
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json)
Hash identifier: xej7WpAzotr6hMynpD1IDDhLa1vjeaLDd28+ZA6kIGg=
Subject key identifier: F7:BC:CB:F1:9C:3D:2F:0B:59:C5:81:BC:04:9F:FB:2C:D5:B6:2E:CD
Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3
Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
Manifest number: 153D
Signing time: Wed 20 May 2026 19:05:07 +0000
Manifest this update: Wed 20 May 2026 19:05:06 +0000
Manifest next update: Wed 27 May 2026 19:05:06 +0000
Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: Imh/64bs1IMr+uyftWawA3gvw8eeU0RzZOb8Lzavr7A=)
2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: Z080oakKu17Se776qqpj5LDNBkfUF0Gst+D+v6MAhg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl
rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3
Validity
Not Before: May 20 19:05:06 2026 GMT
Not After : May 27 19:05:06 2026 GMT
Subject: CN=6a0e05e3-2137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:f7:55:23:3b:65:7b:48:57:27:91:be:f9:
50:0a:cf:40:cf:58:fb:74:98:5c:63:21:f7:9f:8d:
3c:9e:61:9b:eb:3b:3b:b7:c8:ce:19:e5:e7:f0:dd:
8d:eb:aa:a3:53:74:9a:d2:0b:94:00:ec:43:a6:b5:
14:8c:a5:a3:a4:74:04:81:8c:bf:97:15:05:10:52:
2a:28:aa:5b:1a:bc:18:44:ca:db:67:e4:42:c7:a4:
b3:5a:4d:02:0c:4c:35:98:bd:a0:4f:8e:1b:2e:25:
6e:2c:ca:93:78:23:80:3c:ab:af:89:35:ed:dc:f7:
79:b6:85:d3:ae:d3:ac:cb:72:79:17:e0:8b:24:1c:
eb:7f:98:a1:08:ae:a2:1b:61:a4:d2:85:11:00:35:
d1:b8:1f:63:80:49:cf:0d:c0:19:81:56:c6:dc:75:
98:27:36:93:0e:e8:eb:fe:41:ec:78:2d:28:97:73:
df:10:48:16:4e:18:18:52:33:82:0a:13:08:6c:b9:
c9:f3:23:fc:70:b7:11:51:87:69:38:47:58:33:39:
1a:10:bc:1b:aa:ed:a0:53:9a:f2:f8:25:aa:71:e2:
2c:b5:e5:9b:13:36:46:05:66:ed:e6:67:56:2f:01:
93:cd:e9:9a:79:1e:8d:de:25:52:96:d0:15:aa:37:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BC:CB:F1:9C:3D:2F:0B:59:C5:81:BC:04:9F:FB:2C:D5:B6:2E:CD
X509v3 Authority Key Identifier:
keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:39:be:5b:e5:87:10:d2:be:5b:50:d3:79:07:49:57:3e:45:
09:dc:a5:6a:f9:5a:46:e5:bf:31:39:2e:34:d0:4b:56:d4:eb:
47:f3:11:f6:30:ab:6b:8a:13:fa:47:75:31:c7:d6:b5:26:cc:
13:2d:f1:8f:ed:f4:ea:0b:35:f7:99:7a:e7:23:85:cd:e5:de:
fe:f6:db:6d:b4:08:6a:b7:55:a8:b9:32:45:71:dc:99:1e:39:
af:cc:f1:bc:c0:67:fc:94:e3:dd:51:f1:a9:7a:d0:d5:8f:09:
ee:b1:c5:19:81:85:ce:8f:0a:f2:5e:60:4b:0e:f7:83:71:18:
c1:0b:f0:2d:2a:81:34:38:7d:ca:f5:c9:5a:db:5a:fa:9e:0a:
6c:03:9f:7b:99:02:ab:b1:99:e5:9f:5f:9c:6c:ff:5e:ce:d5:
00:02:7b:b0:bc:19:ba:c5:fa:07:07:64:37:12:fb:75:58:f9:
83:6d:11:6f:39:92:1a:ae:63:05:01:7b:bf:bc:26:b3:5f:e8:
b7:58:53:4e:c5:e3:a5:26:db:44:9d:a3:7b:b7:63:60:d1:35:
c0:9f:bc:a4:cc:db:b1:32:a2:79:e2:83:d6:d0:83:f5:b8:37:
92:c4:ef:58:64:3f:27:1d:50:8d:92:e2:ba:4b:c5:d5:39:30:
44:c9:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:53 2026 by rpki-client