
$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier: Lcw07J+8Zd74IxTefaJEmloVZT2PJM0ep+e1wCdBdno=
Subject key identifier: B1:CE:3B:7F:D0:73:CA:B6:C0:36:B3:50:6A:B9:BA:CD:1E:0D:7F:D3
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number: 01A1
Signing time: Sat 13 Jun 2026 04:16:27 +0000
Manifest this update: Sat 13 Jun 2026 04:16:26 +0000
Manifest next update: Sat 20 Jun 2026 04:16:26 +0000
Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: 7ntQTZDb6+zDliApCJZ+/9BXzA8NSi9SKUu0/CAIPks=)
2: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: wtU3FReeveSRaGECvJZwcjQF5xOlaITNyX17soC/vMo=)
3: 47142068221311EFB680F113C4F9AE02.roa (hash: q1TM5Ebdt5SP+k07ZaaYP0AaM0RnbZZmHVQA7uMpDO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Validity
Not Before: Jun 13 04:16:26 2026 GMT
Not After : Jun 20 04:16:26 2026 GMT
Subject: CN=6a2cd99a-424a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:d1:00:93:71:19:dc:0a:5c:94:cd:74:f3:
cc:d0:64:52:40:8d:43:4a:d9:c1:43:47:d5:8e:b1:
80:60:6a:c5:cb:0c:6e:4c:71:09:c1:a6:0f:3c:79:
7f:a4:53:c7:25:53:14:47:35:44:03:7e:d4:18:fb:
28:06:ca:16:68:cb:60:5b:e9:bf:d5:78:b4:17:d5:
6b:6e:03:f8:81:db:02:65:3f:59:94:11:9b:5c:f1:
39:55:c7:dc:87:11:c7:6a:3e:7d:09:e3:2e:05:be:
84:2f:3a:f0:24:95:23:f1:0b:1f:06:ef:6d:bf:24:
dd:3a:be:88:2d:f1:a5:6d:39:8b:b0:0a:01:10:c7:
8c:6f:8c:48:23:ef:11:6e:04:2e:d5:74:09:3e:78:
f7:84:9a:6c:51:f9:b9:e0:2c:7f:11:dc:d1:1b:36:
83:f9:c6:99:b1:e1:20:ac:e1:e8:7c:d4:0a:50:57:
e3:5f:be:23:f1:63:48:0b:eb:39:c3:3e:4f:08:53:
d6:40:3d:b8:32:ab:e6:99:0d:0a:90:e6:68:62:d1:
5a:f8:cc:df:42:9c:ef:ab:d9:45:d5:a2:c3:47:9c:
89:5c:84:41:5a:81:23:71:a3:0f:56:1d:51:27:a5:
ea:3b:df:77:cc:f4:cd:74:44:5e:21:60:f9:87:c3:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:3B:7F:D0:73:CA:B6:C0:36:B3:50:6A:B9:BA:CD:1E:0D:7F:D3
X509v3 Authority Key Identifier:
keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c4:cb:75:e8:57:33:4e:0b:bc:6f:cd:8c:9d:63:29:4e:50:
f2:45:0c:e0:9d:21:74:1a:70:f3:5d:27:36:cb:0d:1b:31:f0:
17:40:c3:00:69:9a:20:d3:e4:58:04:8d:be:5a:8e:27:38:b9:
52:0e:20:5b:c8:f5:00:5a:47:29:89:07:a3:38:7b:c9:c3:4d:
89:8e:81:a8:d1:e5:f9:2d:8e:2e:86:12:52:9b:5f:b5:4a:85:
9f:e1:2c:70:fc:0f:af:8c:62:ff:ee:fc:b5:4c:b8:ca:da:3f:
de:8f:b0:f2:fe:e1:fe:24:5a:54:26:f0:28:c6:e2:ed:e7:98:
c3:4c:61:5f:45:f7:40:05:9f:25:87:a0:7b:e1:7d:e8:ad:5c:
26:e5:3e:4c:5a:70:52:e0:5e:de:0d:66:b0:67:9a:ed:2f:e5:
63:c9:12:49:ce:58:3b:dd:ff:f3:f0:2f:c4:ec:0a:f1:29:f5:
77:d4:21:64:a1:2c:d8:bb:fd:e7:ef:a7:d1:02:28:6f:e1:3e:
48:4a:eb:eb:e5:60:d3:99:5f:99:1f:43:a2:25:65:b3:3d:ab:
55:fb:5a:ce:b5:e3:ed:37:67:aa:45:a2:d7:65:21:89:17:5a:
85:55:f4:5f:d3:71:5f:28:fb:7b:da:4f:89:a1:2e:5e:59:e4:
31:ae:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:52:53 2026 by rpki-client