
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json)
Hash identifier: S09HM/acrcSYFH8e6xOahEOFObGKICT6C8CP/cKlYV4=
Subject key identifier: 1D:1C:01:09:51:51:CC:41:6D:DF:5A:2D:B3:D3:B9:3D:AC:0E:D8:0B
Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Certificate serial: 04FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
Manifest number: 04F4
Signing time: Wed 20 May 2026 23:47:46 +0000
Manifest this update: Wed 20 May 2026 23:47:46 +0000
Manifest next update: Wed 27 May 2026 23:47:46 +0000
Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: 6qkIAsnTykBYh8sjhUJNlqm5hDsmW+3MEAUITqJzKbM=)
2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: 8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1275 (0x4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Validity
Not Before: May 20 23:47:46 2026 GMT
Not After : May 27 23:47:46 2026 GMT
Subject: CN=6a0e4822-dd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:77:38:a2:cf:4c:c8:08:e9:03:7a:a8:cb:
61:5c:ad:20:e4:a7:ce:4a:b7:7c:0c:24:a9:c3:b1:
08:8a:49:33:d1:5d:d7:37:61:53:5e:5b:99:6d:34:
d5:ba:45:f1:53:88:0b:74:e0:ce:26:1f:fc:b5:94:
7e:5d:a7:fc:11:97:72:9a:62:0c:20:b4:78:16:11:
16:84:a7:ba:db:59:b7:e3:0c:07:29:b9:2c:21:ea:
35:62:f6:69:fc:72:70:ca:32:24:8a:f9:5d:12:e0:
1a:69:7e:9e:d2:47:12:cb:29:57:80:82:c3:49:e2:
89:61:8b:57:9f:3a:ff:0f:2c:0b:16:46:4c:f0:fd:
21:fa:4c:02:f8:83:d5:4a:4a:df:8e:98:d8:dd:40:
6b:c7:86:52:41:4a:4e:1e:e0:a6:55:82:70:22:98:
bb:94:55:7d:b4:7f:36:8a:82:26:50:6f:1d:74:34:
42:b0:90:ef:9a:1d:50:53:a5:f1:67:ca:6b:82:46:
18:94:fa:7c:ae:16:fa:93:79:ed:4f:d9:c1:23:6a:
69:25:0e:3b:8c:94:17:d6:39:43:6a:16:6c:62:fb:
32:92:14:49:5a:60:d6:0e:0d:69:69:bc:6f:fe:48:
62:5c:49:03:3a:75:6a:98:1a:99:46:7b:71:6e:3b:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1C:01:09:51:51:CC:41:6D:DF:5A:2D:B3:D3:B9:3D:AC:0E:D8:0B
X509v3 Authority Key Identifier:
keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:26:85:78:c8:78:58:e5:2f:8c:17:7a:af:dd:4e:be:11:32:
bb:fb:78:29:ae:04:c1:57:90:2c:96:9c:ad:11:4c:a6:2e:10:
15:87:9e:b5:bd:95:b6:31:01:be:ea:6f:ce:c6:58:b0:7b:c3:
dd:fa:67:3c:02:7b:5f:67:56:ff:b2:65:76:31:14:cf:70:f2:
67:69:f7:65:db:ca:3f:2d:0d:ee:c2:f8:ad:a7:64:75:73:7f:
a7:fc:46:79:84:b5:16:aa:3c:6a:86:3f:d5:5f:8b:3c:7d:d5:
a6:7e:2b:a1:e7:0a:d6:71:91:26:63:ff:5a:65:24:22:57:f2:
6e:d7:8b:cd:5b:08:d5:99:70:99:9d:57:44:8a:85:28:49:cf:
58:7c:ba:9e:97:6c:b6:92:55:f8:e2:c3:4a:88:b3:de:ca:0c:
71:7f:a7:cf:4c:75:cf:d3:f4:eb:de:fc:e7:a0:1d:58:58:4e:
3d:5d:ba:ba:b2:69:ed:f2:64:08:45:8a:af:33:d1:12:af:c5:
8c:98:47:33:d9:2e:7b:d6:e2:a9:f5:ff:08:4a:2f:f3:dc:d5:
d3:e8:f9:63:12:fe:0d:ed:8e:6b:66:c4:bd:73:73:35:6d:d4:
22:8a:75:1f:c2:7d:c6:6c:09:5c:ab:50:06:50:a7:b0:bb:2c:
b6:29:bb:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG
NDFFMTMxQzcwHhcNMjYwNTIwMjM0NzQ2WhcNMjYwNTI3MjM0NzQ2WjAYMRYwFAYD
VQQDEw02YTBlNDgyMi1kZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4B3OKLPTMgI6QN6qMthXK0g5KfOSrd8DCSpw7EIikkz0V3XN2FTXluZbTTV
ukXxU4gLdODOJh/8tZR+Xaf8EZdymmIMILR4FhEWhKe621m34wwHKbksIeo1YvZp
/HJwyjIkivldEuAaaX6e0kcSyylXgILDSeKJYYtXnzr/DywLFkZM8P0h+kwC+IPV
SkrfjpjY3UBrx4ZSQUpOHuCmVYJwIpi7lFV9tH82ioImUG8ddDRCsJDvmh1QU6Xx
Z8prgkYYlPp8rhb6k3ntT9nBI2ppJQ47jJQX1jlDahZsYvsykhRJWmDWDg1pabxv
/khiXEkDOnVqmBqZRntxbju+aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0cAQlR
UcxBbd9aLbPTuT2sDtgLMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD
NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt
SUtva0NlTW5IdFQwSGhNY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVCaFeMh4WOUvjBd6r91OvhEyu/t4Ka4EwVeQLJacrRFMpi4QFYeetb2VtjEB
vupvzsZYsHvD3fpnPAJ7X2dW/7JldjEUz3DyZ2n3ZdvKPy0N7sL4radkdXN/p/xG
eYS1Fqo8aoY/1V+LPH3Vpn4roecK1nGRJmP/WmUkIlfybteLzVsI1ZlwmZ1XRIqF
KEnPWHy6npdstpJV+OLDSoiz3soMcX+nz0x1z9P0697856AdWFhOPV26urJp7fJk
CEWKrzPREq/FjJhHM9kue9biqfX/CEov89zV0+j5YxL+De2Oa2bEvXNzNW3UIop1
H8J9xmwJXKtQBlCnsLsstim7wA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:10 2026 by rpki-client