
$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json)
Hash identifier: 0MRY4IgAfnLh9tuwWAlKzpOV3aWqo7DdCtZHufK256o=
Subject key identifier: 0A:DD:3B:EB:B0:97:11:54:33:AD:4B:DB:29:9D:E0:6F:07:FD:22:EB
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
Manifest number: 031C
Signing time: Wed 19 Aug 2026 01:28:40 +0000
Manifest this update: Wed 19 Aug 2026 01:28:39 +0000
Manifest next update: Wed 26 Aug 2026 01:28:39 +0000
Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: KssqCGGqKg6JbgkDv2PjItYKHN6QnzZq90bAZkWb/TA=)
2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: 7veWVwTDcJIQiqB140/ZwdfOWsgZaB/7p0PlC1ugVfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Validity
Not Before: Aug 19 01:28:39 2026 GMT
Not After : Aug 26 01:28:39 2026 GMT
Subject: CN=6a8506c7-e445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:7e:4a:85:18:49:89:8d:f6:d9:dd:dc:e7:
0c:66:06:52:a8:03:60:fc:26:3d:54:24:ac:91:b3:
5c:e2:cc:46:ee:fe:94:7f:77:c8:ce:f8:f5:a8:1a:
cb:d2:38:14:e3:dd:b1:70:fd:fd:63:c5:1e:45:77:
d7:5b:12:2e:b9:52:70:05:02:bd:ed:31:bd:f2:df:
f1:a8:00:6d:20:49:c7:18:84:5b:29:1e:c8:0d:82:
97:71:a5:b8:cc:7d:a1:75:93:71:e5:c6:0e:8b:db:
6d:04:a3:ab:3b:dc:c6:7e:97:8a:5d:c6:32:29:d4:
c9:d5:a8:5d:98:79:e4:53:6c:e2:fa:1e:04:73:fc:
73:b3:ec:23:fa:c8:62:b9:35:e1:89:b2:fb:05:02:
8a:39:26:28:5c:be:6c:54:0b:8d:6c:4e:42:db:06:
7f:9b:e1:be:b4:fb:b3:04:64:3d:d5:3d:ee:29:5a:
f2:57:5d:bc:c9:59:90:14:5c:e6:d1:2e:0f:28:97:
c3:c3:c2:be:47:10:8d:00:b9:72:55:6a:6e:3a:51:
12:74:1c:45:61:45:77:24:d7:ef:29:f2:6f:fc:de:
a2:59:68:9d:c4:95:7f:e8:1e:2f:02:5b:e4:ac:27:
c5:fc:bb:10:13:fc:5d:61:8c:d7:79:73:c9:22:ca:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DD:3B:EB:B0:97:11:54:33:AD:4B:DB:29:9D:E0:6F:07:FD:22:EB
X509v3 Authority Key Identifier:
keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f0:a4:93:2e:c7:6d:e5:ab:2e:9d:9a:64:7e:2d:62:d8:af:
0c:5f:2d:2a:ab:c3:a1:19:41:0b:16:ac:12:3b:ce:91:1b:c8:
4f:63:9a:6e:96:6e:61:a4:ed:e1:f6:a0:31:fc:0b:d5:c3:78:
c5:89:1c:76:33:8e:d2:77:e6:89:29:a7:bd:b1:47:e4:27:c7:
4b:d1:41:d2:f7:c4:24:90:05:4e:a0:e0:d3:55:00:b2:1c:98:
1b:96:52:42:56:32:0e:89:8f:6a:6c:95:56:24:18:40:91:98:
ab:c0:83:19:e0:48:c6:20:33:91:69:f2:2c:77:29:6b:46:41:
b8:19:f7:71:d0:71:62:d9:a4:1b:92:c7:e9:30:48:94:99:b9:
c7:b6:65:51:d9:26:5f:d5:9a:c7:f3:bd:a3:97:f4:fa:be:d7:
80:9d:1c:26:35:ed:49:9b:7f:9e:96:a1:62:d7:5d:e1:45:ac:
ac:bc:e4:fc:f7:d5:a1:9b:f6:20:36:71:ae:9a:9a:f1:fc:34:
a3:ab:12:7e:7e:3c:6b:97:7d:dd:65:fb:1c:6e:cf:bc:ee:29:
44:00:19:f1:13:55:ce:96:6a:66:fa:fd:9c:0d:d2:17:ef:10:
94:96:3d:b4:51:45:76:de:f5:1c:1d:36:de:07:23:70:1c:81:
18:1a:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:43 2026 by rpki-client