
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json)
Hash identifier: rCp8K19wsul0BOz+FTDNMfk65vogM4Sny4rSEecU8vY=
Subject key identifier: 41:2D:BB:15:0F:6B:4F:62:63:C4:78:53:52:DA:5D:01:E6:43:F4:97
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial: 04FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
Manifest number: 04E5
Signing time: Wed 20 May 2026 23:54:51 +0000
Manifest this update: Wed 20 May 2026 23:54:51 +0000
Manifest next update: Wed 27 May 2026 23:54:51 +0000
Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: vpeAabXkHYkexIc3ZTc0dy70KQxbRSJLTmc2PSNedqs=)
2: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: 4j2H8uU7/aRuPDnI28o6Sv8nL9kjvWfBPDjQZsso1iI=)
3: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: 0Bo2hHPRP76nejRj/EVVT9FzU9vQs0YDaVNN7sh0ZdQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Validity
Not Before: May 20 23:54:51 2026 GMT
Not After : May 27 23:54:51 2026 GMT
Subject: CN=6a0e49cb-954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:80:7b:1b:ac:dd:d1:bb:8f:af:ed:55:fe:
bf:f9:27:d5:9a:85:e1:0c:7a:d6:63:d4:25:b9:64:
8a:ed:78:da:32:48:06:f2:2b:2e:5c:2e:b2:4b:1b:
f4:5a:9c:00:21:b2:b6:6f:ad:5a:a7:73:37:16:6c:
2d:45:84:d2:10:98:ee:0d:4b:7a:3b:2e:0c:11:e0:
1e:61:66:e4:02:36:80:e4:79:a4:78:6f:76:b6:e5:
b5:84:0a:65:6d:d9:71:cf:83:43:61:c5:fe:7d:1f:
fb:4a:a4:b6:35:3a:4e:b8:e6:04:0a:58:96:ae:b9:
f7:0e:37:6e:93:1c:a8:66:b2:05:48:29:6f:81:6d:
64:6a:ea:e8:db:85:1f:1a:10:59:68:7c:e1:b9:61:
c0:c2:cf:91:88:ef:01:39:c7:4a:5a:83:92:b3:d5:
15:48:51:93:f6:52:dc:19:79:b3:e8:33:79:18:f7:
f6:80:55:5c:48:d9:1a:f0:3d:ea:cf:70:2a:4a:85:
c3:89:98:ec:6b:2a:37:73:70:67:75:f0:63:48:80:
34:0a:a8:6d:61:83:37:ec:a1:53:37:04:fd:45:98:
4e:04:ad:43:91:52:80:40:29:f3:23:6c:ca:79:56:
93:d5:48:3a:e8:64:a9:87:db:78:70:8b:fe:d6:3f:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:BB:15:0F:6B:4F:62:63:C4:78:53:52:DA:5D:01:E6:43:F4:97
X509v3 Authority Key Identifier:
keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d7:99:ef:72:19:04:9f:33:cc:72:61:53:54:93:a0:9f:d4:
66:4a:62:c7:dd:6f:61:c1:de:47:80:7d:14:cb:51:d7:f8:9d:
66:2f:dd:7a:be:d9:21:88:d7:bd:f5:f1:4c:58:5a:bb:4b:94:
a2:01:3b:b3:e5:a0:61:a0:25:9f:12:de:81:42:20:82:ea:bd:
ed:f1:fe:12:01:66:6a:ac:dd:1a:dd:c2:f7:b7:90:8c:b2:6c:
17:08:9a:d9:bb:57:06:2a:dd:54:da:6d:e5:66:77:54:3c:5a:
f3:4f:bd:d3:71:48:a1:02:11:e6:f8:e6:cc:26:3e:51:21:b2:
e1:5f:12:09:87:09:7e:e2:be:d5:77:ce:e4:62:a7:0d:7e:e1:
b1:bd:08:fa:1f:cd:1b:44:92:c0:8a:fe:be:e7:c0:3c:b6:1f:
49:84:f4:44:84:48:55:65:18:99:4d:5e:63:b6:88:4a:7c:0f:
3c:40:0a:99:59:69:f3:11:ac:c7:04:d6:f8:fb:ce:ac:d8:aa:
aa:8a:17:98:33:ce:4d:5b:54:de:e8:89:fd:49:1a:fa:81:9e:
1a:b9:c4:60:23:2b:69:3a:3c:43:8c:9d:0d:54:3a:19:61:69:
2f:be:13:89:2a:4c:23:29:19:98:28:07:b2:9d:c0:e0:5a:ec:
0c:2d:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:15 2026 by rpki-client