
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier: 5RhiUAvLBHO6JHmMN6RIpBoizfLtdlbWJCf2DlbhoSc=
Subject key identifier: 91:21:05:82:32:B7:32:51:10:F0:5D:47:F2:50:99:0C:D2:0C:F5:E7
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial: 04FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number: 04E9
Signing time: Thu 11 Jun 2026 01:55:16 +0000
Manifest this update: Thu 11 Jun 2026 01:55:16 +0000
Manifest next update: Thu 18 Jun 2026 01:55:16 +0000
Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: Upye7STVzJHbeGTPw4aiFVtQ/9QyCw9z1SHlQOEJt/g=)
2: 65798E8A1F7D11F18F98CA06223D8C67.roa (hash: RZFsnQn6HA9v12vUgYh/78hGLqlY8AmjxFGu89yIv54=)
3: F3B1927A1E0511F1841549681E3D8C67.roa (hash: KFJazkmvnPBoQlHt7NJ9M2Eg3tsyR0kZTa+OC7vwIGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Validity
Not Before: Jun 11 01:55:16 2026 GMT
Not After : Jun 18 01:55:16 2026 GMT
Subject: CN=6a2a1584-7e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:15:65:7f:9b:82:d0:ac:36:ee:f6:9e:ce:
03:32:6d:07:64:68:b9:f5:3d:a8:57:de:21:d8:91:
55:a6:e7:0b:22:b4:c5:18:1a:b7:91:ff:98:41:79:
df:98:ed:36:80:42:9f:db:1f:43:27:f0:9d:06:94:
7b:e5:70:d7:4b:5f:5a:ec:84:ec:a9:04:e6:17:e6:
da:67:6d:3a:67:7d:4d:ec:2d:61:ac:62:57:74:50:
73:12:4a:85:80:c2:67:38:7c:87:71:cb:20:26:16:
ea:35:87:7a:33:b2:0f:26:5f:36:bd:66:60:9f:3f:
4b:e8:7e:cf:e9:c6:c5:a4:d1:18:26:b8:07:46:c9:
44:86:0f:60:2d:fb:77:3e:4f:16:8e:95:76:cf:7d:
48:e6:ef:e1:ac:24:b0:7a:de:d6:40:a0:4e:e8:bf:
14:5b:43:28:30:59:08:16:e9:0e:be:b8:1b:ea:fc:
f0:6f:56:ba:8c:15:77:1b:fb:c8:c0:48:e9:b2:ef:
56:dd:a2:3b:72:06:98:ca:6e:e3:65:06:f1:80:19:
61:66:1d:14:8b:34:c8:59:50:27:33:ab:34:fa:c5:
c4:c7:d3:58:6d:26:e7:82:75:4e:54:2d:03:5b:31:
7f:bf:ec:25:95:99:bd:a2:fe:a1:28:71:af:00:1e:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:05:82:32:B7:32:51:10:F0:5D:47:F2:50:99:0C:D2:0C:F5:E7
X509v3 Authority Key Identifier:
keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:64:9a:74:94:ff:34:fc:25:58:19:a9:43:d1:3a:1d:5c:14:
a7:37:dd:a7:f2:43:a8:81:1e:cb:f3:8c:12:ba:12:11:d8:0e:
2d:aa:76:36:4e:bc:3e:13:0f:66:33:3c:55:cc:0d:bd:59:04:
6b:eb:1d:a1:35:66:2f:50:ab:e1:61:ed:f0:7e:de:ba:8a:2c:
f8:93:5c:83:c6:3a:c2:2e:79:9e:d2:8b:01:48:74:f7:4f:5a:
d0:1f:cc:05:9b:13:cd:01:f4:5f:52:32:44:25:bb:c5:b9:c3:
86:1e:a0:3f:0c:dc:27:02:53:25:5d:18:fd:56:f5:7c:eb:3d:
d2:96:cf:93:ca:0c:e4:12:32:7b:5d:f4:58:3d:37:11:e7:ca:
26:00:3e:b4:78:bb:a7:a9:dd:8b:69:de:e4:e9:34:87:bf:13:
dd:0c:50:e7:f9:97:dc:c0:fc:e7:ee:90:e8:83:7c:19:8e:0f:
05:28:e4:97:19:52:e1:ff:4a:61:23:e4:a0:7c:b0:1d:d2:2f:
28:cb:d9:39:af:fa:fb:d0:7e:b6:b3:ce:e0:9a:84:57:0d:46:
a4:a3:3a:cb:b5:9b:fe:6a:5b:22:a8:8a:2b:ab:e7:b6:65:9f:
df:ef:e9:a2:62:cb:5b:86:d7:99:43:0e:dd:f7:8e:40:63:26:
e3:9d:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:39:58 2026 by rpki-client