
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier: RfAL3OfN596VLFxxhE4xTYOLnsSEYZPWuJNKP1L/E1o=
Subject key identifier: 47:67:B1:9D:2A:87:AA:D1:6C:79:90:F9:F1:64:2D:58:A6:3A:79:EF
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number: 02D3
Signing time: Tue 28 Jul 2026 22:21:40 +0000
Manifest this update: Tue 28 Jul 2026 22:21:40 +0000
Manifest next update: Tue 04 Aug 2026 22:21:40 +0000
Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: LXEPm3Jmhi5iXNC6Kfu3Z0eQJU9d+PQaij/dTW5XwO4=)
2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Validity
Not Before: Jul 28 22:21:40 2026 GMT
Not After : Aug 4 22:21:40 2026 GMT
Subject: CN=6a692b74-ccac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:24:2e:dd:f4:d2:24:6f:ea:a6:de:63:68:
61:68:13:f7:57:c0:16:33:fb:a1:6c:10:44:6b:28:
d6:61:d0:f0:af:06:79:af:8d:aa:89:83:e2:46:44:
00:ed:1e:bb:65:73:3a:a8:b3:83:2f:c9:9e:ae:de:
2a:28:8b:de:69:ba:7d:48:27:c9:ef:fb:3c:63:ef:
f4:6b:79:7d:0a:7b:2e:44:c4:0c:fe:39:0d:b6:bc:
7c:1e:16:45:5d:60:6d:77:33:e5:a1:78:4e:79:d8:
22:ad:06:12:e6:fb:6a:6e:d0:22:2c:3e:65:8a:7d:
cc:9c:57:7b:23:93:26:68:53:d1:89:91:97:36:66:
24:85:b3:84:ce:b2:21:40:87:b1:1d:3a:55:69:4a:
a1:22:e1:1a:02:19:50:24:4b:99:d9:a7:b2:0f:f5:
b0:a8:17:cb:90:55:fb:fd:bb:f9:50:b3:1b:f2:cd:
00:9f:9e:83:cd:a8:70:b7:56:4d:44:6e:f0:b7:83:
f5:a4:68:52:e7:ae:e1:b3:50:88:95:39:ff:a0:6d:
93:da:63:a4:ab:86:7e:97:33:51:b3:04:ea:25:19:
65:69:5a:bd:17:75:10:4d:b0:26:9a:23:ce:77:3a:
f9:c7:29:18:da:25:c2:ad:09:d8:46:28:b0:1f:ff:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:B1:9D:2A:87:AA:D1:6C:79:90:F9:F1:64:2D:58:A6:3A:79:EF
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c8:b4:c5:95:85:f2:a8:e0:82:42:5f:19:af:de:c8:70:25:
f0:f4:79:12:f3:35:cb:d7:fe:a2:0c:ec:b5:dd:c5:ae:78:a6:
1c:af:d5:19:85:70:05:c5:ea:e9:c2:89:16:37:d4:f1:cf:ac:
47:38:86:fb:ff:eb:ba:5a:e1:e2:26:1a:30:18:fe:c2:5b:ec:
46:1a:18:bf:95:a4:f2:ca:07:73:e0:91:fa:1f:d0:ee:82:71:
98:e1:9f:a1:01:dd:30:53:c8:79:51:31:a1:fb:b8:1e:c9:89:
e9:48:cc:bc:2e:24:82:fc:46:8c:b2:27:c6:0f:05:00:cb:c2:
1d:fd:63:00:f3:32:11:00:c1:a5:54:a2:70:da:36:e6:f7:df:
af:d1:9c:b9:30:da:97:5d:80:44:8f:a7:36:12:2c:66:c1:a4:
a0:06:ac:8c:ee:12:97:99:e4:ec:b4:4c:d7:c2:67:9c:b6:c8:
8d:ab:cb:88:69:08:d3:98:96:7b:3f:14:42:5b:5f:3c:e2:e9:
dc:bd:06:cf:1e:c8:db:99:c0:a7:b5:a4:93:4c:e9:9f:58:34:
03:0a:9b:4d:ed:24:ec:95:e5:fb:09:d1:f2:98:c9:97:d0:f2:
5e:be:e9:b0:6d:41:f1:1d:46:ae:b9:83:8d:3b:b7:f1:18:f3:
24:1c:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:41 2026 by rpki-client