
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
File: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json)
Hash identifier: ZlTHZFkOVltAwX3L4blbtgAh84Uum9dqglfv9OfWlGc=
Subject key identifier: 73:41:A3:A0:30:89:9D:8A:BF:2F:D3:F1:91:4C:AB:93:C3:6B:EC:9B
Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
Certificate issuer: /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Certificate serial: 135D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
Manifest number: 48CC
Signing time: Thu 04 Jun 2026 14:21:20 +0000
Manifest this update: Thu 04 Jun 2026 14:21:19 +0000
Manifest next update: Thu 11 Jun 2026 14:21:19 +0000
Files and hashes: 1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: /e8HF3T8tbbJpJcVfDyOAzWmRKuEEL5viKXNiIfjzuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 14:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4957 (0x135d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Validity
Not Before: Jun 4 14:21:19 2026 GMT
Not After : Jun 11 14:21:19 2026 GMT
Subject: CN=6a2189e0-11f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:44:2f:ea:1b:7a:2e:63:1e:d8:12:ff:0e:
74:50:68:5b:4b:6d:b2:be:8d:63:16:f1:72:db:e9:
f2:52:c6:87:3b:57:92:68:c4:04:f2:fc:94:fb:66:
2b:8f:6e:ae:6f:b0:37:76:54:66:49:82:18:1c:14:
69:84:8b:61:2b:79:17:ef:e7:61:40:b0:36:30:e9:
90:cb:bf:9b:01:2f:d4:27:d9:65:63:75:57:ff:fe:
2b:0f:45:00:b7:8a:42:62:1c:b7:74:f9:67:58:9a:
cd:ad:92:75:9f:9d:77:c9:e3:17:61:f8:61:42:32:
01:c5:7b:b1:17:d5:cb:09:a5:dc:e7:46:ef:fc:a6:
df:61:85:a1:f3:0c:ef:79:e6:bb:70:b0:02:df:92:
72:d7:b3:41:93:aa:5b:c0:06:e7:9a:28:da:3c:31:
07:c9:a5:8b:68:c3:52:30:9d:26:f3:a6:a6:2d:58:
18:82:e8:62:1a:41:80:c9:d8:53:dd:00:dd:be:a4:
c6:fb:06:c6:f1:3e:bc:a3:34:80:ff:32:67:cb:34:
06:a4:24:3f:df:b0:b8:7f:68:2c:c6:9e:74:be:f1:
31:82:34:cd:61:2d:d5:b6:27:74:0a:59:43:d1:10:
99:35:d7:c7:e8:4b:d7:ac:56:22:36:62:15:ec:86:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:41:A3:A0:30:89:9D:8A:BF:2F:D3:F1:91:4C:AB:93:C3:6B:EC:9B
X509v3 Authority Key Identifier:
keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:96:d8:0e:81:9a:50:df:61:da:fb:d3:6f:f3:46:96:88:f8:
5a:16:1f:e2:5f:44:c6:48:f0:30:ac:dd:84:d6:6c:ae:58:76:
59:9f:41:00:71:7b:76:d1:78:95:6f:88:24:8f:5a:04:a4:67:
ab:f9:a4:27:a7:24:75:1c:31:e0:5e:fe:0f:b1:da:1e:c3:2f:
08:47:1a:79:1f:8e:b3:8b:49:8f:20:ab:1e:bc:78:ae:b6:b9:
02:88:32:a8:40:c5:7f:39:e0:82:5c:11:79:d6:2a:44:d0:ca:
94:d0:c5:08:d2:74:85:b8:8e:06:87:ae:70:54:10:06:bc:d3:
0c:4b:fe:f9:96:27:2a:ad:52:1d:03:b8:8d:17:28:14:b9:29:
16:b1:2a:3f:29:75:1d:8f:96:e6:76:b8:2e:24:ae:be:dc:6f:
24:b8:14:ac:7a:71:a9:3c:b2:ed:39:4a:9d:86:f6:bf:b2:1a:
32:f4:bb:f6:33:b7:de:4e:19:40:c8:3d:7f:74:a8:dd:eb:e0:
37:1a:c5:bf:9e:82:66:e3:aa:f4:30:cb:11:20:62:f1:aa:a1:
ec:5b:c8:eb:8b:82:77:6f:d3:da:6b:28:1d:02:bc:08:68:08:
13:1c:f1:55:9f:25:2e:9a:75:e5:70:73:aa:fa:dc:01:bd:02:
5b:38:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:11 2026 by rpki-client