
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json)
Hash identifier: /Yra5shBSS1CFpLYfRNdnHUzJQmtVozF2K9akUllVMw=
Subject key identifier: 24:F6:9B:5B:6E:C7:F5:AC:AC:46:96:6E:34:95:45:89:80:F7:28:7A
Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
Manifest number: 025B
Signing time: Wed 20 May 2026 15:53:34 +0000
Manifest this update: Wed 20 May 2026 15:53:34 +0000
Manifest next update: Wed 27 May 2026 15:53:34 +0000
Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: Qokk1cNxMyS5MGbPbFNsaY4mCzbus732htnN7UKPcBM=)
2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: JNyU8R5c8QL0IEETvSkoNrLyRGc2x887+ZYrTw2mI3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Validity
Not Before: May 20 15:53:34 2026 GMT
Not After : May 27 15:53:34 2026 GMT
Subject: CN=6a0dd8fe-03e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:a7:dd:11:d0:ea:14:fb:5a:fb:04:2f:ca:
11:17:27:a3:c7:29:e6:71:e8:2d:d9:93:d2:c0:e6:
60:13:97:02:07:54:d5:63:6c:03:b3:b5:22:11:76:
c2:93:be:a2:90:a5:b2:09:80:5a:36:0f:ae:87:4c:
32:f9:1f:7e:13:38:ed:25:78:cc:29:da:9d:39:1e:
0a:74:da:d2:e0:a8:81:5b:50:1f:72:b7:9f:b1:24:
77:b5:24:e8:6d:56:ad:b5:e7:90:1d:95:98:cd:f2:
f9:f3:7c:4a:1a:e2:76:50:78:4b:1c:bd:36:35:aa:
1a:e9:5d:09:0e:c9:2f:34:90:a2:ab:dd:1a:3f:eb:
86:da:b6:13:1f:c5:95:04:c2:6e:47:bc:58:ff:a6:
99:b4:bb:f3:3b:52:c3:0b:50:cf:8a:f8:f7:c2:07:
74:af:11:5e:ab:3d:a3:3f:b4:e9:35:32:79:1a:57:
13:b3:1c:f7:9c:c3:de:55:62:c9:5a:67:84:23:af:
77:c2:63:bd:75:2e:a7:93:16:8c:c8:41:a7:ee:69:
72:8b:9f:71:ec:aa:ac:6e:01:67:92:a0:26:4d:3a:
d4:07:97:92:db:5c:34:ca:3f:03:59:3b:0d:09:7b:
01:22:0c:a6:e2:5e:d6:05:5e:26:e6:e4:27:0a:14:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:9B:5B:6E:C7:F5:AC:AC:46:96:6E:34:95:45:89:80:F7:28:7A
X509v3 Authority Key Identifier:
keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2b:f8:14:d4:74:80:35:48:7b:28:6d:af:8e:b4:2a:7b:26:
4b:6e:dd:5b:ac:40:85:9a:9c:20:88:0f:bc:29:f2:93:c6:73:
42:00:8d:cb:28:60:61:1d:75:a8:b2:dd:ba:17:e1:a4:ba:ad:
dc:11:92:a5:50:a8:19:2b:8e:59:52:6b:ce:e1:e8:ab:6f:10:
28:9b:ca:e4:f9:8f:8e:2f:8a:90:50:77:b2:23:8c:a7:0a:45:
05:98:84:ce:fa:59:02:9a:aa:3d:48:99:a3:a0:50:cd:7c:43:
40:6e:82:1d:fa:9a:2e:3b:6f:6e:7b:1b:e3:45:2f:c1:97:c7:
26:25:e0:5b:83:d8:66:fe:3f:5b:d0:a6:f0:ac:88:20:99:6e:
e3:07:2f:3a:48:df:5c:8e:3e:c7:39:d3:ed:9e:95:ac:6b:b3:
c5:91:c9:dd:50:4a:81:2e:b7:6c:55:a0:bd:d7:a2:1b:0a:70:
37:5f:5d:3e:44:53:2e:72:82:9a:7e:eb:9c:8f:12:e8:6f:81:
5e:a1:50:f4:45:60:94:12:64:74:68:fc:b3:d6:31:85:ae:d0:
93:8c:26:d4:1c:98:ad:ed:65:5a:82:d1:72:2b:6d:f3:c6:a0:
98:92:e7:61:da:b0:e3:84:16:84:5b:fe:64:bb:9e:62:17:f8:
cd:7d:69:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:18:07 2026 by rpki-client