
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
File: daQM7SSsrWLFirKOoOD3xeXhx4g.mft (raw, json)
Hash identifier: hyOo+kkWsELXAQvd1UbmzfTLHOVfABamySGm9UOXGuM=
Subject key identifier: 1B:01:7E:9B:7A:BD:DF:7D:E9:95:49:98:37:6C:80:C5:DB:43:DA:C8
Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Certificate issuer: /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
Manifest number: 0188
Signing time: Mon 01 Jun 2026 05:20:15 +0000
Manifest this update: Mon 01 Jun 2026 05:20:14 +0000
Manifest next update: Mon 08 Jun 2026 05:20:14 +0000
Files and hashes: 1: daQM7SSsrWLFirKOoOD3xeXhx4g.crl (hash: ykaaOw2aVtFBcAoXvVU6u/Dr9fm3YZCeSI8+rc8rCuw=)
2: 7EB19CF81E5811EF8E8F0D3CC4F9AE02.roa (hash: dZhz63yVCeTBzWMY75L0Bm2evDQYzA/h1Cy1vJR1+hs=)
3: 118CC10A1E2D11EFBD391A28C4F9AE02.roa (hash: L8spoNSm7g/u/EwRwbHS8dvjBfOIf2WmgkHCF85+Xfo=)
4: F22762F4741011EF9E049760C4F9AE02.roa (hash: U0KGzRthmkm1zRt+uEMqhBQuI1kS3OQDqLIRZ8rjx1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Validity
Not Before: Jun 1 05:20:14 2026 GMT
Not After : Jun 8 05:20:14 2026 GMT
Subject: CN=6a1d168e-4eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:79:f1:85:2f:d1:53:5c:8f:ff:f6:3b:1a:
98:6a:4a:65:52:6e:52:8f:c4:cb:e2:00:dc:29:dd:
bb:f7:2d:d0:20:18:93:41:c7:95:64:de:63:b4:8d:
ea:3a:7a:55:70:56:57:05:74:73:1b:ef:e3:9e:61:
90:04:83:11:f2:11:cc:7a:3f:99:7f:e3:ea:08:d8:
df:79:cc:36:fa:69:40:04:20:a4:c9:e9:a4:a6:13:
b0:2d:1c:74:0a:3e:e5:af:14:4c:68:11:45:fc:d7:
85:b7:79:81:8b:86:82:7d:38:f5:67:f6:4f:02:5d:
de:33:0b:03:0c:bf:cb:0b:ea:a5:8d:d5:75:db:4e:
3c:2e:dc:49:20:34:16:1c:72:25:43:a3:15:d7:74:
e8:b1:03:c3:d9:7f:6a:dd:5e:07:59:fb:9b:84:e4:
80:be:2e:29:63:88:1b:4d:01:55:13:83:3a:69:14:
b4:df:16:41:dc:6e:62:ae:d8:5b:b0:dc:04:ad:1a:
c1:12:44:95:72:0b:6a:d0:eb:f0:27:25:f5:bc:6e:
c5:20:ca:ce:3e:a2:4c:79:49:26:68:ef:e6:46:0d:
01:03:55:cb:7f:6b:a2:2a:29:2b:91:ab:02:eb:97:
68:33:bd:ec:d5:4c:e9:3f:13:ac:ea:f6:24:fe:c3:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:7E:9B:7A:BD:DF:7D:E9:95:49:98:37:6C:80:C5:DB:43:DA:C8
X509v3 Authority Key Identifier:
keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:b0:c9:13:bb:40:5e:fb:f5:c5:f3:4c:e9:82:fb:1a:55:ec:
32:59:33:04:91:62:7d:da:77:a5:4a:50:44:16:fa:e5:e5:f7:
a6:f7:73:6a:33:fd:91:78:13:37:c9:94:fe:73:a3:94:70:00:
a5:c1:c9:5b:e1:5f:57:0c:c0:78:db:14:e3:27:94:b2:51:f6:
4e:03:30:52:c4:53:4f:9e:84:06:cc:ef:8b:16:aa:73:9f:5f:
b3:54:53:89:25:bf:cf:56:a9:ac:7d:70:83:17:5f:8b:0e:40:
56:18:e6:d0:b3:7d:bf:4f:39:98:78:9c:85:af:e3:5f:ed:3d:
61:01:ae:4f:38:a1:a8:c8:ec:57:00:46:0a:f6:80:cf:79:7d:
8c:60:6d:1f:6b:9d:ef:25:07:83:1e:2f:5f:e6:2f:77:e3:37:
7b:c2:48:20:01:6f:0a:cc:84:39:f1:bb:5a:b9:cf:65:07:78:
f9:fe:ef:64:6a:25:18:88:9e:00:17:fa:2c:5c:1e:89:a3:95:
ac:7c:36:68:59:b1:1a:04:f0:c8:15:52:2f:d5:0f:41:42:89:
c7:bd:77:d9:10:69:ba:f1:16:ed:6d:ee:64:8b:0d:8d:84:bd:
d3:27:52:f7:8a:11:79:2a:0a:db:30:2d:45:80:6f:b2:32:93:
fb:67:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:27 2026 by rpki-client