
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json)
Hash identifier: Z69xek/EJo0JT1ORgu5JU95sXTLo4Jg3QOZgtej937M=
Subject key identifier: 77:A7:98:D9:1C:3E:F8:F8:22:FA:5F:88:A9:B3:32:70:0A:86:76:53
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial: 10E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
Manifest number: 10C1
Signing time: Mon 20 Apr 2026 17:16:48 +0000
Manifest this update: Mon 20 Apr 2026 17:16:48 +0000
Manifest next update: Mon 27 Apr 2026 17:16:48 +0000
Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: G94xecWRW/40S5duQj5wrBd9CwotWhtaRNrUVDaUc0w=)
2: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=)
3: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=)
4: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=)
5: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 17:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4325 (0x10e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Validity
Not Before: Apr 20 17:16:48 2026 GMT
Not After : Apr 27 17:16:48 2026 GMT
Subject: CN=69e65f80-ce49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:07:27:94:f4:b3:b8:60:13:b3:27:55:cd:
b6:c8:37:21:8f:24:f2:91:3f:05:19:42:ca:ec:7f:
b0:b3:89:b2:86:71:f6:76:d5:b9:f2:c3:51:f1:91:
45:5b:a2:b6:6c:3c:7a:b7:18:90:5b:d2:af:eb:40:
a4:4d:b4:2d:9f:20:9e:bf:2a:cb:3d:48:22:38:67:
a1:04:77:8f:1a:fd:ff:2c:3c:47:14:6d:88:f0:70:
88:89:ac:5c:61:90:36:23:e4:29:65:93:da:5d:88:
1b:33:d1:2d:51:8c:54:c8:23:a2:21:64:9d:2f:61:
93:55:74:53:77:7a:72:c1:e8:2f:09:ac:4f:7a:02:
0a:5c:54:b5:eb:f4:e5:d6:4a:72:6d:47:05:9e:8e:
0e:1c:a6:9b:eb:d3:c2:53:b7:75:74:48:ad:c9:df:
3d:d6:f9:8a:ba:79:27:f1:e3:71:fe:d6:3e:98:3d:
d9:6c:e6:0c:ea:be:02:10:1a:7a:64:4e:3d:64:b8:
a1:82:06:d4:7c:84:cc:f6:50:c9:de:7a:2c:f8:ac:
43:65:dc:be:02:39:cc:13:64:0d:a1:06:b3:ec:e3:
87:da:3a:d3:ab:d3:4b:11:7c:ee:54:16:bf:1a:cd:
52:ed:4e:c3:5c:99:1e:7e:d5:81:f2:17:62:c2:79:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:98:D9:1C:3E:F8:F8:22:FA:5F:88:A9:B3:32:70:0A:86:76:53
X509v3 Authority Key Identifier:
keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c3:66:b7:ff:4c:77:96:9e:82:cf:42:59:3b:7b:46:49:73:
6c:24:08:b5:7a:76:47:ca:99:c1:64:ea:3d:64:c3:ed:dd:02:
9c:e9:98:9d:f0:21:63:c3:5d:61:f6:2a:85:ad:5c:1f:f4:8f:
b7:4d:e9:c9:46:b1:fd:d9:89:97:ce:3e:46:3e:64:13:b9:23:
93:f6:3b:ce:e6:a2:d9:1e:40:b7:94:b7:6a:82:4a:a6:da:9b:
8c:de:4e:4f:7c:60:7d:bb:e9:e8:5d:e9:0f:fa:42:7b:7e:6a:
f0:83:23:ba:7b:49:da:eb:04:64:0e:02:9d:ef:60:db:8a:b9:
bb:aa:f0:c6:0d:5e:38:4b:d0:70:cd:02:36:18:4e:b1:aa:40:
5c:1d:24:3b:ab:62:5d:c1:99:ca:67:84:d8:5d:10:91:43:57:
6b:3b:99:9a:ed:5d:4e:36:e6:52:19:f9:0b:97:b9:b3:58:4c:
5a:64:fe:ad:6c:3b:cb:cc:59:27:ed:75:15:e3:d2:a6:b5:a9:
bb:34:b7:9e:3c:3d:70:46:dd:3b:7a:47:0e:32:de:e8:c2:d4:
1f:6f:be:fc:fd:2e:4d:74:5c:9f:59:f8:c3:29:11:4a:34:cb:
e3:71:f0:fd:02:2c:79:08:e4:4c:d5:82:a5:2b:a5:d3:d5:79:
01:50:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:44:25 2026 by rpki-client