
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
File: Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft (raw, json)
Hash identifier: zwQFA2JuoOpfUQy4S7ZEgcL00qLueO3pHwEQGkDfozU=
Subject key identifier: E3:80:7D:8B:F0:F0:4E:79:B0:26:AE:C5:E3:22:1D:E5:DE:13:30:FA
Authority key identifier: 43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04
Certificate issuer: /CN=A91B0E2D/serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
Manifest number: 03
Signing time: Wed 19 Aug 2026 09:59:58 +0000
Manifest this update: Wed 19 Aug 2026 09:59:58 +0000
Manifest next update: Wed 26 Aug 2026 09:59:58 +0000
Files and hashes: 1: Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl (hash: 3d0AsgOKNfYNEPkXxev8v8CxyQ44TJe2yGxV9cHMzUg=)
2: 831A285A99F811F1BFBF2EA14911F970.roa (hash: rZLgkUIG2I9KynMnivKmBbNyGpXP6BLLyC4/f2vDTdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl
rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0E2D, serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304
Validity
Not Before: Aug 19 09:59:58 2026 GMT
Not After : Aug 26 09:59:58 2026 GMT
Subject: CN=6a857e9e-b298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:49:e0:5f:4a:d7:85:b7:3e:45:56:80:59:
b3:d9:8d:7b:f4:c6:68:c5:06:ac:a0:ad:76:67:8c:
74:67:74:c1:96:af:7f:27:98:97:37:46:ac:47:8e:
49:79:db:39:99:1a:74:5f:30:56:27:98:e5:07:94:
cf:28:51:5f:4d:07:f5:63:b4:d2:62:79:86:89:06:
c9:27:88:42:92:11:52:34:0b:5d:70:ea:94:ef:d1:
30:a4:e5:ce:e4:1b:b6:66:2f:d5:d8:82:03:27:09:
d0:cb:c3:53:0a:d3:96:c6:59:7a:90:fb:e5:6c:d6:
bd:67:7a:8a:dd:12:dd:e6:5a:ed:b5:00:9f:b4:a2:
17:f9:06:7f:ee:dd:d6:ad:c1:6b:f9:e5:90:07:67:
86:59:2e:5e:bf:ac:b9:33:7c:e8:2f:98:27:33:8e:
23:4c:04:00:a8:42:62:71:20:40:0f:3f:bf:f4:57:
a3:94:10:92:a9:f8:01:ae:3e:5d:cd:2b:73:d5:67:
2a:40:21:90:32:83:1a:ec:43:3a:d2:46:78:f6:87:
d9:2c:c1:af:f2:27:40:50:30:9d:8b:1e:71:f4:41:
ea:9d:73:4d:45:40:ac:46:b2:f0:b9:c3:24:36:0f:
ca:2c:f3:c8:61:da:5a:db:f0:9f:7c:ea:c3:cd:8c:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:80:7D:8B:F0:F0:4E:79:B0:26:AE:C5:E3:22:1D:E5:DE:13:30:FA
X509v3 Authority Key Identifier:
keyid:43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:38:91:e2:fe:e7:f9:da:9a:24:1d:6e:6d:d6:18:d8:a9:
fc:15:ff:ec:a6:f9:e6:16:27:26:01:4d:63:16:ff:33:a8:9d:
43:20:a7:73:83:6f:04:f8:01:59:41:0e:33:cd:72:6d:de:38:
0b:fa:c6:30:75:07:45:9d:7a:91:a3:e8:25:78:fc:3a:54:b3:
24:50:b5:ec:a3:3d:bb:9c:0d:b2:b2:aa:85:93:8c:9f:c6:4f:
57:55:93:49:42:8a:06:0a:ea:2d:76:de:67:95:cd:d5:93:17:
54:52:f4:66:21:9c:00:ef:cd:2d:cd:be:32:53:08:bf:24:06:
e5:d3:b3:42:0f:62:0c:cf:c8:a8:93:0e:d9:45:e3:c4:ab:bd:
0e:ad:3b:59:7f:b5:40:9d:b8:c3:e4:17:95:38:cb:86:28:ca:
58:84:29:b2:90:9a:81:0a:cb:17:fd:79:16:27:67:0d:26:89:
9d:b7:11:cf:86:13:5f:65:5b:cd:cc:9e:04:57:b6:32:ba:75:
91:27:ce:d7:bf:18:d9:05:d5:9c:ea:87:38:e8:3f:83:e9:07:
81:51:a8:25:7d:1b:8b:4a:2c:c9:f0:46:05:00:94:49:30:d9:
d1:fe:5e:b2:0f:ed:aa:0d:01:10:97:72:ed:e9:b1:12:77:e1:
7d:50:ff:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:58 2026 by rpki-client