
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier: 4qfYJacMWkCHSyA3i71OdMDnExXAUzip3WXkVQZKWKI=
Subject key identifier: F7:AA:4B:1E:92:9E:16:C7:1D:9B:79:98:8B:F2:7A:BD:EF:61:84:68
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial: 030F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number: 02F3
Signing time: Mon 01 Jun 2026 02:05:04 +0000
Manifest this update: Mon 01 Jun 2026 02:05:03 +0000
Manifest next update: Mon 08 Jun 2026 02:05:03 +0000
Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: 5uOVLr8v4VZkFY/Dr+AbiUQ4cBaf7RIiCLL8kgKzZF8=)
2: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=)
3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 02:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Validity
Not Before: Jun 1 02:05:03 2026 GMT
Not After : Jun 8 02:05:03 2026 GMT
Subject: CN=6a1ce8d0-8a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:5f:3d:05:2f:69:bd:7a:5c:5f:b4:f5:14:
56:93:18:b1:bc:5c:4d:41:25:67:c3:86:d6:b5:bf:
47:ab:69:1f:e5:00:46:4e:4e:1e:78:12:c9:31:bb:
4d:43:01:4c:6c:12:0b:93:7c:67:e3:e4:1c:49:50:
d4:b4:a4:be:40:92:48:00:1a:76:f0:21:3a:ec:99:
85:f2:5a:69:ab:86:d0:0b:ac:2b:8a:5e:15:38:0c:
f5:73:76:1a:7f:25:47:46:b2:3f:f4:57:47:53:c1:
a2:c9:05:03:3c:8f:78:b7:c1:76:e9:2a:01:fa:13:
41:80:ef:ba:1a:e6:8d:f7:b7:b2:7b:a3:e1:87:73:
77:78:59:08:b7:e1:7d:cd:bb:0e:c0:be:e5:3b:18:
21:df:93:7b:42:cf:a6:4b:93:41:41:f0:da:b9:51:
9d:cd:50:29:d2:59:11:dc:f7:56:f0:24:16:cb:b7:
4d:26:70:2c:bf:91:e3:42:66:b9:ba:a4:fa:b9:14:
55:62:d6:bb:3c:a5:4f:9c:22:b3:2d:18:7a:b7:22:
11:a0:43:de:e1:06:69:01:e1:df:db:68:02:e4:db:
f2:51:58:ad:a4:11:0a:9d:71:f8:fa:a9:db:32:31:
1a:a6:94:01:16:ce:d7:54:5a:69:e5:ac:ff:7d:11:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:4B:1E:92:9E:16:C7:1D:9B:79:98:8B:F2:7A:BD:EF:61:84:68
X509v3 Authority Key Identifier:
keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:94:c7:76:79:36:c5:4f:a2:0d:8c:80:8c:2e:c7:7e:5f:a3:
03:82:b6:ae:63:7e:b4:2b:4a:56:e6:94:89:38:3d:3c:4c:18:
2f:32:d6:a8:a8:45:4d:e0:70:01:5f:b5:4a:0a:4b:12:d9:0b:
6c:31:ba:ba:3e:c9:79:cb:57:7a:49:80:03:62:c3:b1:5c:20:
d3:87:2a:4c:36:c2:5e:20:d5:9d:f0:af:a9:17:d3:e6:fa:a6:
9a:98:79:88:f9:6c:d7:04:30:5c:39:ef:46:be:0c:bc:b9:a6:
b9:56:4f:9b:b2:46:a8:d5:e9:b6:5d:04:8d:fa:cf:8d:99:f3:
98:34:15:80:65:4f:79:3d:64:8b:bd:79:5c:28:85:13:1a:a5:
1d:58:82:0e:b6:9e:47:db:b8:80:26:b9:7a:ed:d0:80:02:9e:
7c:2b:83:9e:58:cd:c2:09:8e:ba:b1:d1:c3:ae:37:29:82:49:
56:a8:34:71:e1:9a:4c:a8:ef:80:30:f2:56:c2:0c:0a:50:f4:
fb:89:23:1b:96:43:ff:bb:49:fa:8f:c9:16:05:af:9b:08:26:
37:b0:4b:ef:64:d6:27:65:28:05:86:48:66:37:8d:e8:af:75:
64:27:f3:5f:19:ea:26:fb:ef:10:07:4d:30:ba:9e:e7:fa:dd:
24:e9:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:05 2026 by rpki-client