
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json)
Hash identifier: z/fYHL5FI80xnYBNixT6TLCawtSE8HPKgdNkqk5mp7g=
Subject key identifier: 01:FD:22:DB:5E:C8:9E:A2:2A:C8:78:22:58:76:63:47:E1:4F:98:B9
Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
Manifest number: 0229
Signing time: Thu 21 May 2026 02:47:02 +0000
Manifest this update: Thu 21 May 2026 02:47:02 +0000
Manifest next update: Thu 28 May 2026 02:47:02 +0000
Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: y7/jZnwebPmZniDqx0k/xAK2R3wUCor7q0DBlRnp5l0=)
2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Validity
Not Before: May 21 02:47:02 2026 GMT
Not After : May 28 02:47:02 2026 GMT
Subject: CN=6a0e7226-1838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:f1:1d:01:ac:cb:44:7e:83:84:3e:9c:ce:
ad:28:0a:8c:72:ec:ca:24:5d:c1:bb:ee:4b:88:5b:
e2:51:74:0a:26:25:29:ed:41:00:70:61:90:a7:4f:
d7:9c:4d:ff:19:c5:14:a3:3f:51:55:a9:8f:4c:cd:
53:6b:f5:9f:15:73:f1:00:11:5a:d7:b2:06:12:10:
76:73:9a:4f:94:d5:00:f7:d9:c5:3c:63:8d:83:02:
59:7e:2b:0c:34:65:51:1e:dd:d3:a1:f9:7d:49:c4:
70:9d:de:94:03:48:41:ad:96:e5:6c:dd:ec:e8:2b:
ec:41:70:dc:f0:d4:58:8e:1e:49:39:15:8f:04:23:
db:aa:fb:d4:be:cd:2a:cc:25:34:90:a0:f4:e2:7d:
34:6d:a5:da:e0:39:c5:21:80:2e:f1:61:bf:6e:66:
2b:cf:60:72:a7:43:97:36:e5:49:f2:b2:d6:6f:a0:
66:f2:7c:0b:d7:f0:ba:c2:2d:1b:a1:e0:93:a7:fc:
36:0a:9a:dd:6b:c0:9a:23:ae:1a:79:ee:a5:52:5d:
ba:cf:08:f3:1f:14:50:1e:68:06:f2:e1:84:09:3d:
a8:f3:e5:02:de:7b:1c:a6:84:8b:c8:5e:d9:ee:5d:
6d:27:f3:8e:cd:58:e4:7a:31:67:6c:61:6d:83:46:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FD:22:DB:5E:C8:9E:A2:2A:C8:78:22:58:76:63:47:E1:4F:98:B9
X509v3 Authority Key Identifier:
keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f7:7e:96:d5:8b:bf:44:9d:a1:f7:40:d8:94:32:9e:bc:9b:
b7:81:30:ec:2f:a3:bf:7a:64:82:c3:0d:ac:26:57:4c:58:00:
43:93:9f:bb:96:04:c2:7b:67:39:79:20:ef:97:3f:2f:ba:82:
91:68:9f:59:97:d2:1e:aa:ca:8e:91:99:51:2b:85:8b:d4:45:
81:ce:0a:7e:0c:2d:8f:b0:13:a1:e3:91:e5:5b:4c:77:32:d2:
00:89:93:d5:2f:72:80:78:de:6f:1b:fa:b9:b4:d8:16:a0:aa:
89:15:6f:59:15:44:72:fd:47:b1:87:8f:2b:13:ae:c7:5d:45:
27:66:70:7c:c7:ed:e8:00:82:cd:b8:96:6a:14:2e:cb:97:a5:
6e:69:b6:ec:41:aa:54:b3:a7:c8:8b:df:91:d9:95:8c:de:90:
8d:f4:7e:5c:05:3c:22:a1:4f:71:7b:65:9e:f5:c4:ce:99:e4:
4c:c0:7c:0e:96:b6:c6:68:d6:09:9d:cf:f8:02:41:fa:cd:bd:
ee:c3:8d:22:7a:0e:42:65:00:dc:12:3b:c2:c0:a1:7d:3a:bd:
03:61:13:00:a9:9b:8c:34:51:91:d3:f3:e5:65:c8:d1:d8:99:
80:6c:09:2b:9d:87:26:3a:7b:42:0a:8c:26:00:a4:25:c5:a0:
92:64:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:44 2026 by rpki-client