
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier: BXrtLQr07fVw5NNy1a+xsCfeF9R4SpQowD5kUD6LYh0=
Subject key identifier: 07:92:92:BD:F4:E3:78:33:91:A4:0F:14:1E:C3:8C:BC:CC:75:D6:A9
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number: 01EC
Signing time: Thu 21 May 2026 03:50:38 +0000
Manifest this update: Thu 21 May 2026 03:50:37 +0000
Manifest next update: Thu 28 May 2026 03:50:37 +0000
Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: Jipqspkx5fxFTftU6AAIuq0UIWowkZ25IfMYR1nCa+k=)
2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 6JnWBHrw4ffDiGiVWAOckF4qnqqFhoHfVR3johcA4II=)
3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: p6zGTgqZJ7iiiCzsm415AfpPsLOlXyGxbt61Izp1Z6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: May 21 03:50:37 2026 GMT
Not After : May 28 03:50:37 2026 GMT
Subject: CN=6a0e810d-6516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:ef:9d:b2:a0:7a:5b:81:0b:e9:68:57:d5:
02:91:8c:01:39:3a:21:b9:be:7a:17:de:08:97:a6:
22:b2:b3:50:81:b6:c3:0f:3c:7a:69:9a:79:1f:54:
93:ec:92:95:71:0e:85:89:03:df:99:3b:b9:f4:7c:
c6:69:6f:d0:f6:cb:da:08:a9:1f:bf:ab:fb:39:81:
b8:02:a6:91:f1:84:e2:aa:65:4c:f6:cd:77:0e:cc:
c0:5c:47:06:1f:be:34:b2:a5:ea:2c:c4:11:19:f7:
7d:ca:e6:9b:bc:ac:f6:0f:56:78:fd:b8:12:e5:32:
03:00:ae:10:51:84:be:f9:1b:4a:65:ae:2b:d7:28:
f4:72:1d:73:0e:fc:3a:c6:c5:62:be:6c:a6:60:e8:
26:a6:06:af:dc:41:d0:6e:a0:01:d3:96:6b:ec:04:
e7:90:38:b9:c0:73:5f:54:a1:74:74:1f:73:10:95:
c3:34:ea:84:e0:95:9c:62:eb:29:c4:98:ae:13:c7:
26:74:69:13:36:ec:33:42:6d:b0:53:ea:7c:f8:cd:
24:f3:85:28:c1:b4:fa:5a:b8:2b:9e:f5:dd:4d:19:
63:8d:85:64:c0:da:75:bc:af:cc:11:7a:02:80:38:
1e:11:fb:17:f8:70:59:fe:40:6d:61:68:d2:89:bd:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:92:BD:F4:E3:78:33:91:A4:0F:14:1E:C3:8C:BC:CC:75:D6:A9
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:06:7f:a7:50:3e:b0:1e:6c:6b:54:10:7e:2e:ff:78:ed:e3:
b8:d9:f8:42:58:c6:f9:0d:6d:12:45:5b:59:d0:71:65:d8:98:
03:b0:1c:77:15:6a:c4:8d:8d:21:ed:71:89:7b:2e:8a:1a:59:
80:0d:f0:74:d8:15:1f:ab:9d:f7:c2:c3:0f:ac:e7:dd:0b:87:
eb:4e:75:41:f8:43:67:c2:e7:52:60:98:07:84:40:21:0c:f7:
5d:96:a5:88:cf:34:a0:f6:d0:34:be:46:b1:30:68:0f:6c:6b:
da:ca:18:96:e5:b2:cc:8c:26:44:77:aa:4e:3a:04:95:a6:7f:
ff:ad:6e:57:36:49:12:51:99:35:9a:74:17:77:d5:29:4f:4b:
77:bf:9d:81:ef:0b:08:00:c6:67:0d:b1:95:7f:44:e1:2d:31:
3c:3a:ec:ae:a3:b1:ce:5a:85:a6:35:13:9e:00:a9:22:3e:66:
8d:ab:b0:81:f3:3d:20:fd:e7:bc:db:03:b6:2f:75:50:18:1c:
ae:1f:1b:7b:60:28:ed:19:6b:f5:58:30:a7:bc:4c:d0:d6:95:
75:4a:a0:56:65:56:5f:6c:69:cf:a8:a3:b2:d2:dd:90:76:ee:
7c:0b:a1:2b:ab:38:b1:18:d2:ce:2b:e3:a8:fe:b2:5a:a2:fc:
c6:ae:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:20 2026 by rpki-client