
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
File: _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json)
Hash identifier: DxIUmvBySDvGWiQDLZQSjfUaag+Tmti5eevJ2ku8ZGQ=
Subject key identifier: D7:58:49:A3:63:69:16:74:B5:E3:9C:D9:2E:86:E1:F8:44:C9:17:5C
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial: 07F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
Manifest number: 07EA
Signing time: Mon 22 Jun 2026 21:21:11 +0000
Manifest this update: Mon 22 Jun 2026 21:21:11 +0000
Manifest next update: Mon 29 Jun 2026 21:21:11 +0000
Files and hashes: 1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: oqOEO4O9/ZcZX4vVW13PZjJMKl0fY5B6046X6lILsQA=)
2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: TnSaLf+xgZHXFIsS72cUr6qVZqPyupzxKL+9myIDylQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 21:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Validity
Not Before: Jun 22 21:21:11 2026 GMT
Not After : Jun 29 21:21:11 2026 GMT
Subject: CN=6a39a747-a4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:b1:35:70:1c:5b:1c:87:78:1e:d4:aa:d3:
12:e6:07:27:c4:76:51:61:f7:d5:b2:3f:5c:41:3a:
c8:49:11:ba:fe:5d:72:89:73:51:4d:6d:cd:8d:ec:
a1:3f:b1:ec:56:a3:5e:06:90:39:3f:30:6d:50:af:
60:07:68:56:b6:d0:b6:9e:48:84:f3:a2:da:55:a7:
54:fc:69:c7:6c:10:f7:5c:79:27:1f:e5:2d:60:04:
86:06:8a:99:de:5f:d3:5d:e4:c0:39:8c:b9:81:c2:
00:ca:87:cb:47:23:e3:4c:26:84:9d:09:f2:82:a5:
46:ba:ef:e7:0f:19:2e:54:16:78:48:46:43:da:b8:
96:9e:95:bc:1d:4b:6d:61:c9:ec:bf:e9:19:67:94:
6f:dc:16:fc:c0:a4:24:9f:fd:c3:ef:d8:50:56:82:
ae:85:ab:33:4a:b2:20:dd:f3:0a:26:ec:f5:3d:b4:
c5:c2:e5:3b:03:92:2e:5e:54:f3:b7:00:bd:5f:90:
94:bc:3f:b6:b5:13:0b:98:a1:cc:b0:08:ee:43:8d:
44:8a:d9:bb:b5:b7:80:92:b2:b2:16:e9:4c:81:e6:
7c:f3:d8:53:4e:a3:06:60:56:87:9c:f4:39:8e:c0:
5b:fc:b3:db:93:2c:19:2d:a4:ad:cc:2d:2f:e0:2c:
7a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:49:A3:63:69:16:74:B5:E3:9C:D9:2E:86:E1:F8:44:C9:17:5C
X509v3 Authority Key Identifier:
keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:57:17:6e:56:8a:05:c9:b8:28:bf:59:e3:e7:3b:f3:cd:f2:
ba:e3:75:04:fe:79:d5:17:4c:0b:93:56:5a:0f:89:ff:d8:9a:
85:7b:c3:80:e3:06:8f:0a:05:a9:99:34:3d:e3:33:c6:22:ab:
2a:3f:eb:48:61:23:e1:19:3d:b0:52:a6:c5:87:ef:84:6b:cc:
cc:ea:c6:06:03:0e:33:e1:85:a5:e1:b3:50:c8:22:b4:95:2b:
47:7a:fe:0a:d0:cf:8b:3a:f3:8a:2b:fc:75:59:9d:ec:cb:03:
1f:c5:9a:6b:a4:50:9a:ed:f8:c1:1c:dc:9c:db:30:8b:e0:80:
e3:2d:66:93:8d:3a:00:bc:e6:b6:3e:31:9b:b2:92:7e:fe:99:
f0:cf:47:01:e7:3c:ac:d0:11:73:73:c5:7c:00:53:37:95:41:
a1:82:32:24:d6:13:c3:3a:7f:55:14:32:1e:e8:98:a3:37:15:
d4:cf:ac:b6:b4:1d:e8:b3:03:77:c7:e0:69:89:1f:36:ee:7b:
17:6c:ab:b1:97:5a:4f:4d:30:1b:43:04:e2:e4:67:19:37:5e:
71:1a:cd:1d:31:26:d9:0b:e1:a0:f0:50:6c:01:d1:df:a6:06:
4e:9c:a4:a3:de:8a:98:71:d6:42:9b:15:40:2f:a2:d7:58:20:
cc:50:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:08 2026 by rpki-client