
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: Thvy8EP0pPfmcXSzbSh0XFT8Ztt6TxZqelg8z2AQcJE=
Subject key identifier: 52:20:49:02:71:7B:9E:C4:38:51:08:20:51:62:C8:35:92:80:40:2E
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 06E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 06C5
Signing time: Tue 18 Aug 2026 22:43:46 +0000
Manifest this update: Tue 18 Aug 2026 22:43:45 +0000
Manifest next update: Tue 25 Aug 2026 22:43:45 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: DvEelXxM0dFRU6n9DOOcFMJ2Xvv12B8xkO7GoClMgm4=)
2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: iKG0U4dWo4Ii/ph+5g5SKDA8RO4TnmSAWL9RH3BX7Bo=)
3: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: 5CQDa/aa5UAIsTkpec0rYhloDDXKxfbpTB7+YpevLrw=)
4: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: vBCGm7MlYdNXXeaoLUD2KJwJGSuIu+kSne2oG2vKSsU=)
5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: gkPTMzL29fjMeAxqDDyIKfb4bjNAUoeuE5oKyKWBCYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768 (0x6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Aug 18 22:43:45 2026 GMT
Not After : Aug 25 22:43:45 2026 GMT
Subject: CN=6a84e021-d84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:4f:aa:31:a5:8a:e7:6d:7c:b6:a6:38:bc:
a8:83:a8:ad:ca:24:96:00:a1:fa:ea:48:d9:12:59:
43:bf:75:d5:3a:e8:91:5b:8d:f0:bb:a7:2e:94:3e:
35:5f:c6:0c:de:84:29:bc:ad:5d:45:e7:74:ae:16:
b8:1e:6c:4b:6d:53:db:fc:52:d4:0a:f5:8c:20:2d:
36:05:f1:c8:91:2b:17:12:ec:09:ec:cb:96:70:8d:
ef:fa:4b:87:e7:e5:6c:a3:dd:9d:ef:44:7c:ac:ea:
53:eb:22:0b:40:70:3f:8c:5b:2c:1f:2f:7f:ce:ae:
af:6f:5b:9a:03:b7:26:7a:8e:15:9c:b3:b1:6c:16:
43:a8:a0:44:b4:4d:2c:69:6b:4e:5e:c4:a0:01:26:
05:d9:4f:2a:83:d1:f2:18:80:fd:ba:37:30:de:56:
fc:9a:27:e8:e6:23:d0:fc:5d:f6:88:4b:a4:bc:1f:
13:fc:0a:df:6a:9c:d8:76:e0:15:1d:fe:52:57:02:
ab:24:ec:1f:bd:a8:97:dd:f1:3a:87:5c:6d:e5:51:
da:f5:89:34:ca:05:db:b1:1a:a1:5a:30:e0:fc:6c:
2c:71:17:b0:47:43:1e:23:20:65:eb:1a:23:28:ad:
cd:78:c3:90:42:19:7a:98:20:f7:3b:a2:4f:86:9c:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:49:02:71:7B:9E:C4:38:51:08:20:51:62:C8:35:92:80:40:2E
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:dd:c6:db:43:5d:fb:56:7c:36:78:4d:ff:55:89:9b:05:c3:
47:10:1d:d0:d2:61:90:2b:4e:39:fe:80:b9:4d:77:fa:a7:a1:
3c:b6:3d:74:fe:95:5c:b1:25:41:2e:9b:7d:17:85:e8:6f:dd:
16:b3:8c:d2:bc:06:66:a1:db:07:ea:8b:5f:3e:98:6a:b9:d5:
db:f8:95:be:0f:35:7d:cb:f6:eb:fb:80:71:1b:cd:c6:8c:3e:
61:a2:3d:76:97:56:0f:e8:72:05:9d:08:f3:d8:21:34:d3:ce:
48:d2:da:52:bb:ed:1d:09:3b:c2:45:ff:12:94:fa:3a:98:68:
cf:1d:8e:e6:e6:d9:ce:33:b5:8e:b4:97:d5:5c:9d:2f:4c:53:
e5:73:2e:9e:c7:35:e9:bf:7e:a5:9a:b7:29:48:ae:83:8e:d6:
a4:87:63:0f:62:36:18:65:e0:13:22:15:7d:84:01:38:d0:41:
b0:fc:19:15:73:aa:c4:f2:64:b1:33:48:36:81:b6:09:7b:25:
94:92:e2:98:b0:cd:6a:bc:03:96:85:33:ed:1b:af:31:c1:d9:
86:b0:49:78:e5:b5:65:a1:d4:0a:99:1a:d8:89:43:3c:bc:a2:
8b:b4:a9:e6:40:ed:c9:cf:57:4b:10:1c:b7:b1:47:5b:16:90:
23:6f:b4:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw
NzZFODhDMDgwHhcNMjYwODE4MjI0MzQ1WhcNMjYwODI1MjI0MzQ1WjAYMRYwFAYD
VQQDEw02YTg0ZTAyMS1kODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDpPqjGliudtfLamOLyog6ityiSWAKH66kjZEllDv3XVOuiRW43wu6culD41
X8YM3oQpvK1dRed0rha4HmxLbVPb/FLUCvWMIC02BfHIkSsXEuwJ7MuWcI3v+kuH
5+Vso92d70R8rOpT6yILQHA/jFssHy9/zq6vb1uaA7cmeo4VnLOxbBZDqKBEtE0s
aWtOXsSgASYF2U8qg9HyGID9ujcw3lb8mifo5iPQ/F32iEukvB8T/ArfapzYduAV
Hf5SVwKrJOwfvaiX3fE6h1xt5VHa9Yk0ygXbsRqhWjDg/GwscRewR0MeIyBl6xoj
KK3NeMOQQhl6mCD3O6JPhpzS9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIgSQJx
e57EOFEIIFFiyDWSgEAuMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE
MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q
QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho
OHMxb1FSWkVvRndIYm9qQWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXt3G20Nd+1Z8NnhN/1WJmwXDRxAd0NJhkCtOOf6AuU13+qehPLY9dP6VXLEl
QS6bfReF6G/dFrOM0rwGZqHbB+qLXz6YarnV2/iVvg81fcv26/uAcRvNxow+YaI9
dpdWD+hyBZ0I89ghNNPOSNLaUrvtHQk7wkX/EpT6Ophozx2O5ubZzjO1jrSX1Vyd
L0xT5XMunsc16b9+pZq3KUiug47WpIdjD2I2GGXgEyIVfYQBONBBsPwZFXOqxPJk
sTNINoG2CXsllJLimLDNarwDloUz7RuvMcHZhrBJeOW1ZaHUCpka2IlDPLyii7Sp
5kDtyc9XSxAct7FHWxaQI2+0qw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 09:12:52 2026 by rpki-client