
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json)
Hash identifier: dLxcqfKGCblmyPk3wMutMwGbU1fMzACxXLhfnQvH1Oo=
Subject key identifier: 9C:67:51:86:34:6B:F7:0F:37:86:C5:D8:31:D8:76:80:DC:08:48:69
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
Manifest number: 02DC
Signing time: Thu 21 May 2026 01:25:48 +0000
Manifest this update: Thu 21 May 2026 01:25:48 +0000
Manifest next update: Thu 28 May 2026 01:25:48 +0000
Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: YvUp2RmJ20bPezBThUfJXmPyeEB5kRBYKNGU1zPC7kg=)
2: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: BJ0AXwywDrh3L6h1jOokV2ePgsQC41EcTflOVzlWuFQ=)
3: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: x/yz1V4NDuS6R8Q19YYrXkxZ59RztmqTLn+CKfG3QlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Validity
Not Before: May 21 01:25:48 2026 GMT
Not After : May 28 01:25:48 2026 GMT
Subject: CN=6a0e5f1c-3ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:1a:36:16:0b:63:bf:df:3e:f6:55:ef:82:
c2:fb:ad:6d:07:cb:f5:a3:67:87:36:19:7e:22:38:
f8:45:3b:38:66:67:e5:c1:72:93:2d:a9:6a:0a:5d:
a5:dd:69:db:32:2d:60:9d:14:b7:35:97:b9:6a:5a:
51:09:08:ed:f0:4d:0c:37:e3:1b:1c:49:cb:5d:4a:
d8:b6:aa:f6:58:00:39:e2:c2:c0:26:5c:4f:c0:20:
34:19:0b:59:45:13:7d:c5:dd:0a:8d:f8:47:f1:09:
a4:73:93:06:77:e7:05:74:7b:d6:bb:57:02:df:bf:
6a:d4:11:a4:b4:b3:44:20:76:e1:6f:c5:62:51:ab:
61:d5:d8:2a:4e:b4:07:a1:85:09:b0:76:6a:d2:c0:
72:1d:75:87:c5:bc:ce:64:62:09:63:f4:e1:3d:9a:
2a:59:ba:be:1a:4b:b0:bb:9a:61:6c:73:5d:1d:1d:
44:92:ad:e2:6d:5c:d0:e0:20:d9:6f:49:b1:36:60:
8c:39:72:d6:ea:8b:7b:47:28:8e:d5:e9:16:2e:80:
2b:ec:95:3b:16:fa:d3:ad:ca:b8:ca:b6:5a:57:59:
8a:c7:d2:13:63:7c:90:4a:b9:a1:6b:eb:8b:cb:c1:
4d:24:35:a8:0f:90:39:a4:2b:0d:c8:d2:fa:3a:75:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:67:51:86:34:6B:F7:0F:37:86:C5:D8:31:D8:76:80:DC:08:48:69
X509v3 Authority Key Identifier:
keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9f:2f:6b:56:e1:a1:10:98:29:03:38:71:b7:08:50:a2:a1:
97:d2:60:65:87:85:43:e0:41:a7:98:56:07:40:3b:81:4c:87:
6d:bd:9a:a0:26:e3:f0:2c:dc:48:7d:05:a7:01:50:0d:9f:9d:
d2:56:32:f3:56:77:cf:27:86:32:e1:32:c2:86:0a:91:f2:07:
6f:90:74:fb:3d:a5:a8:25:d1:38:41:ad:d2:2f:af:a1:d2:9d:
d9:78:a1:b9:6a:de:30:17:42:ba:53:ca:36:0e:91:a6:86:24:
5b:26:29:ee:55:89:e3:be:db:f7:93:26:ce:f5:c9:43:55:9f:
ec:c4:c8:78:30:d7:98:3b:33:d6:74:cd:08:56:45:0f:4e:05:
5e:d8:5b:21:9d:7a:4d:aa:8d:50:07:b0:47:b2:b3:c0:8b:75:
8f:49:d1:25:78:7a:0d:ad:8d:c1:8b:e8:b5:e3:47:90:79:cf:
22:44:ac:0e:2c:2d:95:cf:81:d5:34:f3:db:15:60:af:73:d3:
9e:4b:a5:be:a4:67:0d:8e:e7:e3:91:ec:7b:13:de:d1:ea:0b:
88:48:c3:64:e6:c9:e5:f7:ab:bc:9a:f6:c1:87:4c:da:7b:1e:
e6:d3:6b:aa:37:32:6f:56:f8:6e:4f:0f:58:5e:fb:94:6b:72:
f5:cf:b7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:40 2026 by rpki-client