
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json)
Hash identifier: dFPAVMLOg7w9cJAYi4HD7N1JKPftWywczmPlkxTyt3Q=
Subject key identifier: F7:85:44:9D:55:4E:27:23:BE:61:11:7F:B1:DD:DD:6F:B6:62:1F:F3
Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
Manifest number: 01AB
Signing time: Thu 21 May 2026 04:08:27 +0000
Manifest this update: Thu 21 May 2026 04:08:26 +0000
Manifest next update: Thu 28 May 2026 04:08:26 +0000
Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: /1MKyaskHy6RPCOMrTLWahLUcFm416ikeT2Ke+fS2oQ=)
2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: CY7sgHFLl+nOK7TpwFje8AHE3rJopUk0iaEHtQoJM00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Validity
Not Before: May 21 04:08:26 2026 GMT
Not After : May 28 04:08:26 2026 GMT
Subject: CN=6a0e853b-b100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:8e:f0:e9:aa:c9:86:58:de:b0:ea:af:1d:
d8:92:89:06:a9:af:e6:c3:39:66:83:33:fd:a1:bd:
80:cf:ad:7b:8d:36:7f:b7:d7:51:0b:14:5a:ab:29:
a3:1d:25:ad:80:5c:e0:23:8b:35:a0:8e:c0:34:cb:
7b:3c:47:c1:70:f0:c0:ed:6f:fd:3b:c8:dd:b5:ee:
d2:0f:67:1e:9a:1a:d3:0b:2b:44:aa:79:ff:47:af:
43:92:59:7c:f9:e3:f2:d2:2f:0c:e1:1f:cc:53:3a:
b4:cf:e8:7d:69:e0:7d:9e:54:d4:b2:f8:dd:b2:11:
06:60:ac:a7:ac:a9:a7:39:e3:91:f7:74:84:8b:3a:
02:e6:90:23:dd:4a:56:40:15:a2:5a:73:0e:84:80:
e4:91:c3:15:7e:85:e7:9b:8b:e7:77:f7:60:ea:7b:
5c:7e:71:c1:07:33:78:4c:1b:79:4e:75:ac:3e:27:
36:65:8d:c3:47:c2:44:d8:bb:ea:b2:d2:4f:08:59:
04:9b:32:63:dc:7c:fb:62:b0:75:05:fb:85:45:a8:
19:ff:8f:16:e5:c1:24:c4:08:f3:60:fb:22:d7:dd:
2a:f8:b9:78:31:3d:fe:55:d3:67:fa:9d:5f:28:b5:
09:e6:77:bb:c2:73:c9:e0:1f:e1:e7:e5:a4:83:14:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:85:44:9D:55:4E:27:23:BE:61:11:7F:B1:DD:DD:6F:B6:62:1F:F3
X509v3 Authority Key Identifier:
keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d0:98:6f:69:35:e7:77:e1:59:60:97:ad:60:25:1a:9f:02:
21:87:9c:ef:8c:29:18:ed:3c:92:ee:05:39:fa:a4:61:85:35:
30:44:37:58:d6:18:db:58:81:f9:5b:91:ca:d4:1e:5b:f6:4e:
3e:49:d4:52:dd:14:77:c0:f6:9e:20:dd:1c:5e:33:af:48:eb:
77:71:1d:9b:eb:57:30:63:1f:e3:23:4c:d6:38:5a:d7:ea:94:
b5:c7:b1:32:9f:97:8a:22:87:ae:fc:83:7e:4b:12:3d:da:cc:
b6:64:a0:af:fe:29:cf:28:d5:d8:a6:1d:97:50:e9:4b:3f:4f:
2b:b0:f8:3e:2d:bb:66:01:6c:8b:ff:af:62:3b:8f:02:33:b1:
fb:36:2f:2b:e9:2d:7f:97:bf:49:34:28:7b:41:7d:3d:89:49:
cd:85:53:6f:2f:0e:68:b5:40:b5:f7:9a:bd:79:df:ac:50:af:
79:92:a9:61:a1:a1:ed:34:36:f3:fa:2b:85:12:3e:6c:07:31:
39:2c:1c:ae:b3:48:45:77:33:98:19:06:ab:31:98:f3:0f:2d:
45:fa:1b:42:4c:4c:e5:52:06:d8:a9:9e:70:dd:f7:8b:f1:d4:
03:47:1f:65:61:d3:8b:cb:93:7d:97:65:4c:82:7f:c7:1c:d6:
f5:2e:c0:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0
M0I3OUJEOTMwHhcNMjYwNTIxMDQwODI2WhcNMjYwNTI4MDQwODI2WjAYMRYwFAYD
VQQDEw02YTBlODUzYi1iMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurGO8OmqyYZY3rDqrx3YkokGqa/mwzlmgzP9ob2Az617jTZ/t9dRCxRaqymj
HSWtgFzgI4s1oI7ANMt7PEfBcPDA7W/9O8jdte7SD2cemhrTCytEqnn/R69Dkll8
+ePy0i8M4R/MUzq0z+h9aeB9nlTUsvjdshEGYKynrKmnOeOR93SEizoC5pAj3UpW
QBWiWnMOhIDkkcMVfoXnm4vnd/dg6ntcfnHBBzN4TBt5TnWsPic2ZY3DR8JE2Lvq
stJPCFkEmzJj3Hz7YrB1BfuFRagZ/48W5cEkxAjzYPsi190q+Ll4MT3+VdNn+p1f
KLUJ5ne7wnPJ4B/h5+WkgxTSHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPeFRJ1V
TicjvmERf7Hd3W+2Yh/zMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB
MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w
LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAttCYb2k153fhWWCXrWAlGp8CIYec74wpGO08ku4FOfqkYYU1MEQ3WNYY21iB
+VuRytQeW/ZOPknUUt0Ud8D2niDdHF4zr0jrd3Edm+tXMGMf4yNM1jha1+qUtcex
Mp+XiiKHrvyDfksSPdrMtmSgr/4pzyjV2KYdl1DpSz9PK7D4Pi27ZgFsi/+vYjuP
AjOx+zYvK+ktf5e/STQoe0F9PYlJzYVTby8OaLVAtfeavXnfrFCveZKpYaGh7TQ2
8/orhRI+bAcxOSwcrrNIRXczmBkGqzGY8w8tRfobQkxM5VIG2KmecN33i/HUA0cf
ZWHTi8uTfZdlTIJ/xxzW9S7A7A==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:54 2026 by rpki-client