
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: Sya9WhglTBcerrA8M0Gibc22a5DKqcLzhTYgbiYwBPY=
Subject key identifier: 7B:2E:6A:03:3C:92:8C:4D:71:9B:B1:B4:52:F7:20:03:D0:0E:FE:75
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 06AE
Signing time: Sat 04 Jul 2026 22:44:27 +0000
Manifest this update: Sat 04 Jul 2026 22:44:27 +0000
Manifest next update: Sat 11 Jul 2026 22:44:27 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: 9OP76L6tJh2cA3iYdQTvt7KzAqASJjzmkqsZE5ftaZc=)
2: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: gkPTMzL29fjMeAxqDDyIKfb4bjNAUoeuE5oKyKWBCYo=)
3: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: 5CQDa/aa5UAIsTkpec0rYhloDDXKxfbpTB7+YpevLrw=)
4: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: vBCGm7MlYdNXXeaoLUD2KJwJGSuIu+kSne2oG2vKSsU=)
5: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: iKG0U4dWo4Ii/ph+5g5SKDA8RO4TnmSAWL9RH3BX7Bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 22:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Jul 4 22:44:27 2026 GMT
Not After : Jul 11 22:44:27 2026 GMT
Subject: CN=6a498ccb-bcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:18:b7:b9:f6:2f:5e:e4:7e:75:f5:e1:de:
03:b3:02:85:b3:8d:17:82:2e:f8:8e:f9:0f:a6:fe:
8f:51:93:39:d4:e9:1a:ba:98:24:41:81:b8:e8:6a:
f6:58:fe:ab:50:61:e1:10:5c:4c:67:1c:97:3b:1d:
43:4d:30:21:c5:9b:70:a3:0c:04:28:34:85:9d:54:
43:87:bc:cf:7d:c4:08:17:18:bc:c2:69:d6:e8:53:
5a:74:c0:b5:83:3f:c0:bc:90:be:4f:db:3a:79:9d:
8e:41:77:15:42:93:a3:bc:19:8f:68:e4:47:5f:be:
46:ca:f4:06:6d:7e:65:71:68:cd:00:a0:8f:a2:2b:
2e:93:a4:c6:8c:a0:ee:7a:1e:4f:d8:8c:21:9f:36:
62:f1:73:e9:76:d2:28:5f:85:cd:75:11:62:4a:25:
91:02:97:21:c4:ee:92:b8:50:fc:8b:11:90:b2:23:
a6:6b:9c:6f:c0:f2:38:4a:33:a2:97:39:2d:41:12:
36:60:05:10:0d:2e:17:73:32:d0:78:29:9b:2f:f3:
93:c9:d2:72:56:e1:88:ec:71:d5:cd:81:62:b1:b7:
69:78:cc:97:90:89:3c:f0:21:f1:ca:63:d3:96:f7:
1b:58:6f:d5:51:f3:ab:ad:2e:92:7b:b9:c7:72:ce:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:6A:03:3C:92:8C:4D:71:9B:B1:B4:52:F7:20:03:D0:0E:FE:75
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:45:b8:82:70:e5:cf:a8:ef:f6:e5:1e:c6:76:12:14:71:ef:
b4:16:3a:5f:60:dc:64:1f:33:5c:35:4c:31:df:1d:4e:95:3b:
41:58:eb:d4:c6:96:51:90:ed:39:9d:b2:53:b3:ed:d6:55:66:
c2:a8:08:5e:82:ce:44:45:62:97:89:12:c6:4b:01:ea:ac:60:
8b:50:e4:52:3f:a8:6f:72:3f:79:54:a5:4a:03:08:06:72:fd:
8a:fb:63:12:f9:5f:b6:35:94:67:32:ce:7d:31:58:20:21:d7:
26:99:57:42:33:d2:f9:15:c9:a4:24:63:52:44:2c:20:58:10:
af:0a:98:fc:b4:d3:f9:7d:53:56:bf:f7:f2:6b:33:dd:b9:5d:
16:d6:45:a6:dc:ce:5a:58:85:07:5f:87:21:bd:74:69:25:12:
e2:4a:0f:53:4e:46:db:91:de:17:70:fd:bb:4f:1a:21:f8:8f:
5c:c4:54:a0:f4:a7:b3:ee:1e:9a:ea:2f:2f:34:8f:a2:43:77:
80:fa:eb:46:3c:3f:0a:b9:0b:65:9b:f4:b6:d9:a2:59:52:e2:
7c:6f:de:6f:87:ce:63:e4:1d:5b:88:09:ab:7f:04:3a:d7:04:
68:ad:1a:3b:44:f7:b4:fb:72:59:5b:76:00:49:27:21:3d:5e:
2d:51:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:41:04 2026 by rpki-client