
$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
File: QIyZnDwewBZElFs0d6nyI061eRw.mft (raw, json)
Hash identifier: AziarDr28Hcx6Mn1g760nACEyhjorf2B536bNWDAT0A=
Subject key identifier: 24:83:0B:18:DB:BA:2C:66:20:FE:83:8E:A0:66:C7:CF:90:5C:52:C2
Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Certificate serial: 2595
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
Manifest number: 2569
Signing time: Tue 28 Jul 2026 15:50:35 +0000
Manifest this update: Tue 28 Jul 2026 15:50:35 +0000
Manifest next update: Tue 04 Aug 2026 15:50:35 +0000
Files and hashes: 1: QIyZnDwewBZElFs0d6nyI061eRw.crl (hash: vT7VEBOtBrbTQbblYV1S8N2oqWkYKjQZmSyvEvTq2z4=)
2: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (hash: /w4t5dhbmQEa84JEDJ39VitjjFskPm/mEpnYuZ0T6wQ=)
3: 2486E806F0E311EAA1C58D62C4F9AE02.roa (hash: l+zP+x/ZY9cq3nbV4r5XpYolKqUr/0Lu8hDJSfvQgkI=)
4: 50A2F64264BC11E8ACC7951EC4F9AE02.roa (hash: 6oC3s9zXSmCynBY9z0T8TeaSrJ6gHinauk9Zr2y+ucg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9621 (0x2595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Validity
Not Before: Jul 28 15:50:35 2026 GMT
Not After : Aug 4 15:50:35 2026 GMT
Subject: CN=6a68cfcb-2b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:01:95:98:45:ac:9b:57:5e:bf:c0:4b:5f:
8a:6e:3e:a4:98:24:e3:c4:dd:71:95:b8:8d:37:93:
e7:43:a7:de:a2:ba:07:18:01:8e:00:ab:a7:cc:c0:
cb:c4:d4:81:59:98:26:6a:79:e2:72:cd:5f:f0:e6:
2a:61:87:3d:5d:40:be:5f:9e:f5:8e:8c:c6:21:8e:
ee:d0:4d:b5:31:36:01:2c:2a:fc:5a:88:f8:c4:a6:
0b:a3:98:0c:a0:a9:f1:a4:3e:f8:b2:fc:ce:36:85:
83:a1:c9:d8:17:60:dc:d5:9c:15:79:a9:3e:89:0f:
ab:ed:1e:e5:0a:39:ab:1c:72:41:be:f4:d1:f5:38:
a0:0f:21:70:d4:8f:eb:53:6a:e9:f6:50:5c:55:e7:
73:21:1a:bd:1d:3b:8c:e3:a0:16:b3:08:cf:98:e1:
75:28:bd:91:ed:0d:a0:85:5b:93:14:5c:42:b1:ac:
6a:3b:1b:40:0d:df:5a:28:3a:bb:d3:45:d1:e8:10:
2a:d6:bb:55:36:34:da:20:50:0e:ba:5f:ba:a0:c9:
6b:c7:7a:7f:43:e0:69:ee:49:fb:44:c2:c4:3f:af:
bf:82:d0:2f:7d:05:7c:7b:10:ef:bf:0b:4f:00:1b:
38:26:c2:38:9b:3b:31:72:91:a6:0e:f8:39:cc:28:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:83:0B:18:DB:BA:2C:66:20:FE:83:8E:A0:66:C7:CF:90:5C:52:C2
X509v3 Authority Key Identifier:
keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:df:d4:a2:14:94:00:c7:02:66:7c:e8:10:81:8d:49:e1:3c:
7a:f7:71:f9:32:fb:84:30:cf:d3:d5:a2:40:af:b2:32:d2:e0:
5f:fd:06:47:a5:c8:3b:36:be:03:1d:d9:dd:f8:f7:b2:df:37:
c4:41:8e:41:95:03:89:92:fd:14:fe:d1:0f:ca:c2:a7:96:52:
81:4b:57:d5:9c:de:ed:5d:e5:cf:49:fa:e9:39:05:d7:8c:ae:
03:0f:3c:21:55:28:0e:19:03:cf:f3:c8:00:ed:d5:38:50:4d:
d4:3e:2f:3a:31:7a:3c:6a:77:ad:3c:6a:fc:3b:6f:ec:d1:3b:
44:e7:be:ac:88:18:a2:e6:fb:79:65:7f:02:77:34:ef:eb:de:
53:1d:38:ea:a6:85:56:72:10:8b:df:12:2e:c8:cc:ba:65:8c:
65:0e:fa:43:c6:2c:d5:4a:72:81:86:94:3c:dd:72:2a:d3:06:
9b:a3:54:5b:69:48:23:7c:68:fb:c5:0d:80:f5:04:d8:17:00:
4d:64:c7:e2:f7:fd:50:22:20:9f:e4:4c:89:13:65:9f:d3:9e:
9d:cb:aa:a2:71:87:f2:95:fe:ce:5f:0b:fa:38:8c:e2:d8:df:
25:93:db:be:40:03:35:2e:ff:af:fd:85:6d:0c:bb:2d:06:ff:
56:25:49:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz
NEVCNTc5MUMwHhcNMjYwNzI4MTU1MDM1WhcNMjYwODA0MTU1MDM1WjAYMRYwFAYD
VQQDEw02YTY4Y2ZjYi0yYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArXEBlZhFrJtXXr/AS1+Kbj6kmCTjxN1xlbiNN5PnQ6feoroHGAGOAKunzMDL
xNSBWZgmannics1f8OYqYYc9XUC+X571jozGIY7u0E21MTYBLCr8Woj4xKYLo5gM
oKnxpD74svzONoWDocnYF2Dc1ZwVeak+iQ+r7R7lCjmrHHJBvvTR9TigDyFw1I/r
U2rp9lBcVedzIRq9HTuM46AWswjPmOF1KL2R7Q2ghVuTFFxCsaxqOxtADd9aKDq7
00XR6BAq1rtVNjTaIFAOul+6oMlrx3p/Q+Bp7kn7RMLEP6+/gtAvfQV8exDvvwtP
ABs4JsI4mzsxcpGmDvg5zCjLuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSDCxjb
uixmIP6DjqBmx8+QXFLCMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2
RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTBBNS8xN0RGQjM1QTQ2RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdC
WkVsRnMwZDZueUkwNjFlUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABt/UohSUAMcCZnzoEIGNSeE8evdx+TL7hDDP09WiQK+yMtLgX/0GR6XIOza+
Ax3Z3fj3st83xEGOQZUDiZL9FP7RD8rCp5ZSgUtX1Zze7V3lz0n66TkF14yuAw88
IVUoDhkDz/PIAO3VOFBN1D4vOjF6PGp3rTxq/Dtv7NE7ROe+rIgYoub7eWV/Anc0
7+veUx046qaFVnIQi98SLsjMumWMZQ76Q8Ys1UpygYaUPN1yKtMGm6NUW2lII3xo
+8UNgPUE2BcATWTH4vf9UCIgn+RMiRNln9OencuqonGH8pX+zl8L+jiM4tjfJZPb
vkADNS7/r/2FbQy7LQb/ViVJ9Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:24:26 2026 by rpki-client