
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json)
Hash identifier: YkhiuNV2nVSYHGRUoZG7DIzQakGS1ers9Cdj7qAUvrA=
Subject key identifier: 6B:8F:E2:F6:89:62:F0:AD:03:78:C6:3B:24:20:5A:66:BC:E5:48:0F
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
Manifest number: 0299
Signing time: Wed 19 Aug 2026 02:31:50 +0000
Manifest this update: Wed 19 Aug 2026 02:31:49 +0000
Manifest next update: Wed 26 Aug 2026 02:31:49 +0000
Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: b04jQH1IKNpo2USg4FhpjbOS9dai6xjkPVpo2f9EQSc=)
2: 9E1DAA4A7D6B11F1802936357FA30FBC.roa (hash: Hsov6BU0z8az1Wr0ISWSrVfJM+rDAtlUR7qSGNNPaWs=)
3: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: fNeBh4F/Z5Lr0cdIogNFqAUQL3+lXFo8GVNnYQF5cVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Validity
Not Before: Aug 19 02:31:49 2026 GMT
Not After : Aug 26 02:31:49 2026 GMT
Subject: CN=6a851596-2541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:43:94:e4:a6:43:ec:ea:8e:4d:89:f1:bc:
ae:3c:7c:8c:f7:a1:98:80:93:cd:57:7a:77:53:9a:
72:a6:f1:64:8a:04:82:36:80:52:ae:b7:2d:0e:25:
83:5c:fa:42:42:ba:90:4f:5a:d7:b3:ff:0d:a5:86:
16:8e:8f:60:57:bf:37:14:7e:e2:29:e8:59:03:3f:
13:bf:88:da:8d:51:84:e9:59:42:a2:39:7e:0a:36:
6e:6b:ce:c8:dd:8e:4c:42:07:77:50:a9:db:7d:bb:
21:59:ae:2b:16:bb:5d:fd:70:a6:39:79:0d:f3:bc:
52:7a:3d:f7:b5:b8:93:5f:fe:89:18:19:48:59:e3:
54:29:f3:6e:a5:28:fd:c8:cf:82:1a:03:9e:0b:45:
e4:20:44:ab:5f:32:ef:0d:49:56:4d:1d:6f:bd:47:
8e:70:3e:d3:15:f2:df:29:db:bd:0b:a2:33:7f:81:
51:68:5e:a9:d0:a2:72:41:36:57:20:fb:d9:a1:14:
68:41:78:5f:15:a1:d9:e4:8a:cb:d5:09:8c:ba:93:
4f:d3:cb:c1:eb:75:a7:56:90:91:03:89:d6:65:fa:
50:05:3b:0a:c3:83:8f:5c:81:9b:97:42:4e:c9:a3:
88:48:6c:85:06:32:4b:de:7e:37:03:66:95:e0:a5:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8F:E2:F6:89:62:F0:AD:03:78:C6:3B:24:20:5A:66:BC:E5:48:0F
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1e:7f:39:4a:94:6e:b3:4b:c3:8e:12:74:c3:37:6e:d7:1a:
52:46:65:6e:b2:8e:72:07:97:c2:3c:27:c5:ec:43:8a:bb:c7:
2b:72:84:25:ef:13:f5:ef:30:45:51:50:8b:64:f5:4b:76:86:
08:9c:72:77:ba:89:e3:fe:e6:47:20:bd:34:ef:7c:cf:64:f2:
e3:34:75:e7:7c:e0:c6:6b:3c:60:c3:35:b0:30:6b:ee:46:e2:
12:4a:59:a2:c1:e3:9b:af:85:74:9c:e1:c5:3e:86:67:11:a3:
a1:bb:96:c2:3b:cd:dc:bd:b5:f6:ed:a5:15:14:66:57:4f:58:
29:76:40:3c:b5:e8:52:d1:ee:27:b7:d1:e4:a5:d9:2a:da:6d:
32:a6:0c:a4:ca:38:07:38:85:6d:a2:16:37:fa:1b:98:63:64:
f1:20:d3:5a:6f:87:1f:12:87:4f:b2:ae:43:78:2e:14:cf:9c:
80:c6:17:56:a4:77:54:46:3b:f8:84:eb:64:da:a2:18:e0:6e:
95:63:01:9f:6d:7a:1a:6c:e4:da:3b:82:23:a2:c8:ee:ef:f9:
e7:8a:4a:aa:09:c2:d8:8f:fe:f9:72:82:ea:66:88:db:e7:06:
3f:e1:92:a2:ab:8d:51:60:7c:95:39:36:44:c9:d2:03:1e:d5:
0e:fa:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:38 2026 by rpki-client