
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier: yD+DurYOWQut8eLoKQcKTDdauwGyrOGvFCj3IqheN3c=
Subject key identifier: 88:EF:58:A5:9E:5E:20:32:EA:54:24:AE:5B:F3:FF:3B:74:B1:F5:9A
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial: 353E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number: 353E
Signing time: Wed 20 May 2026 15:15:21 +0000
Manifest this update: Wed 20 May 2026 15:15:21 +0000
Manifest next update: Wed 27 May 2026 15:15:21 +0000
Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: NziKNr/hmbePmWjkR5Ru2lgW24u6PdKVq5juuKMMjk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13630 (0x353e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Validity
Not Before: May 20 15:15:21 2026 GMT
Not After : May 27 15:15:21 2026 GMT
Subject: CN=6a0dd009-5dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:d6:4b:b9:9d:f5:7b:7a:82:52:7e:7e:1d:
d8:d5:79:00:df:88:0f:58:71:6b:2d:a6:d7:49:05:
98:bf:87:65:75:a7:20:e5:42:9f:87:e7:99:37:f3:
2c:7f:34:34:54:63:00:fa:08:7e:68:0f:4a:88:c1:
2b:8f:5e:5f:c6:84:bd:c9:f1:68:8b:60:d6:57:f4:
4e:9c:35:6e:13:aa:59:da:1a:21:e1:5e:2f:76:77:
25:11:b5:f4:8d:fd:a7:7f:89:98:78:51:57:f4:9f:
64:e9:8b:bb:21:c5:3c:62:b2:fb:9a:51:0a:ba:26:
db:35:df:a7:0a:90:4b:48:05:1f:cb:ba:79:3a:03:
b0:2f:ec:40:95:3d:ba:03:9c:4e:28:8b:99:5c:2a:
12:47:1c:45:a2:1b:4e:11:5d:50:fe:a4:4f:fa:49:
e0:46:92:d0:43:2d:3e:59:ed:e9:96:91:35:98:4f:
e3:67:f4:c2:6e:36:c7:9c:20:e3:fe:f9:49:ff:fb:
e2:10:6b:08:3c:bd:04:ea:8f:27:52:9f:b3:4a:fd:
84:5a:85:a4:92:45:02:13:0d:2d:c2:87:de:07:8c:
5b:42:8f:b8:29:38:3e:09:b4:ca:6e:1b:81:ce:8b:
33:8d:54:a5:77:9d:28:14:6a:f4:8e:62:63:c2:56:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EF:58:A5:9E:5E:20:32:EA:54:24:AE:5B:F3:FF:3B:74:B1:F5:9A
X509v3 Authority Key Identifier:
keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:3f:93:8c:8e:51:00:96:5e:9b:2e:8f:43:a4:9c:31:bd:b4:
e4:0b:6b:b3:ea:6a:f1:29:14:d2:71:e3:d2:9f:82:9d:36:60:
0e:da:ef:25:c4:3a:2c:20:1f:31:ba:cd:c2:94:4b:9c:5a:7b:
42:e4:f6:b3:95:c6:3d:06:40:e4:1e:04:2e:48:a3:69:f5:4f:
23:86:95:52:b2:f1:fb:dd:ff:7a:c2:05:78:79:9b:17:a3:3a:
77:dc:16:4c:72:a1:6f:ea:62:5c:92:51:a6:3d:67:d8:34:ec:
53:e8:95:67:1a:5d:99:21:e7:e8:64:5e:ef:7e:70:d7:dd:b5:
86:93:5d:c8:53:58:88:8d:05:58:f2:9a:59:4c:64:50:8d:5d:
41:f4:d9:1d:5c:31:43:a1:80:19:99:2d:2f:3b:cf:98:d2:56:
cf:6d:d0:74:5c:7b:0a:dd:9a:3b:f8:1a:28:32:d7:29:60:f7:
65:69:cb:40:cf:c2:73:8b:b3:2b:89:2a:fe:6b:66:a8:3a:65:
2e:49:08:fc:10:d6:c6:98:07:92:13:96:5b:5d:fa:d1:28:40:
6d:d5:31:e6:f4:61:d8:ec:09:d6:57:8f:3b:37:ea:34:e5:4d:
c4:07:eb:6d:50:3b:a4:c5:f0:0f:e7:db:a3:cd:89:32:0f:d1:
b3:19:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:51 2026 by rpki-client