
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier: k85kIgwY4fPxDWEOC7fejVWnL9Bk/FYo+ED1KDaAr1w=
Subject key identifier: 61:9A:27:D3:69:A7:02:DE:A8:48:A6:BD:F0:71:64:48:40:3C:97:D9
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number: 0262
Signing time: Wed 19 Aug 2026 02:42:16 +0000
Manifest this update: Wed 19 Aug 2026 02:42:15 +0000
Manifest next update: Wed 26 Aug 2026 02:42:15 +0000
Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: IRbA8s8QNWTH8+69LOB6ySAhr02GA5aF3c0EeZkCxGQ=)
2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: gp5WZJBdG8buH2FoAFWLx0g28D8rX+R/fO2EnJ+4Rtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Validity
Not Before: Aug 19 02:42:15 2026 GMT
Not After : Aug 26 02:42:15 2026 GMT
Subject: CN=6a851807-d46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:2c:ad:28:88:bf:1d:05:8e:e3:3b:08:61:
b0:52:85:67:82:94:d0:00:83:cc:f5:24:6f:37:57:
87:98:89:35:45:6e:88:f8:54:3c:8b:17:cf:dd:7a:
50:a1:15:e8:c2:c2:bf:06:1c:6f:10:6b:98:73:81:
5f:81:0b:66:82:12:ac:09:c3:47:55:e2:9c:ae:5d:
e9:ed:8e:1a:a8:f9:b7:ad:44:39:65:2f:2e:07:bd:
0b:2e:3b:5c:dd:d2:73:20:45:a3:d3:0f:93:af:bf:
2b:ab:02:9c:3b:cc:29:dc:eb:f7:79:d1:99:cc:05:
4a:2d:f7:17:f5:42:07:bd:a7:6b:7a:aa:da:f4:c7:
e2:c8:c4:b2:d0:51:40:f0:ea:cd:44:3b:66:0d:0c:
25:5f:32:8b:ed:e3:0b:d9:cb:b1:41:cc:ce:6c:51:
f0:81:54:59:75:0b:e0:32:b5:55:f4:f5:19:9f:19:
6d:b1:92:e1:f0:29:49:8e:8a:3b:68:8d:6d:92:04:
ef:a4:49:25:b8:aa:17:59:9c:42:35:0e:6b:3a:d5:
50:ff:ea:fb:4e:2d:38:86:4a:bf:13:ad:c1:61:e2:
de:6a:a8:22:07:0e:2b:ce:49:ab:5f:d5:de:fd:be:
58:1f:b0:b8:91:c1:5d:76:f8:29:01:65:9d:7a:54:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:27:D3:69:A7:02:DE:A8:48:A6:BD:F0:71:64:48:40:3C:97:D9
X509v3 Authority Key Identifier:
keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:6a:34:77:41:85:f6:ee:1c:6c:b3:2a:80:a6:43:56:7c:62:
26:65:08:c7:61:b2:b2:ca:84:e6:15:b2:1e:54:2d:e5:99:b3:
5a:43:e9:d5:05:14:00:39:37:73:9f:73:56:60:06:fb:4a:2f:
d4:4a:e3:89:5a:26:bb:1b:3f:77:2e:09:af:7a:b9:8a:37:1d:
e9:11:83:01:4f:c1:8b:8a:63:4d:fa:03:5e:44:37:d9:86:86:
2b:d3:33:69:52:71:de:e7:eb:dd:c2:85:3d:23:4f:4e:ee:ba:
58:e5:de:27:33:9f:78:f0:e4:04:f8:d9:03:e9:83:47:87:70:
83:80:24:13:a0:a8:f9:2f:ee:51:6d:dd:b1:3c:d5:65:aa:eb:
0f:03:b4:62:d4:43:81:48:05:ca:2c:7c:ac:4a:fe:95:b5:0d:
8d:6c:2c:e0:5a:b5:b9:bf:c2:ec:b4:29:55:43:61:76:30:82:
f9:fe:e7:da:bd:01:5b:60:70:06:f3:b6:69:ab:07:2e:f7:79:
ea:92:29:90:f2:3d:60:7a:4e:67:bd:81:f3:50:c7:d1:6f:5d:
6d:1e:02:66:fb:7f:4f:bf:e6:f6:2b:57:da:e4:70:a9:cb:27:
b4:43:54:71:5a:6b:57:70:07:12:b9:d4:ab:14:45:ac:3a:c5:
a8:4d:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:03 2026 by rpki-client