
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier: CZrzO9CkxKBJ3ikJ/3alz2HExqlGPrvisLplzEXMazM=
Subject key identifier: 69:E6:AA:CC:4D:4A:41:74:4D:F6:52:D8:CF:D9:65:37:97:E7:34:61
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number: 020D
Signing time: Mon 27 Jul 2026 05:04:49 +0000
Manifest this update: Mon 27 Jul 2026 05:04:48 +0000
Manifest next update: Mon 03 Aug 2026 05:04:48 +0000
Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: 8Co1EVDMRalNfymtPVpY80xE/tUxRvCDxZppeKwUKQI=)
2: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: p6zGTgqZJ7iiiCzsm415AfpPsLOlXyGxbt61Izp1Z6U=)
3: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 6JnWBHrw4ffDiGiVWAOckF4qnqqFhoHfVR3johcA4II=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Jul 27 05:04:48 2026 GMT
Not After : Aug 3 05:04:48 2026 GMT
Subject: CN=6a66e6f1-8b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:da:7d:c9:82:cc:8d:2f:3a:49:74:d6:10:
4f:ee:f3:c0:9b:22:01:ca:e1:c3:c5:e7:41:c6:05:
5a:7c:6e:a0:25:8d:f1:c7:77:bb:61:4f:64:cf:8c:
5a:5a:0d:34:13:e1:70:51:43:51:01:ff:e5:7f:b6:
f5:8b:81:85:c2:db:9b:d7:50:48:77:93:84:96:8f:
6e:a9:29:3a:b3:62:1c:95:70:6b:1a:8c:19:69:72:
4c:1c:bf:7b:8b:cd:87:30:4b:90:70:eb:fa:36:bf:
74:62:92:6e:0b:5e:ce:12:57:26:e4:72:7c:35:34:
0e:5d:71:e2:a5:d8:84:a5:e4:60:26:0d:5f:4e:7d:
a3:a3:70:79:45:2b:79:1d:09:75:66:f5:f3:64:62:
23:b0:c0:b9:33:d1:0e:82:ea:c6:5f:4c:27:d7:38:
72:cb:de:1f:e8:fb:fb:83:98:17:44:05:93:e0:19:
de:bf:8c:73:57:d6:a1:da:da:02:56:f6:25:48:5b:
8f:17:e4:0c:ad:77:7d:d6:97:fb:3d:7f:9c:2a:b7:
50:68:0b:5a:ac:0a:60:47:18:d1:f8:7d:79:8e:5f:
f2:fb:ae:a4:f6:77:0b:09:e0:32:39:67:8d:19:bd:
6d:e4:d0:4f:8d:67:9a:32:a4:7c:96:67:62:c1:e1:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E6:AA:CC:4D:4A:41:74:4D:F6:52:D8:CF:D9:65:37:97:E7:34:61
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:a7:b9:0e:55:b9:a9:77:0d:76:1d:f3:7d:b6:72:4a:44:
62:6d:9a:cf:1e:c0:a5:b9:8f:73:1f:87:5d:22:e4:ea:07:19:
d3:76:96:7e:f8:04:89:74:1c:5a:2a:66:86:18:b4:ce:17:f7:
50:20:32:76:c1:f8:48:dc:33:56:70:fb:41:93:6d:a3:2f:dc:
c6:70:07:8e:8f:58:23:e5:c1:ae:58:68:5a:57:c3:b8:be:9c:
f6:37:90:56:3c:10:71:5e:bb:08:40:ad:09:58:bb:f0:af:f9:
b2:74:ef:10:cc:90:38:9f:5d:5b:e0:c1:78:91:ec:1b:cb:6a:
ef:0c:78:bb:10:a1:01:e8:cc:64:db:b3:c2:d4:55:ee:7c:70:
c6:8a:c3:44:02:59:a8:9d:2c:b1:7b:01:03:b4:29:10:5d:e2:
ca:3e:cb:7b:8c:26:8e:cc:34:ae:36:37:f2:01:72:95:52:6a:
a4:86:33:37:87:91:a2:07:f5:52:94:d5:fe:f0:ad:ab:18:7f:
c4:9e:51:be:e6:8d:94:6a:bc:7e:c9:29:f9:26:e2:ce:c6:6c:
68:9f:57:b3:11:58:84:91:0a:85:f5:b5:e4:6d:aa:33:e8:2a:
a5:de:b4:72:4d:42:87:3f:1a:fc:3a:4a:6f:50:fc:c1:4e:84:
4d:ea:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:44 2026 by rpki-client