
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json)
Hash identifier: ZM2T+AiwioUxb7IDVW1eP8+we1jd9DJ594RiDyPUv38=
Subject key identifier: 7D:3F:04:30:E6:B1:C1:C8:A3:B1:00:EE:2E:CF:20:5B:F4:9A:76:FE
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
Manifest number: D6
Signing time: Fri 17 Jul 2026 07:52:23 +0000
Manifest this update: Fri 17 Jul 2026 07:52:22 +0000
Manifest next update: Fri 24 Jul 2026 07:52:22 +0000
Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: aW0Nob13519jY0fxWm0DI6jAbGxL9BVt+5tkozVbdMk=)
2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: TIY6gyAp3NwOI0omiLD20nrzYuDIOBYf89hc7GdDNuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Validity
Not Before: Jul 17 07:52:22 2026 GMT
Not After : Jul 24 07:52:22 2026 GMT
Subject: CN=6a59df37-4d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:60:de:04:34:29:69:e9:ff:c6:40:4a:0c:
0d:e9:58:af:e9:38:22:10:9c:5e:60:1a:00:65:bd:
ef:08:87:00:b6:51:42:fb:92:7a:c0:d1:2b:fb:ab:
f5:c9:c8:2d:8f:24:6b:08:ed:88:e2:23:90:e8:8d:
a2:29:4f:ff:41:2d:c0:87:40:21:a9:0b:85:0e:f3:
4c:9c:46:15:7c:39:fe:af:a0:3b:55:4f:d1:c6:71:
fb:7d:9d:c7:ee:50:bb:88:1f:64:65:62:db:82:97:
30:ee:8a:2f:49:6d:6f:17:4f:7d:5b:6d:58:88:55:
80:6e:7e:1b:4d:df:a9:c8:86:d0:a4:57:aa:72:fc:
58:29:e2:ed:ff:06:fb:94:3f:3d:cc:e9:cd:17:57:
16:bb:62:e5:be:c3:3b:31:ab:a8:e3:12:23:04:e1:
a4:5e:13:19:09:ca:a7:3c:ff:9f:3d:3d:8b:b2:a7:
3e:51:4a:8a:ab:ae:af:af:3e:23:e5:17:ca:8e:46:
d8:16:b1:28:c5:62:08:73:ec:8b:d3:24:77:0f:74:
36:ff:15:90:2f:96:50:1f:7c:93:34:2f:e9:84:27:
3b:16:23:25:85:25:81:bd:62:4a:e2:d0:9d:11:4d:
fd:2f:35:44:19:ff:c8:6d:9f:cf:86:43:77:80:c4:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3F:04:30:E6:B1:C1:C8:A3:B1:00:EE:2E:CF:20:5B:F4:9A:76:FE
X509v3 Authority Key Identifier:
keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:17:c6:f8:e1:e7:f4:7f:f2:ff:f7:a4:2c:22:7d:48:d2:
0d:75:48:82:6c:7d:e3:d5:e9:2b:d8:ad:b8:b5:82:79:0b:e3:
22:e4:db:55:47:59:4b:25:12:fd:a4:f8:60:b0:81:90:6b:13:
f0:c2:48:bd:24:d1:1b:3c:77:b6:c3:e1:11:05:c4:6d:a9:80:
20:39:12:f3:45:99:f5:8a:38:f5:83:91:77:af:b6:31:61:29:
67:f0:ed:9e:97:9d:e8:33:a4:b0:f3:6a:e2:f6:ee:23:5a:b6:
36:50:f2:75:d5:72:d5:38:75:08:28:31:f7:ba:5b:5d:f9:71:
3f:e1:ad:20:5b:3d:e4:bc:9a:a5:66:ee:04:23:f0:33:76:ae:
12:24:c0:5a:d6:ca:e7:02:4f:ee:95:59:e7:6d:97:ef:ff:d7:
24:d6:2c:59:f8:18:c6:af:67:e6:e6:42:c8:f9:6d:0b:4d:78:
38:64:ba:b9:f7:b6:3a:61:19:48:fa:3d:ec:19:d8:30:12:a6:
bd:bb:28:1e:1d:f5:fe:7f:16:5d:0a:65:62:6f:3d:0f:4b:ba:
35:4f:7b:3d:17:3a:51:b7:40:c5:67:7b:df:d0:c2:a2:f7:b5:
0c:8d:64:1f:26:b6:35:de:3d:81:1c:34:38:ce:17:07:eb:33:
ed:4e:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:41 2026 by rpki-client