
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
File: rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json)
Hash identifier: fG+ahwyoX/SDtZDrwsIAxkWpVVUSqn2MoU8cz0GXbxU=
Subject key identifier: 2D:2F:DD:12:F0:C9:48:53:A7:25:86:74:DB:06:18:31:AA:5D:37:2E
Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B
Certificate issuer: /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
Manifest number: 59
Signing time: Mon 01 Jun 2026 09:03:30 +0000
Manifest this update: Mon 01 Jun 2026 09:03:29 +0000
Manifest next update: Mon 08 Jun 2026 09:03:29 +0000
Files and hashes: 1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: Sa1IfSqSIh2bP6CTJ17dpR+eGFz85Bfzd1BYh8jNF/0=)
2: 38D21898F49411F08DD0DDBA746F56BC.roa (hash: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo=)
3: 81346F96F49411F0BFEF52BD746F56BC.roa (hash: KtQdT3wKXi5XLWS0IbUBySou/W4dYxSu83urtoPZVvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl
rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
Validity
Not Before: Jun 1 09:03:29 2026 GMT
Not After : Jun 8 09:03:29 2026 GMT
Subject: CN=6a1d4ae2-0498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:80:26:7e:30:52:42:ab:8f:f5:08:52:40:
9d:9f:b0:1a:05:e8:05:3a:bf:c9:d0:64:37:77:8a:
92:0b:26:00:54:0d:85:49:4c:3a:84:ab:b2:d5:4a:
9d:1a:66:bd:3a:7b:a9:75:80:86:40:05:01:8f:14:
ff:d2:ba:20:ae:cf:12:57:92:75:58:a3:49:b2:8e:
cc:bb:9f:5b:2b:e1:fd:51:a9:44:fe:e9:78:09:58:
df:e0:8a:06:3a:fe:5e:7e:2c:ad:0a:cb:2f:89:d2:
14:3b:83:fa:e5:86:af:a0:24:8a:90:88:bc:b1:78:
8e:b8:6a:a1:e7:6d:29:97:f4:5d:e5:47:f3:cd:08:
78:d0:8d:6d:7f:9c:0c:45:9f:f1:c8:26:31:cb:e2:
62:70:68:0f:e5:88:ae:e8:75:5e:4e:83:45:e1:0b:
ec:9b:ac:98:c5:82:57:96:e2:f8:e3:97:06:ef:d4:
4a:44:03:78:bd:3b:db:7a:f8:66:5c:08:c3:f7:f4:
4b:1d:e9:ea:98:2e:31:a6:85:61:10:b4:cf:52:16:
68:60:7d:00:2c:1f:a7:94:6a:dd:af:d2:7e:e7:77:
9b:0a:56:cc:f6:11:b3:30:56:ec:04:b4:89:36:77:
c7:e9:2d:ac:5a:15:9d:51:18:1b:6d:1b:34:80:2c:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:DD:12:F0:C9:48:53:A7:25:86:74:DB:06:18:31:AA:5D:37:2E
X509v3 Authority Key Identifier:
keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:84:e9:c2:71:27:78:5f:37:dc:25:23:5c:67:3e:96:bc:d0:
ae:9d:31:4a:00:01:6f:90:79:51:98:8e:71:7c:ab:74:23:70:
ed:9d:27:c6:ca:c3:81:5d:33:36:43:41:b3:0a:40:cb:bc:cf:
e8:26:e3:e3:53:d0:48:57:37:4a:2d:55:de:54:29:6f:40:e1:
e2:cc:04:ba:02:38:2e:3c:50:d2:e8:ad:75:c2:a0:65:4a:7f:
dc:09:65:68:10:3e:cb:e8:e7:0e:38:8b:a7:8d:5c:b7:a9:88:
2c:32:32:d7:89:f4:8f:91:53:0e:d1:60:a1:c2:02:10:04:4d:
4d:0a:7d:33:1f:00:fe:7d:a8:81:34:25:f9:ed:e4:bf:9b:df:
b2:d1:27:d8:51:6a:94:ad:a7:2d:1a:9a:04:13:24:1e:7e:00:
94:5e:ec:79:4d:be:67:6e:8b:ea:64:d3:67:6e:cd:a7:17:6a:
08:24:12:b8:e7:be:73:06:7e:ec:ef:75:12:d1:4c:ee:f8:c6:
f5:a3:9f:1e:74:17:be:0f:20:4f:e2:5e:ec:6e:61:1e:c1:17:
0c:79:ab:e2:be:b2:ec:25:a5:c6:04:a7:71:ac:77:8a:a2:ce:
43:f3:70:22:8c:56:84:a1:f7:d0:b2:cf:79:28:81:9c:20:5f:
f1:c1:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:39 2026 by rpki-client