
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier: qth1qvjQzhpVBKHvADHR12B7JIkAJCnMB9WHnxYorJY=
Subject key identifier: CB:E8:CD:E5:30:BE:07:01:7B:E6:D5:5E:30:1E:8F:57:78:13:F3:31
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 35D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number: 359A
Signing time: Fri 10 Jul 2026 14:47:11 +0000
Manifest this update: Fri 10 Jul 2026 14:47:10 +0000
Manifest next update: Fri 17 Jul 2026 14:47:10 +0000
Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: e2lElYqd+7BRsRPcDv5Yg8Yp3kqpLNYIAwypp6EFZV8=)
2: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: lYpkRD/vPCqBa7Vd4N6W0BGqOH9jxtp9EJocrqn7xs0=)
3: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=)
4: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 0iMCnY3705MLKSQeDX6iv1qsWDcFTiwdaLS+CFP3lvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Jul 2026 14:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13781 (0x35d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: Jul 10 14:47:10 2026 GMT
Not After : Jul 17 14:47:10 2026 GMT
Subject: CN=6a5105ef-0889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:6a:68:af:02:2c:2d:58:a3:97:aa:ea:1b:
10:4b:67:ac:ee:f5:3e:99:cd:07:37:93:0c:94:5b:
e1:d8:6d:a0:25:6b:74:b3:34:2f:3b:14:26:04:54:
c3:dd:98:4e:b5:3f:6b:5e:ee:87:90:11:70:46:df:
9a:af:db:f1:9d:d7:a9:01:5f:ac:96:55:ab:cc:52:
c9:a3:9b:6e:d4:a3:a7:ec:18:84:84:e5:03:1a:60:
aa:11:11:53:6c:6b:10:86:5d:4f:ff:13:c9:71:15:
9a:63:b2:7c:16:05:8d:23:6c:ce:c3:cc:78:64:66:
fe:a5:ac:68:8c:d1:13:8f:83:95:a1:b2:e9:e9:b2:
56:cd:d8:b9:66:51:3b:9d:96:3f:f1:83:19:74:f6:
f1:c9:bb:c0:4e:7c:c5:34:d7:fb:f7:b6:50:2b:61:
9e:cf:61:e4:66:75:17:00:3c:ff:8c:a9:2f:ed:cd:
ad:9e:56:1b:bc:1d:aa:08:25:9d:48:d4:5f:a8:68:
09:30:55:a2:10:f4:8a:fb:96:4e:01:53:67:ec:f5:
b9:54:d0:0f:3e:79:a5:ef:64:6d:92:f5:3c:38:e9:
be:a4:97:f6:47:a7:20:1b:a0:aa:74:1e:ae:20:98:
11:e4:a7:85:0c:f7:4e:16:b9:34:f9:19:cc:88:e2:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E8:CD:E5:30:BE:07:01:7B:E6:D5:5E:30:1E:8F:57:78:13:F3:31
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fe:5f:6a:4f:eb:ac:c9:b5:11:29:46:eb:fe:fb:9c:6d:f5:
73:59:4a:ca:24:2e:49:69:a0:c3:1e:f6:dd:03:a4:72:11:15:
c1:eb:63:39:43:55:9d:61:99:41:88:98:1e:34:82:c9:78:aa:
28:23:6f:23:36:fa:1c:f8:72:78:0c:72:8d:55:d8:ca:cb:81:
46:75:09:f3:e0:e6:e0:92:af:c8:53:fb:4a:ef:95:31:92:f6:
ac:96:3a:70:dd:c4:2e:e0:0e:4d:37:28:99:3b:6d:c5:a5:8c:
25:6e:40:23:f7:92:d9:e9:71:a8:6b:c7:ef:60:d9:75:67:fe:
1a:60:07:cd:34:44:46:6f:cf:e0:07:57:7f:40:fa:d2:c7:44:
6c:4d:d3:f7:68:d7:a7:da:56:6e:d6:af:98:aa:4e:ab:06:fc:
5f:af:31:27:3d:ea:0d:32:80:a6:98:73:1d:71:9d:b9:3c:ff:
8f:ac:f5:71:ba:a4:b2:9f:9b:ea:5b:b2:20:2d:17:af:cf:48:
37:d2:9f:bd:eb:2e:1e:eb:37:32:ca:3b:8f:a2:6c:af:eb:7d:
92:86:33:8a:44:c1:e3:08:1b:70:ec:5e:f6:c9:c0:f7:a2:79:
4c:36:6a:6a:b1:3e:2b:98:74:ea:65:c1:10:c0:66:8f:8f:b2:
4e:69:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:33:42 2026 by rpki-client