19:0c:
bc:ab:e8:1c:e8:16:81:e8:7e:0d:24:6c:45:81:34:91:f6:17:
b7:56:48:ca:b4:67:9a:30:52:f5:4f:32:5e:c7:70:1f:9b:92:
44:1e:73:23:7a:0c:d0:cb:70:15:c3:9a:f8:82:b0:1b:bf:e0:
0a:e6:94:47:7d:46:b1:a5:d4:cb:af:fb:8b:f5:30:3a:7a:c4:
79:9e:a9:0c:34:6a:0e:50:b7:07:8a:74:07:2c:9d:39:13:73:
01:b0:79:f0:0f:64:ab:48:1f:49:77:88:f7:52:ad:23:58:2a:
06:6e:db:0e:6b:f6:18:fa:d1:ed:c9:8a:3f:ba:29:fd:68:14:
fd:58:1a:7a:c5:7c:e7:32:d0:1d:1b:b1:b7:b6:09:a0:f2:22:
1a:e5:01:50:01:f4:c9:a5:1f:eb:40:c8:a4:82:d9:d9:f0:31:
a2:8e:65:7f:ae:4f:2b:c3:e5:30:d1:db:1e:8f:39:b9:2d:a5:
e5:9a:1c:22:07:e9:73:f5:1a:be:ea:d7:db:9b:d0:f0:4b:22:
f0:e8:1c:f2:39:70:5d:7b:a2:18:10:5d:00:64:11:a6:67:87:
e6:33:10:d4:b0:d9:5b:13:93:e7:07:64:f3:e5:bf:50:95:ba:
1f:af:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:26 2026 by rpki-client