
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier: CC2NqbQ1mEIuyqs5QW1JioXe73LJE3PX9D2QJoBnzXU=
Subject key identifier: F0:F7:95:F4:5F:6E:34:48:9B:CB:49:EF:F7:A2:4A:F4:77:D0:56:2D
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number: 01F9
Signing time: Mon 27 Jul 2026 04:47:09 +0000
Manifest this update: Mon 27 Jul 2026 04:47:09 +0000
Manifest next update: Mon 03 Aug 2026 04:47:09 +0000
Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: HAgyqgatDh/kw+kAyVporjXhdyyC7j64o6A8JI3oKEw=)
2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Validity
Not Before: Jul 27 04:47:09 2026 GMT
Not After : Aug 3 04:47:09 2026 GMT
Subject: CN=6a66e2cd-904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:94:7d:ff:b0:6e:35:00:2f:bc:c1:46:c4:
a4:0a:70:0f:69:36:65:81:01:65:a1:15:60:45:46:
34:0e:96:c0:98:9c:6d:38:c2:b6:98:b2:35:a9:a0:
25:b1:65:a6:0b:bd:9f:09:1e:a3:d6:22:4d:e8:ae:
18:60:87:91:87:24:21:81:39:8e:c7:a1:4b:68:a9:
0a:71:30:55:0b:d4:a6:dc:aa:57:91:18:e2:ee:69:
7d:88:37:4c:b2:c6:75:ce:f8:2c:d7:47:cd:6a:c4:
de:8f:20:3a:b2:b8:a9:df:6a:e4:1e:58:f4:98:55:
b3:14:ec:5f:8a:59:a1:d5:0e:f9:72:8e:1f:c7:7d:
48:79:04:83:2a:5f:ff:ff:dc:06:1b:d9:e2:e8:d9:
6e:d0:d0:25:f3:2c:13:cd:28:e1:95:9c:74:80:d7:
ae:72:b9:87:b9:e4:25:a2:8c:59:06:97:23:aa:b7:
2d:d5:3d:cf:02:d8:c0:d2:78:52:3a:c4:72:5a:e9:
a6:eb:43:c9:60:9a:7c:5c:1d:f0:aa:c3:af:f7:d5:
a7:51:80:56:6f:d1:1c:40:57:57:73:37:d2:ea:5a:
20:99:40:d0:a7:d1:fb:95:36:37:10:4d:b1:40:46:
80:30:ac:aa:16:1c:22:d5:b4:c9:7b:0c:10:da:06:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F7:95:F4:5F:6E:34:48:9B:CB:49:EF:F7:A2:4A:F4:77:D0:56:2D
X509v3 Authority Key Identifier:
keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:52:35:bb:58:f2:25:d6:0e:17:ee:a2:c1:28:56:67:67:b0:
6f:d7:37:44:7c:8e:bc:35:89:3e:a7:d2:97:a2:83:c2:e1:14:
f6:77:60:63:8f:07:f2:9a:82:b4:d4:62:b7:9c:fe:73:c3:97:
91:80:2c:84:6c:65:51:df:a1:0b:3b:e7:79:0f:3a:f6:39:69:
04:97:29:67:bb:4d:6f:91:2b:74:9a:b5:65:47:0f:a5:24:27:
e3:0e:9c:98:5a:e8:e6:04:f9:6f:c4:89:b0:f4:1c:c6:d3:d1:
c4:10:16:ca:d4:4e:e4:86:48:2a:15:58:63:11:02:96:d0:cc:
1f:fb:53:19:d6:e7:49:fd:6c:0e:29:da:fe:c9:0a:a4:7e:ba:
cd:86:4b:0e:44:86:9a:17:be:e5:a5:54:be:c4:25:be:12:97:
c1:47:e3:fe:5a:8c:82:de:71:21:7b:65:20:7e:07:9e:87:dc:
24:04:d6:d6:51:3d:87:a3:93:02:d4:b4:85:a7:99:94:3c:c7:
b5:d7:0c:5f:10:e5:09:24:ef:42:7b:34:8d:dd:3e:4f:07:7e:
2a:71:26:88:35:20:85:04:90:5f:e5:41:db:d3:11:ac:13:45:
92:47:4a:56:22:2a:2a:41:c6:5b:fa:97:45:7b:5d:54:e9:6d:
ae:26:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:47:55 2026 by rpki-client