
$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
File: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft (raw, json)
Hash identifier: vFKDU0Qzj1WPZDlUK6pD0BzCV93b6aoth7fzgOK/vLM=
Subject key identifier: DE:61:98:87:06:3F:48:5E:86:3E:E3:9C:ED:8C:07:07:AF:8B:DA:C8
Authority key identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85
Certificate issuer: /CN=A91988EB/serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
Manifest number: 58
Signing time: Sat 13 Jun 2026 08:15:01 +0000
Manifest this update: Sat 13 Jun 2026 08:15:00 +0000
Manifest next update: Sat 20 Jun 2026 08:15:00 +0000
Files and hashes: 1: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl (hash: SytkgFv5HU51h/4LyURGr0ZzgmSMgRadji5T18IQ1uI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl
rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91988EB, serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685
Validity
Not Before: Jun 13 08:15:00 2026 GMT
Not After : Jun 20 08:15:00 2026 GMT
Subject: CN=6a2d1185-fda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:3d:cc:7d:0a:94:f6:e2:b1:2d:e2:3c:b7:
4f:24:3a:02:95:de:78:34:af:c3:b9:8b:40:a7:93:
01:0e:99:fa:79:f5:4a:f3:6d:18:3f:52:53:b0:60:
87:c7:03:4e:47:5b:b2:e9:04:3f:5c:e8:46:53:d9:
62:05:c9:97:97:3c:54:ae:ff:40:71:dc:13:59:f9:
88:26:d4:6b:01:76:34:7d:95:2e:03:61:34:cc:c4:
57:6a:e2:06:4f:da:d2:c4:f8:24:2a:00:b9:53:09:
56:f7:77:63:47:06:02:2e:cb:14:f9:f7:d8:85:46:
1d:11:e2:6e:a0:e3:08:bf:90:2b:63:1a:a3:13:02:
ad:91:23:99:80:c0:dd:f3:f1:27:f3:5f:7f:41:27:
b1:de:b7:2e:e9:80:40:8a:1d:ec:bb:42:4c:d9:39:
8f:74:2e:61:58:c1:92:dd:8d:b2:2f:15:0f:a3:bd:
5f:e1:2a:36:d7:5d:94:34:4e:3c:f4:71:5b:87:ef:
60:cb:54:75:4c:09:a8:89:77:75:80:98:b5:5b:10:
82:d0:5c:20:5b:0d:d2:be:4c:f9:17:67:da:e0:85:
45:0d:e5:68:be:76:c8:38:c2:97:fb:b1:bb:46:08:
e8:bd:d4:67:f1:8d:66:2b:2f:04:de:59:8c:a7:0f:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:61:98:87:06:3F:48:5E:86:3E:E3:9C:ED:8C:07:07:AF:8B:DA:C8
X509v3 Authority Key Identifier:
keyid:43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:98:6f:86:2e:c6:54:19:d9:15:39:5b:da:34:f3:dd:dc:b5:
17:a7:25:0b:09:29:dc:3f:ad:1d:95:e0:a0:02:8a:9d:e1:c4:
33:1d:8a:fe:60:58:75:66:06:a4:d0:67:04:36:ac:7c:aa:d2:
58:f9:5b:38:d0:64:eb:95:27:ee:8e:76:1d:43:a0:f2:b0:4f:
27:f3:b2:13:06:4b:61:9d:aa:85:2d:d0:42:ef:3f:c0:fc:40:
78:ab:1d:03:ad:9c:44:31:1d:ca:5b:f6:d1:76:2e:a3:9f:46:
6d:8a:b2:5c:69:50:be:34:39:1f:b0:74:9d:6a:7a:8c:5a:4b:
a6:2e:11:bb:af:89:72:df:78:4c:62:4a:83:58:68:83:81:29:
8d:33:66:2b:c3:0b:88:9f:86:c8:1e:81:e0:d0:82:95:02:70:
53:77:ea:39:c3:e7:b7:e9:37:2e:32:17:11:f2:26:89:93:64:
af:e6:41:d5:88:b0:96:86:29:73:8d:16:e3:51:26:d5:8d:5d:
14:53:5a:7c:26:25:a4:bd:93:27:39:3a:e5:b0:4a:78:d5:92:
0f:28:39:d0:f6:f4:9d:b9:01:80:2f:2e:52:24:90:6c:4a:a6:
b3:fa:6e:2d:cb:9b:12:84:b0:05:57:0e:56:57:2f:6f:49:d4:
1d:b0:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:50:20 2026 by rpki-client