
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier: kmhDW3i3G711dakzaX3ib+mKrl/Pz8QnbEdVG10uBnc=
Subject key identifier: 03:2F:11:31:A4:6C:29:A1:CD:C1:EE:85:2B:79:B5:64:76:E2:D0:EA
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number: 01EA
Signing time: Thu 21 May 2026 03:25:08 +0000
Manifest this update: Thu 21 May 2026 03:25:07 +0000
Manifest next update: Thu 28 May 2026 03:25:07 +0000
Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: LYWCcuTqeC1EJ9b1o7t/bD4apyWhxeMDjn1ECESjw5A=)
2: 294325DC699711EEB317603DC4F9AE02.roa (hash: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Validity
Not Before: May 21 03:25:07 2026 GMT
Not After : May 28 03:25:07 2026 GMT
Subject: CN=6a0e7b13-350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:4e:3a:0f:af:0d:56:9f:95:b6:96:df:33:
a0:71:ac:ff:92:14:1f:05:fa:22:4c:2b:8c:cd:5a:
eb:97:be:d8:50:44:53:9b:4b:81:d7:9f:d7:b1:35:
b1:bc:f0:39:17:31:83:01:73:20:07:88:3c:47:3a:
f6:36:54:98:44:3e:fc:ef:a3:19:f5:07:df:05:00:
7b:59:e5:db:2f:f4:23:2b:63:62:f0:fb:b9:1a:7c:
1b:73:8b:05:80:ea:d8:26:14:a8:45:46:63:5d:fa:
fe:4f:01:6f:a5:e3:20:a1:b5:cc:b3:08:b3:c4:de:
6b:08:71:4f:a2:1e:22:6e:35:23:f2:5e:5f:c4:a0:
e4:ba:4e:20:6f:a9:f1:55:c1:cb:66:0a:f6:e4:09:
d9:1e:e7:b8:f9:05:b1:ec:95:6e:08:06:63:eb:d3:
af:ea:16:c6:dd:44:60:0f:d1:5d:cd:8d:16:7f:48:
95:d2:b9:8b:d2:c5:64:9b:94:ce:96:b8:22:2e:f9:
d0:89:ad:94:86:b2:d4:96:b6:c5:e7:db:54:77:82:
35:1a:45:df:92:b7:3f:34:25:4d:d1:2c:be:eb:82:
50:82:b6:b9:86:f4:3b:25:ff:06:74:7a:13:46:b2:
3b:91:74:56:77:6c:a2:67:2d:52:e7:9f:13:0d:c9:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2F:11:31:A4:6C:29:A1:CD:C1:EE:85:2B:79:B5:64:76:E2:D0:EA
X509v3 Authority Key Identifier:
keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:80:32:18:d5:ad:45:67:91:60:1a:bd:9a:0f:3d:b1:4a:2c:
8e:14:b4:e9:46:ef:c7:82:b1:f1:32:a6:40:1e:ad:a8:0e:07:
eb:8d:56:f2:47:02:cc:ce:57:dd:cb:1a:07:3b:ba:49:3b:05:
98:e2:ef:af:da:9c:27:48:94:a1:2a:4a:39:bb:0d:a1:7d:df:
87:39:c4:b0:bc:7e:da:68:e7:b2:1f:32:6e:e4:8c:2c:e9:a1:
1d:1e:bc:99:f5:0f:17:42:7c:86:5a:75:65:b8:cf:b6:be:a9:
c7:fb:08:ec:62:86:bd:94:84:dd:0f:76:4a:a2:0b:0d:13:1f:
2e:ec:55:8e:02:30:9c:64:a0:06:59:2e:d7:22:bf:e8:6c:d5:
13:82:8f:ad:13:7d:ff:33:82:9e:44:e5:ba:68:73:43:cb:36:
9f:9d:d3:a3:ae:9c:33:11:df:65:f1:67:f0:f6:41:05:38:b9:
68:cf:ab:52:d2:ed:0c:95:59:6f:10:b7:46:81:d6:6c:6e:f8:
f0:7e:35:37:87:3d:22:cb:74:5d:c8:de:97:b9:17:99:31:6c:
2c:c0:41:28:bc:25:33:bd:fa:04:80:2c:a3:50:e5:48:63:30:
66:fd:b6:9b:dd:e3:6c:a6:20:22:70:ca:7e:d7:0f:4f:e6:3f:
3a:a6:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:39 2026 by rpki-client