
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json)
Hash identifier: He3VGF6kaAAkZvHnQxAy9Tb5SDjBN3wophUOdgUJZyU=
Subject key identifier: 97:33:77:38:14:7B:F2:9E:E2:8B:AD:3D:A1:F4:BD:15:19:A1:F0:66
Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
Manifest number: 0298
Signing time: Mon 01 Jun 2026 02:24:35 +0000
Manifest this update: Mon 01 Jun 2026 02:24:35 +0000
Manifest next update: Mon 08 Jun 2026 02:24:35 +0000
Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: LfvrXtTguXzt+Khspv/JCvGCaJhG6Oa8DGIcVfnFHsw=)
2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: CcNczHQOW8yB5Q317lvbnzk6vw5R1G1tvlVbiwaOecw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 02:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Validity
Not Before: Jun 1 02:24:35 2026 GMT
Not After : Jun 8 02:24:35 2026 GMT
Subject: CN=6a1ced63-9978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:80:1b:1f:86:ed:f7:b8:dc:08:8c:5f:99:
8c:49:c8:2e:38:73:8b:ff:be:89:27:9b:d3:9f:c0:
fb:d3:20:d5:9a:6b:4c:1f:b0:56:f6:81:1c:2c:21:
9e:a3:81:68:2a:f4:ce:cc:2e:73:40:85:c2:e6:b7:
46:bf:85:4c:aa:d8:ca:6d:33:6d:d6:53:14:92:49:
8a:18:81:a3:56:85:ac:dc:43:66:38:2f:aa:63:fd:
57:2a:b3:8f:57:f3:9f:81:dd:d7:d4:77:58:d7:3b:
17:39:63:15:9d:33:82:3a:85:aa:79:92:3c:68:c3:
a9:bd:96:1b:b4:e6:67:08:fa:e9:2e:7c:6c:5a:60:
d1:ee:0d:49:aa:47:e3:5a:e2:ff:9d:fb:9e:bc:ed:
e6:20:c4:2a:9f:f3:ec:e7:1e:eb:aa:a0:a2:dc:10:
99:b1:4f:b8:03:bf:95:92:2f:b9:a9:99:67:53:de:
1e:0a:a6:33:3b:88:21:58:6b:f4:2c:30:3e:b5:32:
ce:7a:a5:c0:1d:66:7b:76:20:81:fe:20:ef:61:4a:
78:29:52:9e:85:ef:d2:ff:f6:4d:73:f3:67:7d:d9:
08:35:ce:57:40:47:bd:41:0a:b3:5e:c2:30:f9:56:
86:20:fb:ac:c3:b0:ee:84:07:62:1b:3b:32:8c:b9:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:77:38:14:7B:F2:9E:E2:8B:AD:3D:A1:F4:BD:15:19:A1:F0:66
X509v3 Authority Key Identifier:
keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:5f:c9:ca:fb:88:1b:40:fd:d0:9d:bd:82:2d:37:30:2e:c6:
03:b9:79:53:4b:8f:67:af:5e:6c:bc:80:1d:37:33:30:a2:c4:
09:1b:f3:2f:fc:36:ab:1d:71:e3:a3:e7:9b:b2:95:9c:d7:6c:
04:d0:57:c2:ca:f0:d0:14:2c:0b:8f:0a:2b:9b:46:fc:d2:5d:
21:f5:e4:20:44:78:6b:d5:24:ad:1a:70:3a:ec:0a:45:f9:bb:
89:15:e9:4a:f7:83:42:49:e1:74:f6:c8:08:7a:31:d3:eb:71:
c6:13:06:87:40:f2:67:d8:e3:ac:1b:88:25:8c:43:a0:98:31:
3f:18:ec:33:32:03:45:58:ea:44:28:00:88:bf:d6:7b:46:59:
f8:c0:74:fb:de:74:1b:c7:a1:18:d3:5a:79:c8:f3:63:c9:d0:
8c:76:3a:09:39:db:03:90:eb:7b:d0:f6:ab:54:6d:ea:d5:1c:
ed:9c:6b:d3:70:6f:57:c4:7a:89:a2:e1:d7:9b:82:23:8a:46:
e1:e0:58:00:7c:ee:ff:00:88:01:5c:5a:7d:59:3a:e8:bd:9e:
fd:b5:2f:ad:45:31:b1:42:ab:5e:ef:01:e6:7f:bb:19:41:1e:
f7:05:82:c5:75:42:39:21:52:36:27:41:6a:d9:90:ca:9c:87:
7c:47:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:50 2026 by rpki-client