
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json)
Hash identifier: /QkWRIsdtFpnpWQmlzNyjAfFUOGeesKpf74JB9mJkmk=
Subject key identifier: 34:BF:2E:25:BA:D9:EC:75:38:E7:15:FE:24:18:28:11:42:82:E4:05
Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Certificate serial: 05E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
Manifest number: 05DB
Signing time: Wed 20 May 2026 23:05:56 +0000
Manifest this update: Wed 20 May 2026 23:05:56 +0000
Manifest next update: Wed 27 May 2026 23:05:56 +0000
Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: TJHmoxYW3RYg8nOtNmJ+X3l4NQ1xa1W9J0ZrZi8hlwE=)
2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: Ti8kwxZ7eguCsStyTJIvI9OGCjPofkPtfnrsHUQH8wI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Validity
Not Before: May 20 23:05:56 2026 GMT
Not After : May 27 23:05:56 2026 GMT
Subject: CN=6a0e3e54-77e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:fe:e0:ec:80:54:4d:10:2f:9a:7b:ea:c8:
6d:f1:41:cd:19:0b:b9:e8:3d:29:69:c2:f9:f7:e0:
59:c7:30:4e:9e:a0:5d:56:81:25:cf:e9:c9:1d:73:
4d:08:32:96:e9:c4:29:a9:35:ff:26:49:b6:e4:42:
e4:1d:4a:38:9b:00:a2:32:ba:be:fa:22:f3:d5:c3:
a9:73:57:44:48:0b:6a:62:bd:31:f0:66:bb:33:bd:
ca:0c:36:32:ba:0b:ca:ae:50:98:6f:c4:56:60:7a:
50:51:a3:82:9a:5e:fa:61:ea:a5:4e:1e:53:39:24:
81:af:53:1c:89:c9:5b:49:2f:37:68:10:6d:eb:bd:
22:a3:2b:ad:b5:a1:a3:e4:79:e8:3d:07:5b:d6:23:
1c:86:63:b1:64:ce:b7:43:46:3c:41:2e:fd:be:21:
db:2b:46:48:39:fa:b4:5e:77:4e:45:81:f6:67:b4:
8b:cd:32:81:32:bf:5c:2b:03:e1:60:0a:a0:af:81:
ce:cf:13:b0:25:0e:dd:8f:cd:7e:b1:9d:9f:38:f7:
41:d1:72:ba:e4:e7:27:b9:5f:79:7e:56:47:9c:86:
f6:91:bc:a4:19:1f:1f:8a:46:cd:37:b7:59:d6:fb:
dc:5b:93:65:e0:7b:5c:a8:83:ca:da:51:30:bb:d2:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:2E:25:BA:D9:EC:75:38:E7:15:FE:24:18:28:11:42:82:E4:05
X509v3 Authority Key Identifier:
keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:71:c8:99:24:23:60:86:3e:8e:b4:0a:6d:d4:d9:62:6e:eb:
9c:40:4d:e0:0d:62:84:52:5c:2a:81:1b:7f:b2:a3:ff:91:5b:
fc:07:f4:3d:2e:92:0f:9b:83:86:68:9f:24:4f:18:fd:85:ed:
a2:1d:c2:35:bf:17:5a:e1:5e:44:fb:af:2c:7f:6d:cb:db:39:
8d:d1:3f:73:30:c4:00:ae:4a:0e:89:cd:ab:c6:75:d2:ad:eb:
ef:1c:54:04:78:e0:89:c8:41:d2:7d:84:9c:bc:5c:a8:77:c9:
e2:bb:a9:3c:38:f5:28:de:4d:b9:4e:80:c6:be:06:fe:02:4d:
88:60:ea:96:c4:d8:4b:af:16:26:71:f1:ac:73:65:14:5e:cd:
2f:ec:50:1d:54:c0:fa:f0:d7:48:be:af:aa:90:4a:dc:16:4d:
7c:2f:f7:0a:48:15:91:b0:fa:d9:90:cd:30:94:e5:2e:b7:74:
c1:43:01:4e:48:03:8d:40:34:7c:e5:ae:e2:42:92:e7:1e:75:
69:98:32:9d:bc:38:45:93:45:7c:53:64:bb:10:12:bd:6e:ff:
6e:85:b1:2d:e2:0c:f4:ff:e7:46:3e:18:2a:c7:3a:88:fc:fc:
2a:0a:a2:da:ce:d5:a2:a1:77:2b:11:ab:a0:33:d7:69:6e:88:
a9:a0:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:53 2026 by rpki-client