
$ rpki-client -vvf rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
File: qvIbcGtV8TNNz2thfp4PMR1b9zM.mft (raw, json)
Hash identifier: 8gF0tEWfn2uF2Sm6jiSbI8tfvqeU6KEOw2EPLG0LqGk=
Subject key identifier: A0:76:1D:1C:21:0C:2A:EE:4E:58:6B:66:D2:48:A4:93:45:2A:1E:53
Authority key identifier: AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
Certificate issuer: /CN=A91729D4/serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
Manifest number: 10
Signing time: Mon 27 Jul 2026 11:28:29 +0000
Manifest this update: Mon 27 Jul 2026 11:28:28 +0000
Manifest next update: Mon 03 Aug 2026 11:28:28 +0000
Files and hashes: 1: qvIbcGtV8TNNz2thfp4PMR1b9zM.crl (hash: Z0j7pP4RSuJ6mx/QEQ6vFA8gey4kO9sYYAf6OVZ8DBM=)
2: 88B4A746725111F189F604128DA30FBC.roa (hash: /emz37e0m2LLZWcMUqkDepflFN5315Y0u/7biRL6nWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91729D4, serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Validity
Not Before: Jul 27 11:28:28 2026 GMT
Not After : Aug 3 11:28:28 2026 GMT
Subject: CN=6a6740dd-8a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:f7:0f:6a:7b:13:43:91:56:42:86:26:41:
95:4c:35:4f:94:29:7f:78:28:e5:dd:83:22:5d:bc:
92:38:f3:6e:3d:43:3c:f3:9c:e0:40:18:a2:03:33:
53:9a:42:bb:d2:b2:21:0a:f9:f6:77:a2:3c:b3:e0:
7f:79:13:23:04:08:c3:0d:8a:33:4b:ad:f5:58:0a:
0a:2f:61:0e:17:be:bf:6f:40:c6:48:07:a5:50:3b:
7c:9f:c5:1b:74:91:ce:f6:b7:e1:c9:38:54:14:3c:
d6:0b:74:68:e7:3b:26:be:2d:cf:26:ba:23:fc:c6:
4b:97:de:c6:d0:84:6f:25:e5:13:09:2e:02:8a:1c:
f7:55:1b:37:6d:a7:eb:11:01:86:86:2d:fa:a1:e5:
ac:56:29:ae:40:6b:c4:d4:53:c6:51:8c:36:83:3f:
19:78:d6:2a:fb:1e:c3:ff:08:30:6b:be:a1:ef:eb:
14:76:b5:b6:db:bb:c3:26:ec:26:30:d6:46:64:ae:
e9:30:76:02:e8:d6:5e:a6:e8:0c:ee:d4:79:60:26:
4d:fe:7a:e3:da:7d:26:18:4a:70:7d:be:ae:57:34:
5a:3c:57:97:9f:03:68:f9:44:17:a5:a0:31:71:11:
3a:7a:2c:55:f3:8a:2d:90:87:a7:5a:6b:17:64:4f:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:1D:1C:21:0C:2A:EE:4E:58:6B:66:D2:48:A4:93:45:2A:1E:53
X509v3 Authority Key Identifier:
keyid:AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:80:57:52:74:99:96:21:8f:20:c1:2c:cd:25:ac:6c:1b:72:
e4:12:9b:a9:d2:bb:20:d3:23:cc:ad:1c:bd:7e:7b:4b:58:1e:
73:bc:9d:69:24:10:7c:53:29:14:c3:b4:a8:7c:76:d1:7c:49:
0c:4d:92:13:39:a7:2e:67:6f:27:da:ab:25:7b:e7:8c:31:0b:
4c:0f:8a:e0:61:ac:76:aa:cf:60:fd:46:a4:96:37:9b:d7:ec:
a1:7b:4d:27:7e:70:2c:8b:b4:42:f9:6e:ba:61:28:d5:06:2f:
4e:59:d4:89:15:88:5d:5b:08:41:4b:7c:56:a8:61:96:25:14:
20:3f:7d:72:e4:2a:fc:e2:4e:6c:a9:c8:3f:5d:d7:4a:9c:42:
01:04:e4:5d:e4:2a:da:91:45:56:95:73:86:03:95:2f:4b:2c:
24:17:8d:e6:3d:02:9f:13:2e:6e:3d:d2:90:0d:73:3d:5a:0a:
9e:48:3a:17:c9:4e:d2:22:96:7a:a1:12:4d:b4:2b:ef:8a:84:
86:ff:10:50:3d:53:34:c2:f8:0e:cb:a2:82:d6:eb:50:fd:0d:
cd:03:10:46:b5:98:42:94:c1:a1:45:24:80:44:6b:a2:de:aa:
eb:6d:ba:0e:ac:c6:e9:d3:38:be:56:77:64:9f:79:ea:c2:5d:
61:a1:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:41 2026 by rpki-client