
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier: 2riLoa6NRtVVagrrMPfmdlnqdKydeLl+OkofNeWIfFc=
Subject key identifier: 88:90:E9:F1:AE:41:E9:7E:44:EF:7C:5D:5C:D7:5E:54:A3:1E:16:04
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial: 07F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number: 07E8
Signing time: Tue 18 Aug 2026 21:40:31 +0000
Manifest this update: Tue 18 Aug 2026 21:40:30 +0000
Manifest next update: Tue 25 Aug 2026 21:40:30 +0000
Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: ftVHfIccU49Hn2MwsQq6wdIFZqgqXao/HNaMJXOtaQc=)
2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: EF9uieKoaY19hPq/K/Sub8whVe1rvynhE+WooVi1n/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Validity
Not Before: Aug 18 21:40:30 2026 GMT
Not After : Aug 25 21:40:30 2026 GMT
Subject: CN=6a84d14f-7e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:3f:61:99:cf:b5:b5:2d:82:f9:49:7e:55:
62:28:56:8c:93:95:dc:d7:11:ff:76:43:bc:96:12:
37:bc:d9:a8:d9:b4:ce:3a:c4:67:d5:86:0a:5a:7e:
c2:5e:4d:c3:17:80:85:af:84:81:44:0a:2e:26:8f:
2f:ec:cc:d8:78:90:7c:e9:c0:e1:81:2e:f5:d0:de:
20:ca:9e:bf:01:89:59:d9:31:7b:f0:d5:c9:79:78:
c1:04:87:fb:45:64:86:d4:03:cf:f8:a2:31:d6:4e:
21:0c:a8:cd:36:c9:a5:28:a1:3f:96:ea:87:79:b2:
10:41:f6:e1:34:c6:9d:84:48:41:3f:8b:ab:57:93:
f5:cc:75:b6:9e:bb:4f:49:42:8e:37:57:3a:19:b1:
f4:76:cd:ed:5e:dd:92:f5:00:3f:f1:c1:82:da:fc:
7a:2b:ce:28:7c:c5:9e:bb:25:f9:0e:07:86:76:0e:
77:15:65:da:ff:0c:14:c0:62:eb:d4:cd:18:f2:16:
26:c5:6b:1a:c8:22:d8:f2:57:ea:31:29:a9:76:8d:
82:2c:89:38:1e:6f:79:83:0e:0e:6c:38:02:8b:89:
05:74:6d:f2:38:56:3b:e3:2d:3d:c6:26:8e:62:0b:
df:66:1e:15:bc:65:12:8b:49:50:83:38:25:e6:be:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:E9:F1:AE:41:E9:7E:44:EF:7C:5D:5C:D7:5E:54:A3:1E:16:04
X509v3 Authority Key Identifier:
keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:66:12:2d:e5:e1:cb:f0:d1:57:32:e9:fc:72:eb:18:9e:75:
1c:81:39:82:75:f9:af:dc:35:e3:be:30:45:1e:c4:a8:e4:72:
70:42:99:61:dc:76:68:0a:4d:42:16:1c:b0:02:a7:4d:f7:99:
5d:dd:28:a0:17:6d:d9:e9:52:64:9f:b2:ac:94:1e:79:7e:7b:
a3:b5:0d:b9:17:46:1a:5c:11:2a:7f:8b:88:9e:fe:3a:e0:7b:
8a:4a:ca:1f:fa:b0:57:a7:0d:cd:ea:8f:6b:52:02:56:2d:79:
f4:64:aa:e2:dd:f6:60:25:11:a3:a0:8f:f6:07:ef:00:29:7d:
d1:4d:dc:7a:0d:e2:9e:14:22:00:a9:1d:9c:80:f6:13:5c:be:
00:f7:07:a6:47:ab:0b:8a:ac:42:00:fd:e4:53:af:9e:b1:bf:
2b:f4:73:c3:af:63:37:87:40:7b:3b:bf:c5:16:f5:92:02:03:
3d:ae:ab:80:a7:4e:55:b7:c6:38:16:85:09:64:8a:bc:3a:86:
6a:63:0e:a0:37:d0:4f:a6:bd:d8:4c:2d:d3:4c:90:6c:37:f1:
4f:f6:ae:56:92:91:f7:2a:09:45:91:05:82:ac:ea:41:d9:ac:
a0:1d:2c:95:19:ba:e6:11:c1:57:3a:86:41:5b:23:65:d7:8b:
c4:bb:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:43 2026 by rpki-client