
$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json)
Hash identifier: 6eOP/QaxgSTjfu+eiXMwdtElamrtvYtUFKt/5HnITC4=
Subject key identifier: B0:21:82:59:D9:06:B2:CD:19:FE:5D:41:4B:D5:5F:BD:B5:C9:25:95
Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19
Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
Manifest number: D5
Signing time: Mon 27 Jul 2026 08:49:01 +0000
Manifest this update: Mon 27 Jul 2026 08:49:00 +0000
Manifest next update: Mon 03 Aug 2026 08:49:00 +0000
Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: AAzwtJ6gHclNVNnA8nnFwxIVF4WPR5p3Ic4y1bxmIq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl
rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19
Validity
Not Before: Jul 27 08:49:00 2026 GMT
Not After : Aug 3 08:49:00 2026 GMT
Subject: CN=6a671b7d-9fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:af:05:f1:90:77:25:bb:77:1d:33:d3:47:
e3:dd:e1:bc:a3:28:7a:3f:3f:ba:1b:0b:20:a8:8d:
99:c8:75:c8:39:f9:41:8b:1f:69:44:40:f1:69:d2:
e6:bd:d0:ff:25:73:e3:ef:e7:6b:9a:65:a0:ab:32:
c1:5c:f6:d6:3d:5d:b3:be:d5:8d:00:a8:36:21:0d:
2f:5e:32:46:fa:c3:71:d2:73:7b:45:b0:c8:5d:71:
04:1c:7d:3a:d1:54:d7:09:61:00:89:a0:0f:0c:57:
0b:a7:a0:c1:7d:a7:80:e5:01:dd:64:da:4f:1a:48:
11:78:00:7a:75:b7:6e:d1:03:8e:9f:cf:0f:6e:a4:
2c:92:eb:48:89:ff:0e:79:63:c0:84:41:2a:b8:27:
ea:6e:ab:cd:2b:aa:c0:5e:01:40:65:9c:7b:8a:76:
a3:2f:25:e9:be:f2:26:8d:85:22:83:3d:c0:7f:e3:
f4:8d:c8:34:d0:d4:67:c3:2a:fd:9e:7a:23:bc:dd:
ee:e8:24:bd:29:db:e1:ce:70:e4:8a:db:80:cd:6a:
d3:fc:bf:ce:d2:06:33:50:58:df:97:9e:c7:9c:3f:
3b:15:2c:da:ca:aa:9d:fc:f0:bd:da:76:6e:b8:62:
47:5d:5e:fd:5c:c9:71:00:fd:c9:ad:58:25:a0:62:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:82:59:D9:06:B2:CD:19:FE:5D:41:4B:D5:5F:BD:B5:C9:25:95
X509v3 Authority Key Identifier:
keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:11:b1:e8:d4:96:ce:9e:16:1f:dd:f0:e5:5b:af:75:b3:10:
6d:2e:45:d4:aa:39:26:3c:85:6f:80:51:5b:14:5c:4f:31:bc:
54:92:a0:30:99:26:63:e4:65:75:f4:67:e5:8c:e4:74:db:bd:
f3:cb:ba:81:f5:47:33:0a:4d:b5:f7:1e:29:05:16:2b:39:dd:
e8:ea:be:1a:ab:d7:13:47:c4:1c:e8:a7:f0:2d:61:30:e0:e4:
1d:4f:07:c8:fe:d5:42:16:45:bd:78:0d:68:29:cb:b3:0c:e3:
ea:71:ed:b1:11:c6:43:97:71:f1:1f:e5:5a:77:c0:31:f9:46:
5e:97:76:12:a6:72:03:93:a2:a7:4a:b0:da:a5:24:ce:67:95:
ae:1c:92:18:c0:22:fc:51:a6:de:c1:8a:a5:a8:41:2b:01:96:
b2:42:bc:2e:ca:6c:3c:a7:8d:eb:96:d7:2a:53:d0:b5:3e:1b:
64:9e:c2:84:1c:6a:5a:cb:f7:17:f6:8b:be:02:67:28:f2:73:
ca:4b:b2:1b:54:8d:a6:f5:f1:b8:82:f8:3f:4e:01:09:d3:ba:
a7:50:22:23:66:b7:d4:a3:30:fb:61:28:fd:c5:5f:62:e2:0c:
dd:54:f6:fb:e4:a6:b4:5b:40:10:1d:05:db:80:2f:fa:a9:fc:
b3:03:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:06 2026 by rpki-client