
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier: js5I4ansQ8nlN6kWrUw2Yde1TAgOQsfJwSLzzZrFyYQ=
Subject key identifier: F8:51:EF:8C:E7:C0:81:57:CB:7A:86:16:06:8D:18:AB:A3:7D:ED:9C
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number: A8
Signing time: Mon 01 Jun 2026 08:02:35 +0000
Manifest this update: Mon 01 Jun 2026 08:02:35 +0000
Manifest next update: Mon 08 Jun 2026 08:02:35 +0000
Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: 3o541uAwiE6b5Ak5vpYi8K1adxauheBA+BoQvWzqLGg=)
2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ZIVHyn4HDYxvTrf1jI6tJxVlx+GuNfOvlQ+9Flv3lLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Validity
Not Before: Jun 1 08:02:35 2026 GMT
Not After : Jun 8 08:02:35 2026 GMT
Subject: CN=6a1d3c9b-6816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:a8:7b:5f:7a:c4:de:78:80:d8:b5:85:b6:
a9:ea:9c:a7:8f:65:3a:6f:3b:b9:23:27:57:25:06:
c6:8c:5c:3c:18:70:f6:4f:07:35:00:02:4f:ca:c6:
12:85:2f:20:a2:9f:19:97:16:89:f1:fd:51:85:9c:
6e:d0:36:ed:3a:5e:71:c7:96:2b:39:a3:0b:5c:bf:
3f:02:6d:e3:df:08:c4:98:3f:2f:3e:fc:ca:8d:28:
6c:ce:b3:63:28:1d:2d:18:78:15:1e:00:36:0e:eb:
a0:28:83:1b:69:34:57:50:0c:71:6b:7c:9a:dd:31:
1a:98:47:45:88:de:f4:04:a4:34:7e:95:32:d7:cd:
5e:4b:ec:dd:66:5c:4c:5a:6a:76:07:42:1a:d8:8e:
1e:f5:78:25:fd:e3:19:d0:7b:77:5f:82:9a:20:09:
58:b4:20:ac:bd:4b:a7:7e:df:f5:c5:41:e6:a3:84:
fc:4d:cb:f7:b3:38:a4:1e:49:9e:28:93:8a:7c:94:
91:67:f2:81:0f:3c:62:a7:f4:f0:f8:ce:52:d5:9a:
a6:51:97:2c:e7:ea:0d:39:e6:5a:15:7c:35:1b:7e:
ee:8f:a1:41:2e:fc:e9:6a:81:64:d4:1f:fe:89:3b:
d3:6d:1f:dc:46:50:63:eb:ad:d9:f1:dd:53:9b:94:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:EF:8C:E7:C0:81:57:CB:7A:86:16:06:8D:18:AB:A3:7D:ED:9C
X509v3 Authority Key Identifier:
keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:a9:88:d9:85:89:7f:7c:47:95:fc:16:44:80:50:c5:35:e8:
4d:3e:a1:68:99:b0:bc:50:28:81:44:36:40:93:75:c2:0c:c5:
63:cc:b9:76:ff:f3:fa:84:95:a6:97:1e:75:0a:97:d2:30:7d:
08:6c:df:3b:2f:ef:6f:a7:fb:5e:5c:6e:15:ae:c2:05:19:23:
bb:4b:c7:4e:4a:3a:a8:f8:02:b6:50:5a:db:61:54:9f:e6:4e:
40:1f:5f:d3:48:0b:d8:64:2d:a6:a3:1e:92:2d:68:f2:99:4a:
d3:1c:49:f5:a3:f3:03:34:09:3b:6c:93:bc:31:88:77:45:d3:
a6:00:42:94:dd:da:ab:72:b5:e5:93:31:94:09:27:84:e2:17:
bd:69:78:7c:ec:a3:79:62:39:f1:23:ea:0f:c8:06:8d:09:82:
13:55:78:fc:bc:44:97:ba:04:70:52:9c:23:89:f5:32:f4:48:
a9:24:9d:c1:4c:6c:5c:a5:6e:6f:65:2e:47:ee:3d:97:e3:5a:
55:04:5e:18:30:cd:d1:c1:3b:4f:b2:9d:4b:22:60:3b:a3:d1:
f2:36:58:38:4c:92:36:62:96:97:19:ff:89:5a:28:b3:bf:89:
99:50:c1:df:4a:81:1e:d2:db:6c:ee:bb:41:58:47:7e:f2:fe:
95:f6:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:39 2026 by rpki-client