
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
File: dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json)
Hash identifier: dypHSAVrOGnER9N8Z0kVmFHRiJdaCYuE05SdjPgy4P4=
Subject key identifier: D4:64:25:F3:9E:B3:25:B3:A8:23:FB:D1:C0:45:E6:BD:58:C6:8B:2D
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
Manifest number: 0189
Signing time: Wed 19 Aug 2026 05:06:44 +0000
Manifest this update: Wed 19 Aug 2026 05:06:44 +0000
Manifest next update: Wed 26 Aug 2026 05:06:44 +0000
Files and hashes: 1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: WDygb2fbZyxHvqeQyOvc2bHytrzPoCmPEVn0/1GzB9g=)
2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: 92+MCvev4Dufdf+wuDOQcin6Fkp7+RWjlESgBq/RGGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Validity
Not Before: Aug 19 05:06:44 2026 GMT
Not After : Aug 26 05:06:44 2026 GMT
Subject: CN=6a8539e4-540c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:75:42:a4:83:95:d7:c1:b6:af:87:3d:61:
84:7b:2f:64:e3:e1:f7:fe:7e:75:28:bf:4b:1b:13:
7d:9b:b2:06:5f:8e:45:d4:82:cd:ba:3b:92:de:c0:
2e:2c:40:3f:c6:dc:9c:e6:86:79:4a:1b:38:a6:a2:
6a:fb:cc:4f:25:de:95:6b:b3:1b:15:24:f9:dc:24:
af:73:10:43:62:2e:3a:cc:6c:96:36:91:10:7d:89:
a2:eb:51:54:0a:09:17:78:08:04:37:da:c1:c6:87:
ff:d9:35:fd:8e:da:5d:d7:8b:46:5b:dc:08:54:a7:
e9:17:0e:01:ae:cf:e8:dc:f5:24:25:a4:05:98:f3:
47:cf:4a:dd:44:47:b5:7b:99:71:cf:7d:84:b2:d5:
e1:82:57:ad:97:cf:23:73:dc:0f:b7:67:73:b7:d5:
d1:9e:11:96:5f:c4:9f:f8:aa:46:65:f3:79:fd:99:
14:41:cd:1f:46:17:76:e7:aa:de:4f:15:0d:ea:d5:
4d:fa:34:c1:a6:37:5a:a0:a4:ca:55:a1:70:4e:38:
ee:07:72:e1:35:94:ff:30:33:fc:eb:89:ab:7a:1e:
f6:9b:bc:21:49:4c:cd:7d:66:99:f8:22:f2:0e:05:
ca:1c:17:23:94:a4:22:ee:29:11:74:4a:00:d3:15:
07:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:64:25:F3:9E:B3:25:B3:A8:23:FB:D1:C0:45:E6:BD:58:C6:8B:2D
X509v3 Authority Key Identifier:
keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:37:e7:11:ef:59:53:b2:15:11:23:2a:2c:a5:37:09:54:92:
e3:e0:8f:d6:fb:30:5c:e8:37:68:08:c3:62:96:63:28:ef:20:
a7:b8:36:f3:6a:3a:c1:4b:53:48:4e:8f:aa:5c:d6:39:8f:44:
da:46:1e:2c:06:b9:ce:23:4d:5b:b5:f6:13:f9:6b:de:cd:43:
dc:b6:89:0d:ab:82:40:e8:e6:f0:b5:c1:8a:b0:e1:d3:f8:87:
6a:a1:a7:21:e9:0e:b1:4b:2b:22:c1:06:89:21:ef:50:78:f6:
57:e9:6f:99:2b:98:c8:eb:e7:0c:4c:01:26:b1:32:bb:e8:11:
3f:06:84:98:64:46:3d:02:23:d5:a0:d6:eb:a6:8e:1f:cd:69:
33:f5:88:7a:b0:f0:91:8c:3b:9e:dc:0b:84:61:a6:f8:ec:87:
ca:0c:7a:1d:f8:53:20:8e:d1:e3:0b:36:56:21:13:14:aa:d5:
ed:ed:48:1b:7a:f7:27:56:f6:9b:03:c9:0f:85:05:80:65:dd:
c3:9d:ba:d5:46:8d:eb:2a:c3:61:e3:01:13:ff:61:b1:57:77:
3a:e8:38:41:39:d9:53:98:e9:17:b8:16:86:67:b7:a7:24:60:
40:d9:49:58:e0:b1:cb:77:38:cc:ec:ca:6d:99:2d:87:3f:35:
33:50:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:08 2026 by rpki-client