
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier: 7qXnvSZva9CzZ7OUXjGbx9W0l7/eWIWc+ff+wCkLYWs=
Subject key identifier: B1:0E:58:1D:19:AF:E4:02:3A:ED:5F:1D:F3:3E:F0:EB:8B:DF:94:37
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial: 0516
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number: 0500
Signing time: Mon 27 Jul 2026 00:42:40 +0000
Manifest this update: Mon 27 Jul 2026 00:42:39 +0000
Manifest next update: Mon 03 Aug 2026 00:42:39 +0000
Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: 3z1hmzxZ4MlULyq/ySq9FnGZSfqOlsV5ECppX42piDc=)
2: 65798E8A1F7D11F18F98CA06223D8C67.roa (hash: RZFsnQn6HA9v12vUgYh/78hGLqlY8AmjxFGu89yIv54=)
3: F3B1927A1E0511F1841549681E3D8C67.roa (hash: KFJazkmvnPBoQlHt7NJ9M2Eg3tsyR0kZTa+OC7vwIGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302 (0x516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Validity
Not Before: Jul 27 00:42:39 2026 GMT
Not After : Aug 3 00:42:39 2026 GMT
Subject: CN=6a66a980-aa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:b1:6e:b7:f6:67:5f:55:97:47:2b:08:74:
fc:75:68:2f:b5:ee:3c:d3:18:26:14:6b:30:f2:09:
55:1d:ba:d8:11:20:0c:f7:c7:f5:19:67:e6:c6:fe:
12:40:69:ac:98:10:ef:03:a4:10:62:4a:ee:cb:83:
7b:38:b3:bc:30:47:0e:6d:2f:84:20:c9:a6:3c:2e:
f6:22:6f:81:9a:6b:f5:48:57:60:a1:be:d3:7a:a0:
d1:b3:e4:cd:35:f9:29:d9:d9:5e:a4:19:dd:e2:da:
02:ca:f4:52:5d:fe:49:b4:73:90:67:2a:95:61:6b:
89:99:30:b7:31:8d:90:f9:aa:67:0d:ee:ab:60:bd:
68:1c:aa:51:cf:eb:87:d5:a8:47:9b:1f:e0:be:88:
18:ac:db:8d:16:ce:33:d1:df:33:46:f9:17:e1:28:
20:ff:80:8d:16:69:1e:6f:9a:61:37:14:da:45:4f:
4e:5b:71:59:f9:b2:65:f1:5e:0c:57:a0:ed:74:55:
91:b6:55:b6:c6:9e:59:d9:89:18:d4:dc:2d:8e:e6:
64:62:d5:bb:bf:d0:8b:83:0e:61:1b:22:74:27:32:
1d:93:e9:a9:58:34:44:c2:01:0d:59:e9:86:f0:b5:
e5:ec:8c:96:74:50:10:48:c2:df:8e:1e:b2:ab:01:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0E:58:1D:19:AF:E4:02:3A:ED:5F:1D:F3:3E:F0:EB:8B:DF:94:37
X509v3 Authority Key Identifier:
keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:75:4d:a4:cb:5c:f6:5a:9e:c5:91:55:34:c4:fe:16:c1:6a:
f8:3c:39:a4:ba:cd:89:5a:22:ef:8e:08:91:b4:e9:19:f4:e8:
b8:bf:20:f2:d0:b2:cb:d6:54:38:04:53:0f:cd:c4:7d:7b:ee:
d9:15:c5:4b:86:e7:9f:07:a4:af:c2:67:e4:09:dc:bd:a0:0f:
30:71:2c:f5:65:95:55:38:4f:f4:20:f5:c5:7e:ba:e5:05:d7:
b9:7e:91:13:ae:69:7d:62:ca:df:ce:30:5a:e5:4e:d4:c9:85:
d4:ea:c3:28:e1:7b:d1:98:6f:2b:1d:5c:bf:42:79:01:2a:5c:
31:47:13:c8:50:d3:f1:84:c1:ce:4c:c1:b2:8e:41:48:b3:07:
7d:c8:03:ea:d2:8c:ad:69:53:2b:52:4f:2e:88:e6:70:4d:6d:
8e:f6:60:c3:a9:ac:fd:ed:b6:71:87:25:21:3b:4d:da:4d:ab:
9e:02:8b:08:03:0d:5a:ee:9b:d5:5f:e0:d8:4a:fd:61:e1:2d:
c8:bd:06:11:58:5c:34:52:b1:a8:90:94:6b:be:82:ee:8c:37:
53:a8:45:3d:9f:7b:9b:0e:1b:5c:27:15:fe:fa:2c:7b:4b:90:
09:d0:0a:e3:88:7e:2c:c6:3e:2a:cf:e0:f9:10:ed:f6:97:80:
fc:cc:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:14:04 2026 by rpki-client