
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier: BiTB9oQK0nyP4RWWx8/ggjdFotzRW25WS5vQic2fAAs=
Subject key identifier: 26:91:B7:CB:7D:0A:89:1A:F6:56:BC:FE:0B:DD:B7:01:B0:6F:65:F9
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 0486
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number: 0478
Signing time: Thu 21 May 2026 00:09:55 +0000
Manifest this update: Thu 21 May 2026 00:09:54 +0000
Manifest next update: Thu 28 May 2026 00:09:54 +0000
Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: /HT02w5fteL0CC6EmQkrHi4W8xtPUk1DfwdcutxlEDk=)
2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=)
3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158 (0x486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Validity
Not Before: May 21 00:09:54 2026 GMT
Not After : May 28 00:09:54 2026 GMT
Subject: CN=6a0e4d53-d694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:fb:4e:f2:12:df:fd:a2:2e:f3:0d:51:a3:
5e:f0:7d:00:ea:c4:d8:62:a5:af:e3:59:b2:6d:a8:
bc:2b:e2:c6:31:c9:4e:86:c6:db:44:36:7a:ac:7f:
ed:23:00:73:d6:a8:72:24:ba:44:cb:86:f0:51:3b:
60:77:65:16:4a:99:75:79:12:d1:15:9b:c1:e0:b5:
ad:19:00:a0:5e:0f:0e:cb:dc:e5:e0:79:d8:1a:16:
d1:e9:87:e9:b6:0a:3b:99:9e:47:0b:20:4f:4d:32:
28:f7:e9:4e:d1:f6:4b:fb:cc:a2:ed:e2:d7:ff:f8:
e2:64:cc:ee:87:e4:e9:fa:bf:5e:29:da:7e:5a:fe:
88:90:3e:27:2c:d2:29:21:2f:d7:05:ae:55:ce:d7:
fe:cf:5d:76:33:b7:ae:8a:a3:64:70:de:a7:3a:d1:
b8:25:df:58:e8:59:5d:ac:42:59:75:9c:3d:5e:70:
df:c6:f2:01:2a:9d:6e:e3:4f:73:62:26:f6:ef:21:
d8:d0:8d:5a:4b:77:04:07:c0:34:a2:77:c3:ca:ca:
5a:24:fe:13:5c:a6:3c:19:00:48:d4:76:ea:80:87:
55:4f:2a:2a:a6:51:de:24:00:f7:11:9a:38:ff:ea:
a1:db:30:4c:c4:2f:28:dd:d0:4a:76:73:cf:1c:72:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:91:B7:CB:7D:0A:89:1A:F6:56:BC:FE:0B:DD:B7:01:B0:6F:65:F9
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:61:93:94:b8:c3:a1:14:7b:55:d9:b3:82:a7:4d:f0:07:
d8:e3:10:44:14:65:a5:d9:b2:bf:6d:4d:56:1d:bd:9c:41:c5:
1b:f0:87:ba:05:ce:8d:27:75:e7:c3:e0:ca:c7:93:17:a5:3b:
6c:3c:4a:fc:a7:8d:77:9f:f7:9d:e3:f5:15:4d:da:ff:a3:b3:
32:82:e8:d6:aa:5c:36:95:f6:f0:ad:44:3c:00:e1:7e:66:d1:
59:6e:ae:df:1d:01:06:5f:86:69:26:93:d0:98:c4:ed:08:2a:
57:fd:d8:a5:f5:fb:03:9b:cf:41:dd:6c:56:71:1a:4f:fe:71:
52:4e:86:61:32:32:d0:5f:fd:b9:cb:d0:17:cc:19:ee:48:ca:
f3:c8:08:d3:c0:68:7c:38:f7:54:de:d6:97:0d:ee:e6:4a:51:
46:71:eb:24:0a:cf:fb:b1:c8:eb:da:ce:d2:24:f3:ba:cc:75:
df:44:40:ce:a1:16:40:99:3e:83:57:73:ab:60:8e:01:01:bd:
f2:ab:64:35:2b:aa:d8:f6:cb:93:c3:29:50:f6:43:fd:fc:68:
f2:ba:fc:35:fa:99:ba:0d:2c:3b:cb:05:b1:70:f5:ff:07:99:
af:4f:06:24:09:10:02:32:e0:84:06:0b:02:24:08:a3:fa:07:
53:63:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:05 2026 by rpki-client