
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier: ugAV2xb/21eU+M38IiYqq73LSaT4h4zsZWzt0R7l2E8=
Subject key identifier: 97:7C:01:0F:1F:C5:18:25:71:0C:81:DC:2A:ED:A3:F4:27:1B:F2:7C
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial: 1EB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number: 1EA9
Signing time: Tue 18 Aug 2026 16:09:56 +0000
Manifest this update: Tue 18 Aug 2026 16:09:56 +0000
Manifest next update: Tue 25 Aug 2026 16:09:56 +0000
Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: xFQwfEvigiXmJ8O4QbuKuiGLQo1NeRatr01guAE0mvM=)
2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: 9fJ1ri6IaNU9VtWg8Hqy+rRwD5x8nCDjNKKvvrEFZII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7861 (0x1eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Validity
Not Before: Aug 18 16:09:56 2026 GMT
Not After : Aug 25 16:09:56 2026 GMT
Subject: CN=6a8483d4-3614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:b0:ce:b5:94:f3:83:1c:d4:c3:df:ae:50:
55:8a:f6:27:33:e3:71:b4:31:8c:44:f3:ea:e6:71:
85:59:ae:a9:5d:21:23:ad:85:4a:af:b7:b4:d4:24:
4e:23:17:6c:dd:e6:47:51:01:af:a3:27:87:a2:0e:
ce:55:7a:03:ad:2c:e2:34:56:67:4f:00:90:ad:63:
0e:29:17:14:e9:86:21:7e:3b:a9:1a:2a:85:68:ed:
c5:b2:82:03:46:95:bb:58:ab:34:28:eb:fb:28:d9:
26:aa:c0:24:cd:da:ac:2d:4f:46:75:e2:d4:04:b3:
5d:86:56:22:69:0e:77:73:43:82:f3:e2:27:5c:b1:
d2:37:ca:44:f4:41:9b:ae:82:4b:98:ff:02:d9:cf:
a0:d0:88:f1:ce:93:09:d6:2c:87:bf:a4:16:9c:3b:
ff:ec:27:fd:95:5d:49:6f:8b:e2:a9:c1:19:34:9c:
49:6c:35:a8:c8:4a:f2:cc:96:d5:03:e0:52:dd:69:
ff:33:ea:78:9c:6e:8f:9f:5e:a9:93:7d:da:9f:0e:
b1:c8:04:4f:5f:e4:7d:b0:ae:48:f2:fd:8a:0c:b3:
05:54:fc:49:e2:9c:92:d1:f4:8f:b9:80:52:dc:00:
0c:29:63:e3:0a:eb:75:21:6b:ef:cf:00:d2:b3:9e:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7C:01:0F:1F:C5:18:25:71:0C:81:DC:2A:ED:A3:F4:27:1B:F2:7C
X509v3 Authority Key Identifier:
keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:04:0a:34:43:ce:6b:77:65:ce:08:cd:d6:af:d1:c8:a7:22:
59:18:a5:7a:fc:7d:01:3c:d7:e1:05:92:91:5f:78:f0:09:38:
9e:5d:f2:5d:cd:2e:af:52:ce:e6:80:85:6c:00:52:40:b4:22:
fa:26:26:14:cb:f7:a7:70:94:a3:30:02:60:97:1a:92:39:9f:
ce:30:f6:27:50:36:98:3f:6e:b4:96:38:b8:15:bd:f6:7b:88:
41:58:db:61:4a:b5:75:26:17:5c:46:64:8a:03:4e:b2:7f:6b:
bf:f8:06:80:8a:1f:59:88:ce:ce:33:cd:f7:1c:ee:d5:1a:19:
56:ab:a1:da:75:15:62:4e:2d:67:bf:2a:2c:f6:61:ff:55:92:
03:dc:f1:6a:49:0a:e5:ac:63:ea:b8:f4:ba:1b:62:4a:f6:ae:
a7:63:ef:1b:84:4c:18:cc:24:5c:51:56:73:94:57:c6:dc:4e:
3a:f0:32:9e:c1:96:7a:3b:79:04:2a:a4:f6:46:1c:fa:8e:82:
f6:98:85:3e:9e:9a:ed:9d:ca:48:0f:45:7f:4d:c5:78:6a:19:
25:bf:17:ab:30:2c:84:11:c0:25:86:2f:d8:82:63:df:48:51:
e8:0e:c1:4d:84:99:2d:45:85:79:18:a5:22:f3:52:d1:9a:a1:
61:ee:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:25 2026 by rpki-client