
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
File: qUY-3mcgvjW60R9aiYbbsXpMMqs.mft (raw, json)
Hash identifier: F7M+Rt7YlVsK9phHGYoWnFy2l9o4sobrQzvYtr6Uphk=
Subject key identifier: 08:8A:AE:0C:57:B5:0E:E5:DD:ED:6A:EA:9C:0A:A1:37:32:16:04:2D
Authority key identifier: A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
Certificate issuer: /CN=A91F8AD4/serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
Manifest number: 04
Signing time: Mon 01 Jun 2026 10:01:52 +0000
Manifest this update: Mon 01 Jun 2026 10:01:51 +0000
Manifest next update: Mon 08 Jun 2026 10:01:51 +0000
Files and hashes: 1: qUY-3mcgvjW60R9aiYbbsXpMMqs.crl (hash: mXfamTq2SSt1kwylmkj+SA866P2S9sWQL+UuuQyVyzI=)
2: 0DD665AE5B6411F1BCACB5ED9D833773.roa (hash: Zw6PGn1J7/f1qbg4N3OXHky/Z2t3N4xuVTg/093VRwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl
rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AD4, serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
Validity
Not Before: Jun 1 10:01:51 2026 GMT
Not After : Jun 8 10:01:51 2026 GMT
Subject: CN=6a1d588f-47c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:43:e4:0e:d8:bc:6f:be:fa:c1:a4:4c:41:6f:
4a:57:c3:58:35:e5:6a:1f:de:6e:64:72:7d:65:fa:
ae:e7:4d:29:bf:3d:2f:f5:77:8f:e1:88:82:26:0f:
f0:31:2c:5e:e7:58:b9:9a:fa:9f:87:40:ba:e4:b5:
de:00:45:ef:6a:cc:e6:dc:28:f7:90:d1:3b:57:f8:
71:46:1d:08:4a:fe:4d:04:8c:d6:2d:c7:1e:5b:52:
55:cf:b7:95:22:c8:9f:26:3f:14:1d:b0:de:f2:4e:
8c:29:f2:ce:5f:bb:93:e3:cb:84:5d:38:9a:d3:19:
aa:0a:5c:be:64:ce:b1:87:8f:6b:80:24:17:d6:b9:
78:07:87:2b:35:93:8e:10:13:f5:20:cd:e5:76:11:
14:c9:5f:74:58:f3:e7:d5:c8:76:50:79:36:a5:a2:
56:a4:d6:31:32:3f:9f:cb:75:36:e4:70:30:75:f5:
13:0a:fb:35:04:aa:57:3f:b9:9e:3c:92:45:7e:20:
dd:5c:7e:60:22:a0:0d:61:86:87:c4:fe:c8:97:b7:
50:64:dc:3a:b1:e7:77:79:6a:8d:c5:6a:8d:7e:1b:
28:9b:82:24:3b:28:4a:31:67:0c:be:82:64:77:c2:
41:fd:b6:87:a8:1d:02:26:94:75:5d:08:e8:17:05:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:AE:0C:57:B5:0E:E5:DD:ED:6A:EA:9C:0A:A1:37:32:16:04:2D
X509v3 Authority Key Identifier:
keyid:A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:7c:d7:47:47:3a:4e:23:da:79:b3:3b:7b:59:87:e7:22:0d:
52:71:91:80:ca:a4:66:f5:dc:e1:3a:88:ba:62:fd:92:66:b8:
19:38:47:7a:ab:00:ec:67:be:2e:f6:07:e2:52:e7:34:9b:b0:
b4:ce:2b:69:2a:a4:85:22:a3:61:5c:b3:d8:49:8f:95:29:82:
63:4c:52:1f:d6:98:c4:23:2a:9c:44:ae:58:3e:b1:a4:d6:8e:
41:00:33:09:c5:b6:fa:fb:6d:66:22:8d:43:9a:bc:05:1c:9a:
02:e6:57:55:c0:58:c3:db:ab:72:0e:bb:27:c0:e1:e6:07:e1:
22:98:41:67:6d:8c:67:e7:af:19:84:23:1c:1f:44:6f:78:a0:
15:25:38:5e:cc:95:9b:c7:1e:9c:c3:c3:92:39:59:30:49:29:
68:00:1d:24:64:cd:8f:34:c7:91:91:f0:27:76:0c:92:34:e6:
e7:13:2b:be:3b:51:55:cc:0b:7e:17:e6:52:a9:5c:6b:6f:24:
23:97:2e:46:ac:f6:ff:e6:6f:ff:f1:d7:38:c3:41:76:83:ac:
87:be:be:35:60:f4:d3:31:c9:bf:b8:08:99:23:65:5c:e9:4e:
f2:ff:ec:2c:73:ac:31:37:df:39:f0:15:e8:03:ba:b1:9d:cc:
34:a7:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:08 2026 by rpki-client