
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier: +aJRrvEkHdVX9l+zd5mwiSrTKYKqNyqg3jvVGdJeMB0=
Subject key identifier: 18:37:34:A7:52:35:82:A6:F0:2C:30:E8:B5:19:3D:0E:93:CF:73:24
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number: C5
Signing time: Mon 01 Jun 2026 07:51:26 +0000
Manifest this update: Mon 01 Jun 2026 07:51:25 +0000
Manifest next update: Mon 08 Jun 2026 07:51:25 +0000
Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: rTc0PDtc7QxAVw/4Kn8BktBawl7HBcrPSfqYFDKJ2TE=)
2: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: XTg2evwkR4VvSVQWu251hii2ssGz9ZlroApKBF0azrE=)
3: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: 2rQsXi5kIwQ2IE+rYx9M2psZsNK3ECigUyxfaVNd7kI=)
4: B87594FC08B311F1954B37591C3D8C67.roa (hash: H6vYE+gxhuAKlVgXnsRMmqmTt0CZdQJgg6x87GzOftE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: Jun 1 07:51:25 2026 GMT
Not After : Jun 8 07:51:25 2026 GMT
Subject: CN=6a1d39fe-0838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:0a:0b:97:88:28:1d:ae:4c:d4:e8:50:68:
74:2c:47:35:a8:ed:87:27:f8:4d:45:d4:f1:d7:cc:
a3:6b:51:9c:04:76:97:5f:72:22:5c:83:a8:31:fa:
ba:09:98:f7:ea:41:05:98:c1:50:3e:d5:23:12:d0:
de:0c:de:03:d0:39:67:34:7d:2e:74:71:42:ee:6b:
87:48:2c:ff:0c:50:ea:92:2f:bf:08:16:a2:b2:e6:
0e:4b:45:02:19:8e:04:d2:ae:37:a8:e5:14:92:30:
69:f5:8c:a6:e1:d6:ef:ad:9b:a7:3d:68:b0:5a:2e:
f9:2d:20:de:35:16:26:d3:6d:7b:3e:2e:f4:4a:ac:
1e:16:c5:32:83:60:58:9d:23:b4:f8:38:30:0e:d8:
b8:1a:3f:52:40:00:23:d1:fc:b3:eb:f6:b5:35:83:
db:37:02:39:2f:86:c3:79:de:69:39:23:07:c6:bf:
95:d7:38:d0:b9:da:fa:d7:45:57:6f:51:3a:bf:a3:
86:d9:9d:69:ec:19:46:e7:af:8e:0e:c3:dd:a8:66:
ff:0a:3c:f8:29:e1:04:5f:47:e1:8e:7f:27:19:e0:
92:00:38:3b:87:25:33:2a:2a:f2:48:88:02:58:18:
52:dc:47:59:81:6e:fe:26:8c:27:f3:14:e0:0a:25:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:37:34:A7:52:35:82:A6:F0:2C:30:E8:B5:19:3D:0E:93:CF:73:24
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:a9:dc:2f:54:ff:29:00:5a:32:3f:ce:5e:b1:0a:74:05:ba:
0b:ac:99:79:0b:56:83:9b:d0:68:67:ea:e6:73:2c:97:38:e8:
61:f6:ba:24:68:73:07:2b:60:0c:e3:d3:67:1d:a0:1a:9e:a2:
05:f3:b1:8f:bd:64:bd:9e:de:07:38:61:e3:dd:d3:7a:44:3c:
5f:07:ef:0e:cd:28:76:eb:7e:78:17:4b:51:ae:f0:a7:f7:c8:
cb:f9:77:31:83:b2:73:66:84:60:ed:bc:22:0c:54:fd:b7:16:
6f:f9:68:62:16:ad:33:89:6f:26:c8:4e:2d:cb:05:64:3b:21:
3c:df:b0:5d:67:5a:7a:71:e8:5b:8b:7e:0a:79:12:42:50:03:
64:2f:12:40:a4:37:85:7b:ef:fc:bb:da:c1:bf:4b:4d:09:3a:
d3:7c:20:74:90:e0:83:82:5a:e4:ef:b6:46:22:3b:93:86:4e:
e3:64:3a:6c:a8:37:60:09:0e:5a:b5:65:e5:ee:16:9b:88:ad:
4d:21:b4:eb:9a:fa:14:12:82:c7:a1:71:fb:6f:59:84:f2:0e:
46:c2:cb:1a:b7:b0:b9:0b:24:ca:45:9e:89:40:7b:41:0d:f8:
85:1e:32:c6:bb:0c:17:c3:07:f2:a8:32:dd:1c:81:52:b7:79:
fb:5a:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:48 2026 by rpki-client