
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier: 7mlU+qPpvzeD+oskX4bcmLgQJRHwxG3lSyW5rSC72EY=
Subject key identifier: 3D:4B:C7:7D:45:9D:4B:A0:82:7C:12:4A:07:2F:20:C8:24:3F:36:75
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number: 026D
Signing time: Thu 21 May 2026 02:05:29 +0000
Manifest this update: Thu 21 May 2026 02:05:29 +0000
Manifest next update: Thu 28 May 2026 02:05:29 +0000
Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: pCipenbxGRnPz9vYnizxy71UT2cWbyDU0KG/EmGyiLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Validity
Not Before: May 21 02:05:29 2026 GMT
Not After : May 28 02:05:29 2026 GMT
Subject: CN=6a0e6869-f9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ad:62:6e:74:cc:5c:c0:7b:46:98:f0:d9:40:
f3:df:1f:25:65:ba:a6:6c:36:1f:ed:ff:a2:85:20:
4c:09:71:81:53:ae:a6:04:f9:6a:34:de:40:c6:1b:
d4:42:c0:29:b0:bd:1f:01:6f:1c:c2:e1:7a:41:fc:
24:f2:80:37:f6:e5:77:11:56:a3:58:d9:b2:2b:cd:
48:37:6b:5b:84:01:db:75:0d:d0:b9:e3:b8:0a:85:
ff:f9:fc:72:e3:4a:74:0f:15:21:51:27:45:20:87:
49:ee:df:7d:a6:04:66:f2:c0:95:a9:1c:34:58:b3:
8b:73:5e:0f:2f:e2:78:34:62:c1:b2:47:65:72:db:
6c:b8:1e:eb:32:0c:0d:f6:9e:51:fe:02:98:47:11:
2e:4c:98:11:86:67:30:28:96:1a:c0:02:25:08:6b:
65:88:af:8c:16:83:62:e0:84:f3:cf:ca:f1:6c:62:
3f:3c:ac:ff:2c:94:ae:82:35:55:e4:33:e6:a7:2c:
16:04:6e:86:3b:6d:45:65:36:fa:15:f4:67:9d:b3:
1d:be:8b:c4:39:26:13:d2:a4:08:49:59:47:de:8e:
fe:e9:16:cd:57:d4:26:93:70:a7:0f:0e:9c:e3:ba:
ed:84:09:a1:4a:22:40:69:90:f4:22:2b:32:8f:cc:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:C7:7D:45:9D:4B:A0:82:7C:12:4A:07:2F:20:C8:24:3F:36:75
X509v3 Authority Key Identifier:
keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:04:c8:c7:75:02:87:4d:24:4e:ec:ea:53:1f:dd:b0:00:8b:
a1:f0:48:d5:53:19:8e:0a:0f:2d:44:1d:ce:6a:76:a4:a1:23:
b8:c3:4d:7f:9f:59:d2:7f:43:58:96:ac:09:91:4e:7f:55:c0:
66:28:d2:d0:84:75:74:72:06:94:0e:fd:c5:c1:92:a9:1f:08:
92:40:4d:1a:62:22:4b:da:0b:9a:58:c8:09:ca:d3:24:9a:36:
9a:64:76:44:53:da:49:c0:36:ec:3c:95:cd:7c:60:17:96:78:
3a:e5:f4:8b:82:b8:84:15:64:bc:89:67:27:1d:0d:fc:a2:cf:
07:14:0d:34:ba:97:e7:c9:bd:ed:15:13:f8:e9:a0:82:84:21:
11:01:8e:c4:64:a2:78:19:67:5a:eb:06:cb:e2:41:25:e8:92:
35:f4:7d:0c:19:49:41:56:4c:1b:21:99:57:f6:95:d4:01:13:
c8:ab:f6:9a:17:40:43:68:72:41:20:b9:a8:04:a1:22:12:ae:
04:d7:23:5a:b3:97:40:34:95:d2:58:aa:0b:8a:23:7d:08:64:
c2:ed:0a:aa:e3:d1:93:00:82:a5:49:1e:82:b1:08:53:38:f2:
49:3f:dc:13:a2:5b:03:6d:c3:d2:11:30:5f:5a:8c:89:bd:2f:
1f:9d:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:01 2026 by rpki-client