
$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json)
Hash identifier: wEGYiuuY8cliJ5Y9kwBjEg268PIOnDDrPr9h2773cn4=
Subject key identifier: 70:A9:5F:1B:D3:46:BB:3F:28:4E:29:C7:4C:8A:7B:40:9F:5A:81:9D
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial: 086B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
Manifest number: 0862
Signing time: Tue 28 Jul 2026 21:16:13 +0000
Manifest this update: Tue 28 Jul 2026 21:16:12 +0000
Manifest next update: Tue 04 Aug 2026 21:16:12 +0000
Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: BGWI4G3o3i9dGMAynlRDfzxiXx3UOvFwr4lBx1Vn4gA=)
2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: DBVP47MzkA4zExAYz5BkJLhWa09IKcrwIj4PmXTVqgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Validity
Not Before: Jul 28 21:16:12 2026 GMT
Not After : Aug 4 21:16:12 2026 GMT
Subject: CN=6a691c1d-c5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:b6:e2:c2:66:77:71:78:15:b0:f9:46:ac:
b4:2c:29:21:9b:00:e6:9b:59:1a:1d:d7:2b:ee:ce:
7b:3d:ba:1b:14:cb:c2:9e:a8:84:ef:a1:c2:c7:9b:
78:b8:79:9e:b1:49:ac:03:0b:82:37:84:08:ec:cc:
68:6e:57:cb:5f:83:79:b1:92:7c:47:4e:6d:e0:11:
ae:99:84:90:b3:ca:6d:a5:b2:dd:94:68:c6:83:7e:
ea:e5:3c:79:ce:66:f9:8f:62:8a:fc:27:a4:e7:3b:
c7:55:9a:ae:bd:a8:87:7f:8e:73:ed:2f:33:65:20:
6a:df:49:21:06:f6:a2:42:bc:66:cf:2e:65:38:11:
d3:ab:b4:f9:c0:8a:19:36:e5:e0:d4:51:7c:9a:af:
8e:4d:c4:f7:52:60:d4:55:47:ff:9b:4f:de:19:c7:
9f:4a:b7:be:10:37:fc:88:66:7f:d3:0e:61:a3:b8:
28:e0:7e:ef:2f:8d:cd:e2:74:2d:aa:a4:fa:40:f3:
19:d7:8b:01:6e:10:69:03:7f:31:44:a9:b1:e7:18:
21:31:f5:de:1a:4f:50:7c:44:5d:6f:11:36:a1:5f:
0b:40:8b:86:66:08:6f:8b:79:68:68:cf:8f:dd:f8:
ee:fd:6c:71:a4:ae:90:e6:57:8d:74:29:d2:6f:10:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A9:5F:1B:D3:46:BB:3F:28:4E:29:C7:4C:8A:7B:40:9F:5A:81:9D
X509v3 Authority Key Identifier:
keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:1e:02:17:03:a9:64:45:a0:4d:b1:07:52:15:c7:07:76:3a:
b3:01:09:6f:0d:0a:6b:c0:4e:34:90:6d:55:04:35:71:5a:ca:
e8:f8:81:6c:8b:c3:22:82:56:5a:e5:85:ec:4d:2e:69:03:3b:
65:b1:a7:09:33:a7:23:10:5d:d1:d2:48:87:6b:e0:43:4b:8a:
bc:db:f7:00:8c:ee:d2:f5:a2:15:fa:03:0d:76:e7:74:1b:06:
c6:19:a2:a0:3b:51:e4:1e:33:08:c7:b6:01:47:a9:e6:ca:c2:
13:11:c2:95:c7:03:d9:c7:b9:87:a5:6c:ca:c2:65:1a:e7:a3:
8c:42:42:ff:19:40:90:f4:b3:44:35:45:c7:32:1c:85:d5:c5:
4d:68:a6:43:b8:b3:bd:86:09:6b:40:cf:c1:73:e3:dc:80:0a:
bb:52:53:a9:2f:3a:30:42:f7:69:21:03:df:ea:02:92:81:c9:
45:37:a3:9b:96:f5:75:f2:b3:15:86:cf:66:fd:bf:31:4c:01:
13:f2:ce:ce:ab:3f:31:f7:80:23:4a:8c:10:7a:9a:05:0d:50:
96:da:7e:a0:2f:ff:e8:cd:62:67:86:66:e4:11:0d:8e:57:16:
8a:07:fe:3f:24:8c:85:46:6a:34:c9:f2:a0:be:0a:4f:da:93:
9b:f4:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:43:07 2026 by rpki-client