
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier: ra0Jq/m9csgUygHeaa/Jx20YswbxtRrVeqqfPQXo4T4=
Subject key identifier: D1:93:C2:05:BB:8D:DB:C8:A1:09:5A:66:46:F7:11:3B:C6:E2:F2:0E
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial: 1C57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number: 1C3A
Signing time: Fri 22 May 2026 16:11:46 +0000
Manifest this update: Fri 22 May 2026 16:11:45 +0000
Manifest next update: Fri 29 May 2026 16:11:45 +0000
Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: eAWewDjJrFLuGHMiEV/qHoOyrMuvIkv7Rb/d9xdqLLs=)
2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: Bq4dDyNuryVKgCHn3kt6G7S6oGEDro1j46GJUBDoNaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 16:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7255 (0x1c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
Validity
Not Before: May 22 16:11:45 2026 GMT
Not After : May 29 16:11:45 2026 GMT
Subject: CN=6a108042-de3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:1f:9a:50:44:be:78:49:ab:55:6a:79:65:
f2:60:35:5e:04:fd:2b:e9:c9:44:74:f8:c5:a9:75:
ec:7f:4a:fc:a8:14:f0:bb:16:19:16:d6:97:1b:1e:
3b:b4:a8:27:8e:22:19:04:83:a6:53:ee:86:8b:f5:
92:1b:14:e8:80:0f:a9:ce:1b:c7:01:16:66:ce:9d:
bd:3a:3f:e6:83:4b:2e:e8:43:6b:4b:05:00:1d:d3:
12:93:2e:3b:71:44:37:b8:24:9a:a9:94:6f:65:89:
7b:ab:8f:3f:a6:f4:39:44:fb:b8:6d:f4:9b:fb:88:
24:63:3d:fe:47:7c:06:3a:de:1b:8e:1f:ff:0b:61:
7a:3c:00:ad:30:ef:b1:ef:40:c3:aa:8b:2c:a8:06:
85:0f:06:30:3a:23:ea:40:21:75:01:75:16:ad:5e:
67:d7:3b:e1:c5:7c:85:69:61:e3:ec:84:a3:78:cd:
44:26:06:2a:17:b3:53:b9:56:e3:fc:ac:df:e1:7f:
c3:fe:61:2b:7a:05:7e:b3:18:40:da:37:d1:cf:9e:
01:ef:22:f2:40:35:41:30:ec:c6:a0:46:cb:68:51:
41:0c:b6:5e:bf:09:78:d3:21:32:e5:e9:3f:06:d5:
30:a2:28:86:31:1b:87:09:c0:00:4d:fc:f8:65:4d:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:93:C2:05:BB:8D:DB:C8:A1:09:5A:66:46:F7:11:3B:C6:E2:F2:0E
X509v3 Authority Key Identifier:
keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:4c:6c:0b:02:c6:7d:76:58:e9:60:0d:ae:91:e8:dc:58:a1:
c8:a4:60:3e:7c:ee:60:ca:23:6f:f6:e5:5e:ff:6e:6f:65:12:
15:85:30:ec:9e:9e:f1:e6:03:4f:7d:42:85:d3:54:cd:97:01:
f5:ad:e4:e2:63:58:87:3d:c8:fb:f7:50:c6:77:df:3e:5d:62:
21:80:0a:f1:2a:48:f0:51:96:45:ef:5d:4a:ef:a3:59:78:58:
7e:2c:90:36:1b:12:33:ff:bc:9a:3e:77:15:5a:e6:5f:fe:16:
77:78:f0:a6:40:8b:c6:30:35:16:76:05:5c:53:00:9e:eb:ba:
1e:35:c4:da:e6:76:f1:83:4d:52:6b:55:20:58:1e:40:d1:24:
13:3d:d0:e2:56:a6:ba:e5:f8:48:a1:14:2b:05:97:c7:47:d1:
b0:1c:02:5a:47:9e:8b:53:36:b6:ae:63:7d:ec:f1:a2:77:b8:
ce:62:30:9c:e2:bb:fe:10:cf:74:a3:4e:71:28:1c:75:57:ac:
e2:7c:70:21:53:77:a0:61:33:7a:da:8c:0a:95:3f:8f:85:d8:
d6:92:9b:9e:ef:6d:1a:22:1e:06:db:e4:82:34:b4:c0:0a:b4:
64:63:fd:7b:05:5a:2b:63:3e:50:96:99:4b:c9:28:4f:d3:a7:
20:d3:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:04:16 2026 by rpki-client