
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json)
Hash identifier: zQbJI5TIhRxWV29zd5HzO4bcqIXH16upAiHbfBW2y6g=
Subject key identifier: 25:B5:55:BC:99:0F:C0:E3:FC:57:27:66:90:25:4E:24:52:C1:80:76
Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42
Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42
Certificate serial: 0420
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
Manifest number: 03FA
Signing time: Tue 11 Aug 2026 00:06:05 +0000
Manifest this update: Tue 11 Aug 2026 00:06:05 +0000
Manifest next update: Tue 18 Aug 2026 00:06:05 +0000
Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: ykNmYMKg33xxwMMWABCQkAX9Xb0GdnunTN2eL+Wgkfo=)
2: 595774341B6211F0B9733473C4F9AE02.roa (hash: TViW6+JPazKkRXhQ7ni+cLWTzOT4kOhtajYLtf39390=)
3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: ZY3y7l0sOwn5Wj/wG0idR2yoV2IE4WMSo7bUKMPTVck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl
rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 00:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42
Validity
Not Before: Aug 11 00:06:05 2026 GMT
Not After : Aug 18 00:06:05 2026 GMT
Subject: CN=6a7a676d-8314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:cd:df:e7:86:2f:db:13:70:38:1a:6a:3b:
53:fc:84:29:50:9d:c5:2b:b3:05:b9:b5:24:78:fa:
cb:35:ab:ca:22:04:c5:a7:60:f5:4e:53:08:78:9f:
bd:7e:26:52:cc:1e:83:70:70:fc:54:a2:be:50:c1:
35:f7:b0:ca:42:f1:0d:86:d5:d6:e3:07:d7:65:7e:
e8:a7:64:f8:f7:33:41:e7:2e:6a:5f:bf:80:05:90:
61:97:db:c9:eb:51:2c:41:7e:3a:f6:bc:f5:35:2b:
bd:7f:ce:eb:11:8a:7c:4a:33:29:34:07:b3:ca:d0:
17:f3:1b:fe:c8:1e:b0:73:dd:e6:5f:8d:4b:b8:4c:
9e:52:fd:f5:7e:55:08:3e:03:58:2f:01:f8:c0:02:
d1:ef:8b:21:8b:8d:95:88:47:5e:ff:44:a6:59:f2:
1d:94:93:a5:a4:44:55:a0:39:ad:5c:d9:10:60:c4:
99:06:71:94:8e:be:cd:e3:53:6e:54:12:09:a3:da:
02:c5:97:bb:8a:4c:6c:c1:f6:0a:75:1e:5c:a1:f6:
d0:78:d7:66:88:46:ad:ab:34:e2:23:36:3e:ff:54:
71:d6:0b:b4:1b:71:2b:c4:c2:c4:24:19:ce:1a:7f:
85:a2:52:e0:91:4a:d5:bd:35:ec:7b:02:1b:f0:7a:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B5:55:BC:99:0F:C0:E3:FC:57:27:66:90:25:4E:24:52:C1:80:76
X509v3 Authority Key Identifier:
keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5e:4a:07:50:c5:83:51:05:33:47:c2:77:52:1f:d4:c6:b3:
aa:66:2b:ee:ed:ff:31:2e:83:94:fc:77:8b:cc:a6:25:aa:6d:
34:a0:57:51:42:a4:30:cb:fa:0e:fb:56:f0:d1:4f:a6:17:38:
39:75:4b:eb:ac:03:a4:d2:4a:7c:fa:49:ca:c1:d1:ff:44:bc:
f4:45:24:5b:54:e6:4f:f0:54:b3:11:5f:51:6c:ba:eb:eb:3b:
22:e2:24:34:db:e2:7c:1e:7c:e4:cc:9b:49:c9:d2:e9:14:4b:
b1:e6:ad:cc:4e:2a:f9:02:da:a9:4c:23:3a:c0:72:e8:1a:b5:
66:cd:82:9a:c1:ae:7d:68:ad:f2:5c:bf:b1:2f:0b:fc:4d:71:
70:73:00:0f:fd:45:5a:d2:82:6b:1f:92:e5:31:f8:5e:78:fd:
5d:c9:6a:67:bf:85:30:4f:08:a1:fe:33:48:0e:46:f4:b8:f0:
11:70:c2:db:5c:a4:bf:af:e8:55:6b:f6:25:38:ae:ea:3d:87:
cc:bd:fc:da:96:49:9f:18:c6:c3:0c:cd:90:ec:90:26:07:42:
ac:89:5f:d1:fc:c1:6b:a7:7d:8d:47:42:8f:1d:78:66:e7:f9:
1a:bc:7d:ef:f3:43:05:ae:98:32:01:01:43:02:c7:f2:9c:b2:
b5:66:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 15:58:13 2026 by rpki-client