
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier: UwT3DhN1Yu5fSETyscgK4sttrg6+DJ5sWR34Fp1KO9I=
Subject key identifier: CE:8F:7E:EE:6D:F1:8D:C0:44:BA:73:21:CD:7F:6F:8B:76:5B:6D:95
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number: 01D8
Signing time: Wed 19 Aug 2026 04:19:02 +0000
Manifest this update: Wed 19 Aug 2026 04:19:02 +0000
Manifest next update: Wed 26 Aug 2026 04:19:02 +0000
Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: H9pRZ2u94BOUZ0EwaJKdIBcUtNaY6tnmnj3tVcfsa4s=)
2: 469DADAE9B1D11F199542C1F6411F970.roa (hash: 7ld5vVKkgDVk7iu8ZivqDo4KyiyF+452Quc+9rok5eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: Aug 19 04:19:02 2026 GMT
Not After : Aug 26 04:19:02 2026 GMT
Subject: CN=6a852eb6-2d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:0b:7a:89:63:c9:4f:be:35:1b:a6:22:88:
e0:de:7c:60:c6:ef:a2:95:54:b5:8a:df:87:f9:eb:
0a:1b:45:84:f7:5c:59:71:ab:e1:b7:5e:8c:84:f2:
72:a0:e0:b6:21:ee:9a:18:a3:46:14:d8:c2:f1:e1:
9a:fd:c9:88:68:6d:d5:67:26:4c:11:15:d6:b2:2b:
60:dc:79:ea:53:4c:4f:28:da:a3:02:34:13:d7:5b:
7f:ec:70:fd:c0:25:a3:a1:04:80:e5:b3:b9:d7:72:
b1:33:58:4c:cd:c8:f9:67:99:e0:28:45:fd:b5:9a:
a8:89:d2:33:57:26:9a:25:ff:af:bc:1a:69:22:f2:
b2:bd:9f:a4:26:29:18:fa:28:e3:5b:7c:88:67:5c:
f6:96:a0:59:3c:54:20:b9:c1:e1:5f:f8:c4:f7:8d:
18:4a:52:f6:ae:39:6b:36:76:14:dc:4c:05:b9:bd:
87:e5:09:0c:b9:3f:db:82:25:9d:09:3f:38:19:bf:
51:d0:f8:13:b0:b0:d4:68:74:c5:77:f3:f4:68:d7:
6b:d8:bc:aa:d2:43:c9:fd:95:e3:91:c2:18:af:2d:
ba:ec:57:7c:f6:f8:17:96:59:3c:ba:ba:ff:59:5b:
1e:f2:64:e6:36:09:b6:a5:0d:95:c8:01:79:ee:5a:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:7E:EE:6D:F1:8D:C0:44:BA:73:21:CD:7F:6F:8B:76:5B:6D:95
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:57:2e:d1:51:75:f2:a7:37:2b:0c:ef:d4:f2:c7:06:f6:96:
cf:d5:fb:8d:af:aa:7d:3c:dd:ad:5e:86:74:16:5d:69:99:f9:
ce:5b:c7:57:6e:8e:75:98:23:36:94:56:2d:c1:a6:eb:48:5e:
e5:77:0b:0a:dc:f0:03:49:f5:b3:5a:d1:70:76:67:b3:91:e1:
a1:fd:6c:41:ff:6b:03:c6:47:ca:20:48:25:04:3c:c0:ee:08:
97:af:67:92:62:56:9b:e7:6b:e5:2a:1b:e9:24:ac:33:c7:f7:
7e:65:e5:a8:e9:75:91:71:0a:85:69:c4:7b:23:0e:eb:db:fb:
a1:d3:54:d4:67:e8:ed:9a:32:92:2e:f6:05:96:f8:eb:99:f4:
12:2c:75:2c:a8:66:87:de:4b:79:3b:4c:5e:16:a6:84:29:51:
72:d2:f8:5e:3c:34:2b:5e:71:31:23:40:0c:a2:f5:7c:aa:22:
16:90:29:14:1d:8e:50:fc:b8:7b:66:0c:3f:f1:72:16:e7:03:
ab:7b:fe:17:08:c5:d7:d7:9f:d0:1c:42:ca:6c:43:c9:32:bc:
32:c6:af:d9:7b:72:34:8a:ca:be:c2:1f:5c:35:6d:10:f9:2e:
77:d6:ef:87:1f:a6:84:dc:bb:0d:01:e6:6e:31:be:a9:79:1d:
10:9f:c2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:39 2026 by rpki-client