
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier: ADoQXJRQoZUaDE2qLlSGzM1kAKtlckOkJoXg5rnYN9M=
Subject key identifier: 84:30:D1:7F:66:1E:16:80:3E:FC:44:44:B3:D5:A2:41:55:2D:B3:1B
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial: 08D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number: 08C5
Signing time: Wed 20 May 2026 20:26:54 +0000
Manifest this update: Wed 20 May 2026 20:26:53 +0000
Manifest next update: Wed 27 May 2026 20:26:53 +0000
Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: uqcenDPR7scrQ0vUy3cS6Ruyq+bKgKTtpuLm9KNrm9c=)
2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: D61mhla4ZKX7DfgoplRcuCG35MYNou9878EVBT40r2c=)
3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: tUsv3tNoQWMVfE/GiWVi84l0pY9vapkX9vPKn8R6z3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Validity
Not Before: May 20 20:26:53 2026 GMT
Not After : May 27 20:26:53 2026 GMT
Subject: CN=6a0e190e-8177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:48:8e:48:2a:bd:5b:0c:80:ce:ed:47:a0:
10:d9:94:0e:9d:50:94:38:d7:73:15:4c:13:81:7e:
21:74:df:0e:8f:85:c9:c5:a1:c9:f4:49:a7:d3:3f:
57:f0:14:b9:33:e0:84:95:e0:25:c1:dd:9e:6d:cc:
ef:6e:68:6d:6e:7f:a6:e5:53:fc:da:be:be:2b:ab:
5b:93:1c:5a:a2:81:8d:a4:31:1a:23:a9:3a:49:5d:
d4:83:69:88:04:4b:c6:21:49:34:0f:a4:06:d2:2e:
21:26:38:f3:ac:f8:0a:09:21:38:6c:bb:28:6c:5f:
d3:19:10:e0:4d:eb:95:03:65:3e:67:6c:61:c5:77:
46:52:90:46:46:42:a5:07:f5:8b:b2:a5:bd:e0:13:
b2:b1:5c:f8:e8:fc:a9:05:ba:82:6e:df:96:e9:7a:
c5:0f:9d:d3:29:07:0c:75:29:88:b2:a4:4d:9a:24:
95:7a:19:4e:c6:b1:e4:5a:24:42:e5:1f:49:3d:f5:
f0:0d:c0:d0:ac:3d:ea:5f:6d:c7:33:03:82:cb:45:
b1:c2:47:f2:d3:bb:b1:75:94:13:98:cd:49:80:36:
c1:74:dc:6f:37:41:9d:eb:ac:69:f9:d9:d1:41:5a:
dc:c6:91:d2:6f:00:be:4d:2e:4f:f9:18:f3:1a:c1:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:30:D1:7F:66:1E:16:80:3E:FC:44:44:B3:D5:A2:41:55:2D:B3:1B
X509v3 Authority Key Identifier:
keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:88:bf:9b:0e:b6:63:89:d7:a0:2e:5f:9e:77:b8:d0:57:8b:
a8:a6:f0:2a:f1:1d:55:0e:bb:df:27:cf:6d:9f:12:1b:d9:6a:
67:eb:78:fe:2b:7f:79:e6:3b:94:1a:f6:9c:32:1c:ee:98:4b:
29:0c:b7:ef:d2:61:9c:1c:94:31:4a:a4:8d:50:a6:d5:ee:63:
40:c3:0c:b8:71:dd:b3:5a:cf:4a:aa:37:7f:23:3d:dc:6c:d7:
d2:3e:d8:69:3c:83:c1:1d:f2:a1:48:94:4b:7a:57:a8:eb:3a:
f8:5b:3d:d8:a2:c7:e1:38:d7:d8:49:51:e0:a4:82:22:77:69:
2c:b6:f6:e7:2f:0c:7b:6c:bb:2e:b6:f9:7d:b9:17:3d:f6:b9:
45:52:1f:95:d4:f9:e7:a7:b2:cc:0c:d5:dc:fd:7f:4a:52:d2:
3c:5c:5d:c8:e2:a3:22:63:fa:23:20:d6:13:fb:d6:98:0e:68:
81:a7:8b:9c:78:be:9b:c9:5a:36:bb:a9:cc:3b:ca:54:d5:4b:
25:8b:a4:f5:7b:ac:ba:08:d1:ae:32:dd:5a:d8:44:e7:32:40:
9b:82:2e:26:45:a2:1e:68:5d:93:7f:a3:0d:17:b9:81:c0:20:
76:1c:75:ea:63:0f:e1:e4:9e:83:78:94:19:22:64:32:2a:f2:
76:34:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:52 2026 by rpki-client