
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier: TMVuvmXOOeQrBwLH8sSyZxA3HjWiLtiVayLfq/jLKto=
Subject key identifier: 1F:CE:A1:E4:AF:2F:59:61:13:41:73:63:FC:1C:ED:4D:6D:D4:66:30
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial: 3548
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number: 3541
Signing time: Wed 20 May 2026 15:01:28 +0000
Manifest this update: Wed 20 May 2026 15:01:27 +0000
Manifest next update: Wed 27 May 2026 15:01:27 +0000
Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: I3TXcVHA6ZrVSyOdGndYAxWaeM4Cfx80Og/sG+fYzX0=)
2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Te4mjLd0tS0Pp8TK/M4FDw7bPNKLJP9S5lFxUos08I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13640 (0x3548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Validity
Not Before: May 20 15:01:27 2026 GMT
Not After : May 27 15:01:27 2026 GMT
Subject: CN=6a0dccc7-d0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:a2:a4:be:dd:74:f5:03:e0:6b:95:3a:13:
ab:db:ba:45:2a:d6:35:8a:30:ac:3a:02:54:e9:2c:
3c:ac:61:33:2f:05:00:a8:77:4e:38:df:54:15:29:
c4:8e:2f:72:81:32:9e:41:d6:58:ac:70:ab:a0:c0:
db:ed:eb:52:78:e5:cd:b8:9e:93:fb:3b:7b:ec:0e:
3d:8a:62:17:b7:62:89:51:0e:a2:34:5f:fb:67:96:
99:d0:bb:34:86:d6:96:d8:5f:d9:82:f1:15:b6:29:
99:1e:a3:af:5e:b3:d7:b2:91:0f:73:40:a4:29:76:
53:28:f7:9a:2c:85:29:1c:b7:b8:82:c3:38:96:84:
df:aa:bb:a4:4b:e9:a4:fb:fb:24:78:cf:4f:fc:a0:
da:ac:bf:82:3c:66:e7:bf:eb:ee:72:09:95:f7:b9:
3a:60:7d:76:d0:c7:99:82:ed:5b:76:40:43:fd:8b:
b0:64:91:c0:f8:0f:97:f1:24:aa:d7:fa:d3:88:e7:
71:7c:15:8c:d3:81:67:72:44:da:68:40:e8:57:da:
3d:1b:e8:31:a6:82:d0:2d:8f:09:55:76:c9:e7:97:
ec:9c:c5:25:98:01:5b:0f:c7:3e:e0:4e:89:4e:6c:
ac:98:19:66:ff:fc:b9:e1:7d:8b:e5:5d:35:e5:30:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:A1:E4:AF:2F:59:61:13:41:73:63:FC:1C:ED:4D:6D:D4:66:30
X509v3 Authority Key Identifier:
keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:1a:94:0b:11:da:d1:20:f2:69:ab:af:d7:fb:f3:2a:bb:
51:f1:99:2f:02:c5:fe:e6:87:4c:f5:45:b8:29:17:66:d1:41:
86:e3:4d:69:86:bb:ab:8d:b2:06:ce:de:6b:27:cf:84:c2:16:
e7:8b:8e:a4:5a:5d:b2:18:96:b2:89:9b:0e:b5:5c:58:58:85:
62:81:d5:db:06:22:0c:ab:16:ad:50:bd:03:28:2b:6e:0b:95:
29:27:2c:f2:65:24:c8:40:c9:d2:32:a9:c8:ef:1d:e8:48:ab:
9b:ca:b3:69:ce:24:66:4e:21:c9:0f:49:64:a8:a4:c5:6a:66:
3a:a4:c9:6f:a2:8c:9d:51:4c:40:a5:d8:d1:41:ed:b3:ca:88:
3f:85:57:6a:cc:cb:60:ee:18:92:c5:99:c2:03:13:4d:ba:13:
0a:0a:b4:05:b1:a9:df:6c:23:ac:35:55:88:81:b4:8a:44:fd:
ae:e3:c7:21:27:f1:02:66:54:43:3a:ee:b4:ef:b8:84:64:4b:
c3:20:ca:33:a7:65:b2:92:43:24:76:9e:85:ff:00:a2:ec:d2:
48:07:3b:d3:12:ed:b8:9c:a9:a5:3c:f9:67:0f:7a:b0:5c:9c:
89:ac:41:b7:36:55:95:97:97:2e:e6:9c:1a:b8:9c:a0:71:1d:
56:d2:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:39 2026 by rpki-client