
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: 5Bh+erRrtH+DoRiuuAb/vHfD1gzn8eWVAM0ZjPwkm4E=
Subject key identifier: 35:AD:F2:7E:5F:12:4B:A3:10:80:0C:05:3A:9A:E6:E5:23:47:E6:52
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: 014D
Signing time: Fri 17 Jul 2026 06:26:46 +0000
Manifest this update: Fri 17 Jul 2026 06:26:45 +0000
Manifest next update: Fri 24 Jul 2026 06:26:45 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: 5qQkeWMyyBDrGQAChVygta1wG1Z7xP2t/cF6I+NWc/o=)
2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Jul 17 06:26:45 2026 GMT
Not After : Jul 24 06:26:45 2026 GMT
Subject: CN=6a59cb26-200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:3b:76:3a:d2:e7:fa:53:5a:3f:ec:d4:b8:
6c:bb:e4:e7:97:94:b1:7d:11:fb:ec:48:a3:a5:72:
ae:8c:95:4c:cb:da:0b:cc:33:9b:e8:e8:c0:be:6a:
e6:77:20:8f:04:4a:f7:e5:9f:e6:ea:de:59:34:56:
78:05:05:df:0d:72:95:e6:5a:9c:a9:84:fb:eb:97:
30:a5:f3:08:a1:5c:21:62:66:b1:5d:0b:a9:98:93:
1f:f4:3f:21:35:34:a6:0a:8a:dc:fe:f3:7c:4a:ad:
22:b9:a8:0d:b2:a2:86:d1:df:db:67:fe:5e:ec:fb:
45:47:60:b0:6c:b9:dd:dd:d8:ef:a4:9d:38:d7:1f:
dd:c3:11:9e:50:f1:a0:b2:65:5e:0a:b5:67:39:03:
e2:e4:b7:98:3a:d4:84:0a:96:8a:83:c0:8b:9d:86:
c9:14:9e:9e:03:6f:d9:3c:a3:4f:0a:dc:32:71:43:
80:b1:9a:59:c4:f5:c4:82:0b:85:8f:2d:42:c8:32:
1d:1b:e2:65:01:e2:38:28:6d:37:81:a9:9a:cf:50:
14:be:03:e0:02:ca:f3:29:55:d9:0f:18:54:53:46:
bb:94:d4:0a:db:bd:e0:05:b7:5a:0d:ab:19:3c:06:
43:92:ec:0d:9e:d2:79:18:78:c4:01:9e:1e:8f:60:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AD:F2:7E:5F:12:4B:A3:10:80:0C:05:3A:9A:E6:E5:23:47:E6:52
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f5:f0:c0:70:ef:eb:ed:3b:73:f5:7e:5a:f7:01:03:19:ce:
6c:79:bc:aa:63:aa:78:74:61:37:84:8f:25:11:a6:bf:1f:38:
62:be:aa:72:1d:e8:1d:f2:1b:26:e6:ce:7d:0c:0d:72:06:5a:
21:d7:5d:ac:df:e4:bf:f8:f1:84:a5:b4:b3:fc:58:f0:d0:00:
87:70:88:42:2a:ca:95:52:d9:12:4f:39:cb:8e:79:94:21:5b:
23:76:93:7e:e0:43:f6:3d:d0:98:52:f7:99:32:16:b9:4c:fd:
1b:bc:06:2f:f9:b8:cb:21:fc:d0:48:47:13:45:f4:68:ef:2e:
10:cb:77:bc:26:4b:ac:e6:86:bd:a7:ce:01:38:f6:b7:ab:95:
94:89:79:de:a0:6a:83:ad:e9:11:c6:9a:63:c2:90:58:db:81:
d7:65:ad:53:b4:9b:80:d4:34:66:72:d1:19:4b:3d:32:67:e7:
79:f1:ea:38:0f:f1:c0:e1:5c:03:89:fc:af:eb:c2:da:a9:63:
77:28:1e:31:1c:f5:2c:0c:bf:a7:13:9e:15:45:11:d6:fc:44:
bc:b5:db:6c:32:79:29:69:d0:3c:8a:2b:8a:2b:c3:63:b4:be:
13:16:5e:35:70:fa:3b:b3:fc:07:42:9d:e8:83:a1:35:4a:dd:
65:83:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:34 2026 by rpki-client