
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json)
Hash identifier: +8xtVTSB/fv24Phwc3L++PxqQ2s6xeQXeqvYWHAIAZM=
Subject key identifier: 9E:4E:FF:01:7C:A7:85:CE:91:B9:C3:FD:8D:47:18:F0:6D:B5:10:36
Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
Manifest number: 01D8
Signing time: Wed 19 Aug 2026 04:13:07 +0000
Manifest this update: Wed 19 Aug 2026 04:13:06 +0000
Manifest next update: Wed 26 Aug 2026 04:13:06 +0000
Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: bnugx4Xwkj0m/6KU7DACmY2gA01L3ZC0URrLv6triBA=)
2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: CY7sgHFLl+nOK7TpwFje8AHE3rJopUk0iaEHtQoJM00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Validity
Not Before: Aug 19 04:13:06 2026 GMT
Not After : Aug 26 04:13:06 2026 GMT
Subject: CN=6a852d53-f217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:df:18:27:ce:93:e0:8e:0a:64:cc:1b:4e:
01:1e:ec:cd:81:dc:ef:30:f5:61:17:06:5b:53:51:
aa:79:23:9f:6c:bf:23:f7:d5:1f:5a:e2:cb:77:77:
c3:78:32:7b:de:9b:2f:41:22:4f:3e:33:f3:2b:12:
43:6d:f5:46:3f:51:74:0c:a6:02:ad:3a:5e:ac:ad:
86:a7:b9:fc:b1:d7:85:8b:c9:8a:17:4d:10:4f:89:
31:06:b6:3d:a8:31:08:41:62:f3:18:c8:cf:43:24:
f2:9f:a7:e1:21:74:ee:4b:ed:4e:ed:d1:ee:78:ad:
1b:c2:3b:f4:29:cd:6b:00:c9:91:5c:e3:70:5b:9c:
83:ed:f5:60:3e:6f:3d:4f:e1:f4:d0:b6:54:b6:4e:
b5:cd:b0:47:e0:6d:dc:e8:71:05:8e:f8:66:ab:52:
00:67:4f:44:96:28:c1:96:79:e0:18:8e:c1:1c:77:
2c:d2:e1:3e:48:2e:d5:a8:01:93:58:58:18:36:e9:
8a:e6:0c:96:52:49:25:9d:e5:19:bd:51:60:cb:a8:
17:31:60:82:3b:88:67:02:ec:98:29:83:d6:ac:28:
e3:19:df:30:07:2f:d1:27:36:7f:07:b2:58:b1:05:
65:08:57:f3:2a:dc:d9:9c:2d:5a:f3:05:c4:1a:9c:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4E:FF:01:7C:A7:85:CE:91:B9:C3:FD:8D:47:18:F0:6D:B5:10:36
X509v3 Authority Key Identifier:
keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:c3:a8:bb:e4:49:02:d6:83:d2:09:01:93:60:d7:77:d8:ec:
5d:cd:14:59:3c:5e:78:57:cb:cf:4e:bd:da:e9:01:20:f3:85:
f9:48:23:62:4f:5a:ec:a1:fa:88:66:d7:30:0b:a0:73:48:f2:
63:c4:7e:5a:bd:05:0a:70:e6:45:be:79:c8:e2:7f:41:d8:0f:
7f:cc:fa:f3:39:8d:bf:f5:15:f7:7a:9b:50:1c:ff:55:eb:8a:
c5:90:9a:02:40:28:48:0c:cc:59:94:87:c2:c7:cd:a5:72:e6:
e0:c0:d8:7f:d8:01:19:f7:21:21:06:f8:c5:c9:cd:53:b6:df:
64:49:2c:46:5b:22:9f:1c:73:8a:2b:d3:0c:6d:3c:7f:a3:6a:
9e:19:e4:64:89:00:f6:f6:6d:f1:a9:bd:e4:a0:24:6f:05:ef:
65:fb:9d:c8:93:57:2d:4b:02:66:44:27:1e:e9:06:87:32:b1:
3b:1b:d5:e0:5f:44:fc:1a:c3:59:14:a8:20:c0:4f:64:b8:5c:
d8:ac:be:8c:b5:69:6d:ee:36:d9:36:01:37:ca:26:86:82:e4:
d5:59:24:c3:ab:03:a3:23:17:d9:bb:e6:b1:82:19:25:55:3a:
34:21:bf:1c:d1:7e:06:52:11:92:02:60:b5:23:ee:af:14:45:
c0:21:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:30 2026 by rpki-client