
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier: plURwpNJdq2WdeCgJQY7Fz/Sl34+oREwtSiIHU3hHys=
Subject key identifier: 3E:58:21:E9:E4:A3:6D:82:ED:F7:DF:07:5F:B0:55:EF:85:0B:8B:C7
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial: 0B5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number: 0B3F
Signing time: Thu 16 Jul 2026 19:29:16 +0000
Manifest this update: Thu 16 Jul 2026 19:29:16 +0000
Manifest next update: Thu 23 Jul 2026 19:29:16 +0000
Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: huRiZS/XFLyHePpmGkT0XhItjNuajm3dYPMq/p6P2ZE=)
2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: 06JDuEw0u9UTrCmVjHn/IvdBcebyeZXlu9hwRmQETbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 19:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Validity
Not Before: Jul 16 19:29:16 2026 GMT
Not After : Jul 23 19:29:16 2026 GMT
Subject: CN=6a59310c-dbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:9d:ee:fa:c8:24:71:e7:ec:81:03:7d:80:
44:85:89:da:e1:65:f2:f5:c3:f2:64:28:2a:1c:63:
d7:f8:2b:79:66:9f:9d:f9:b6:e6:f8:d8:5f:f2:8a:
b2:78:10:c2:65:ca:61:3d:f8:39:88:86:7b:70:91:
a1:2d:30:80:b0:34:50:ca:a8:37:f6:84:2b:9b:1c:
fd:f2:59:e4:09:57:d8:64:45:eb:5e:81:37:ed:59:
d6:35:df:59:8a:7a:28:bd:ed:f7:8d:97:52:64:3a:
ca:f9:cb:31:f3:ec:cd:eb:a5:41:4a:62:50:4e:58:
87:94:3c:df:5d:51:49:cb:63:b9:ef:ed:a7:1c:a7:
e6:ed:31:0d:b8:38:56:94:af:64:cc:14:86:f6:af:
19:3b:98:f3:72:52:7b:5a:10:0d:a1:99:31:de:e8:
8b:2a:04:69:9d:4d:22:a8:22:7a:2e:b6:26:a0:6a:
34:39:93:91:dd:42:84:83:c2:fb:c2:cc:2f:16:ec:
ab:b6:a9:f3:88:1d:27:80:24:42:02:06:63:73:a1:
09:d8:d2:d0:34:ce:07:38:39:59:19:e8:9e:60:fa:
2a:fb:28:68:50:d7:ce:e3:aa:53:91:27:13:14:7f:
50:e5:6b:ba:f1:41:28:8b:c2:10:6f:ba:81:8c:e4:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:21:E9:E4:A3:6D:82:ED:F7:DF:07:5F:B0:55:EF:85:0B:8B:C7
X509v3 Authority Key Identifier:
keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:88:14:7b:13:c8:68:83:fd:23:e8:95:cb:7f:76:9b:d7:24:
23:ac:0b:a0:ec:ed:90:59:42:d2:93:01:42:9c:2f:25:d4:17:
8c:c2:5b:f2:20:15:87:13:78:90:a9:ef:89:97:82:82:94:77:
bf:4c:04:38:53:32:36:7f:ce:d2:69:0f:8b:26:ee:91:2b:9c:
1c:fe:e2:0d:0e:c3:f0:19:5d:16:9e:3f:52:f7:61:ca:e8:ce:
7e:39:06:7b:19:2f:ea:34:c9:cb:4b:bc:6c:86:1f:77:c0:c1:
4d:ab:bc:df:f3:85:96:c9:74:a6:0d:34:b0:4f:d3:56:11:7d:
71:7f:14:41:31:ec:11:c5:3b:5d:7a:0f:2d:00:c2:06:3f:04:
aa:2d:ea:2b:a5:d2:52:80:a1:3e:52:bd:0f:f2:e5:a6:80:53:
70:b7:6e:c2:82:dd:d9:b1:68:be:22:5b:da:b4:4f:ef:4b:c0:
f0:67:f7:5b:5b:80:85:aa:65:5d:a5:f3:c9:40:7e:9f:fe:08:
cc:fa:f1:50:4c:d0:b3:e0:8f:91:b2:cb:4d:da:ee:d9:3d:6e:
73:54:94:d8:10:26:41:21:64:fd:26:6d:9e:66:f0:10:a2:b1:
1d:48:69:21:72:d0:af:11:e4:58:40:e5:9c:3e:f7:10:5b:f9:
f3:38:49:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:50 2026 by rpki-client