
$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json)
Hash identifier: SZt8v8vFhxVsvkc6ke0BoFHbl3d47c1SkYkfowIHIlM=
Subject key identifier: 96:A6:2C:A4:E6:09:44:20:BA:C3:3B:4B:F6:F6:DB:A9:63:12:17:92
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 0867
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
Manifest number: 0813
Signing time: Tue 28 Jul 2026 21:56:03 +0000
Manifest this update: Tue 28 Jul 2026 21:56:02 +0000
Manifest next update: Tue 04 Aug 2026 21:56:02 +0000
Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: guGUYUJAnKInzoi8lXOV+1Jp6wI5BgXKdO3ZIvSZerE=)
2: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: LJbta/JJVJ23WgZ0akF5Ov55pEZeCXuRcU1xDJv2re0=)
3: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: yqzH+VRJDdIn8v1i8jejnoTV03RvjOrdo0NsV1Hhxj0=)
4: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: iWVOHg6QDBIqMpA3MO5LObP6AHCPSfyjRAL55UZ4G0g=)
5: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: BtYPWm6haSNi67HssCRHuMs+/2A6YgL6H+ZvBM2G+Lg=)
6: 8BF305A2F44711F0849EF3E6616F56BC.roa (hash: 8FXTDQ3pdrB9lI0tc6cwlsOBLuq+7Ubnrq4d6bTJfQo=)
7: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=)
8: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: R34hnb67EtA7MxdkNi5WSU1aixEiNDr681Fh+Yd4Kag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Jul 28 21:56:02 2026 GMT
Not After : Aug 4 21:56:02 2026 GMT
Subject: CN=6a692572-8ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:17:57:2d:61:a4:39:cd:6b:b3:83:c2:7e:
bf:d7:3b:dd:92:d2:47:1b:66:63:d1:d6:14:33:95:
b5:d0:56:e2:c1:f3:89:ce:f1:96:2c:51:97:6a:14:
bf:15:6d:a0:fa:ec:51:f2:bd:95:05:be:17:d4:3f:
3e:49:ff:96:d1:89:9b:4f:9b:53:03:de:62:f8:0e:
ca:51:35:81:18:77:fe:49:4c:08:31:51:e6:f6:91:
36:1a:ac:13:2b:52:ef:37:5a:05:6c:84:9b:77:92:
87:48:47:11:5b:5e:53:22:f9:73:6d:7b:ed:72:18:
87:70:29:90:fe:1b:fb:e9:48:97:d4:78:38:20:7b:
b9:fa:47:6c:c0:6a:5b:4b:89:35:9c:12:2a:32:43:
a3:a5:6a:cf:6c:07:35:c9:0f:93:2f:fe:d9:ba:da:
a7:ed:26:53:09:72:2e:40:45:83:8a:75:7b:e9:b8:
8e:58:61:79:6d:9d:ff:c0:8a:9e:0c:5d:20:9f:c0:
6e:ad:9b:bd:a6:ff:0f:43:d8:1b:38:64:a0:ee:ae:
2f:29:28:f0:f5:d0:d4:2f:3a:87:e1:df:75:b5:bc:
36:0f:74:48:75:67:30:bc:f3:72:22:12:02:94:46:
e0:b3:cd:c4:dc:dc:5f:b2:a1:ef:4a:48:de:34:8d:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A6:2C:A4:E6:09:44:20:BA:C3:3B:4B:F6:F6:DB:A9:63:12:17:92
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6c:be:ba:38:6a:de:fd:61:8c:5f:4e:21:7b:25:f1:ed:bc:
e2:53:46:de:0d:1c:ce:09:32:8c:2b:37:9d:15:54:c1:bd:ab:
b0:7d:cf:b8:d5:36:05:af:b4:8f:ab:a1:a4:10:13:ba:57:96:
42:71:4e:74:bc:70:f7:9a:1e:15:d5:a9:d6:ab:b0:33:1d:fc:
f8:47:0c:4c:6c:2b:a4:40:68:1f:d2:55:ec:91:ae:05:7c:c0:
28:84:2a:30:3f:3c:37:a1:9d:15:53:61:6c:2c:57:7d:29:76:
0c:f1:f8:e7:ed:af:36:be:e8:1b:2b:93:db:ed:4d:3b:17:44:
52:fc:6b:53:67:7e:4a:a7:87:b4:23:20:ad:72:8c:0c:bc:f8:
0b:17:8f:c5:85:a7:9d:ff:55:c1:c3:ed:f3:d7:c2:51:a4:d8:
ea:0e:7c:58:f9:44:9a:15:60:3b:1a:03:e7:f2:08:e8:2f:87:
04:48:da:1f:98:01:6e:ab:d2:e3:85:7b:07:cc:d6:ff:d7:d1:
98:7c:9b:0c:3b:54:05:37:b8:cd:02:b0:33:39:69:b0:2e:6e:
4c:f4:b3:7a:81:19:75:2d:0e:6f:e7:c8:ea:66:9a:86:9b:fc:
00:a7:e8:8d:e4:ea:31:9c:4f:03:d4:9e:a5:41:77:34:6c:98:
bd:fe:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:42 2026 by rpki-client