
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier: 9TMaQH/SmxeOIja9/TwW8RQGkXxP+tHIerxltA/F8Ik=
Subject key identifier: C3:41:87:53:D3:36:4F:0F:D9:2B:EA:F4:F0:B3:0B:EF:F5:19:46:87
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number: 020B
Signing time: Mon 27 Jul 2026 04:36:15 +0000
Manifest this update: Mon 27 Jul 2026 04:36:14 +0000
Manifest next update: Mon 03 Aug 2026 04:36:14 +0000
Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: b2dA7ls6dhG59InhBdY+F8zovC06Du3Svyirs1a3zXY=)
2: 294325DC699711EEB317603DC4F9AE02.roa (hash: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Validity
Not Before: Jul 27 04:36:14 2026 GMT
Not After : Aug 3 04:36:14 2026 GMT
Subject: CN=6a66e03f-d0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:c3:04:e7:87:84:4c:ea:4a:5c:f9:49:83:
07:79:ff:43:4d:f8:f0:82:aa:40:cb:c2:f3:38:9d:
ed:da:ac:5a:7d:d6:2f:8d:6a:41:0a:7a:36:56:56:
85:24:38:0e:3c:ac:28:0a:16:ad:4f:57:98:cc:99:
9e:53:5e:95:19:3a:5c:c0:e9:ef:44:bc:2a:0d:20:
78:50:ee:3d:8e:3b:7c:1b:1a:b0:50:87:db:02:f1:
8e:06:72:da:c7:d8:7d:65:70:96:82:8e:b2:b7:c5:
55:c0:dc:a8:00:ed:7d:9f:42:c8:18:4d:c2:9c:c4:
66:c4:b6:ae:f4:df:13:77:70:d1:22:d9:f4:7c:d1:
22:27:08:39:b3:4e:12:4e:a5:e9:cc:05:c8:b9:37:
e5:7d:15:3d:9c:fe:d6:44:07:e7:7e:a5:7d:70:48:
64:c1:8e:fe:d9:e6:d7:98:8e:8b:97:ae:81:61:7f:
09:01:c0:bd:ea:56:cb:85:ba:02:35:8c:c1:f6:88:
5a:e7:77:2e:83:81:9b:a7:68:97:18:78:51:3c:9a:
58:50:f6:74:97:51:6b:80:80:9b:5f:a5:3d:d9:7b:
aa:a8:a5:83:1a:10:5a:ba:77:94:d4:0d:08:61:5b:
6d:a1:2b:dd:6d:c0:5f:e0:1f:f2:f7:28:6b:b4:0f:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:87:53:D3:36:4F:0F:D9:2B:EA:F4:F0:B3:0B:EF:F5:19:46:87
X509v3 Authority Key Identifier:
keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:9e:a3:b1:39:f6:a6:9f:e9:26:e9:5c:b3:d1:86:c2:44:
51:51:ff:87:42:da:a1:c3:5e:fc:8e:1e:5f:32:b8:6f:e9:3f:
b1:c5:48:55:85:fc:88:e7:0f:00:a4:a2:0f:0c:54:f1:ce:84:
cc:db:2e:10:99:5a:80:29:20:b9:11:08:ca:1c:6b:47:52:10:
20:5f:d9:56:09:86:0f:13:72:87:64:65:fb:b6:a9:dd:c0:51:
a2:a8:66:a6:75:cc:af:cb:87:1e:9c:5b:c4:22:01:b3:46:eb:
22:0e:88:2e:17:05:eb:be:19:45:7c:e0:7e:c2:5d:3b:12:c5:
ee:fd:d0:66:d7:92:99:e4:cb:15:53:d7:bf:75:cb:5a:e6:ae:
9b:e3:2c:18:cc:e3:e2:b2:89:90:d2:f5:3e:38:b8:4e:b2:f1:
d5:87:df:28:44:ed:3a:d5:ce:9f:76:9e:74:10:51:eb:7a:08:
44:22:b1:e2:2e:c0:d9:23:50:11:22:2c:8b:97:0b:75:c5:7b:
d6:49:f7:e7:71:2d:d0:99:58:90:2c:06:6a:a5:21:fe:13:81:
8c:e3:9f:d4:08:d4:79:15:36:17:70:d6:e1:01:f6:0e:6b:60:
e8:46:0c:c6:ca:89:1c:8d:78:e6:98:68:7c:52:e1:73:50:1e:
bd:1c:82:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1
Njc5NjYwNTMwHhcNMjYwNzI3MDQzNjE0WhcNMjYwODAzMDQzNjE0WjAYMRYwFAYD
VQQDEw02YTY2ZTAzZi1kMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAywfDBOeHhEzqSlz5SYMHef9DTfjwgqpAy8LzOJ3t2qxafdYvjWpBCno2VlaF
JDgOPKwoChatT1eYzJmeU16VGTpcwOnvRLwqDSB4UO49jjt8GxqwUIfbAvGOBnLa
x9h9ZXCWgo6yt8VVwNyoAO19n0LIGE3CnMRmxLau9N8Td3DRItn0fNEiJwg5s04S
TqXpzAXIuTflfRU9nP7WRAfnfqV9cEhkwY7+2ebXmI6Ll66BYX8JAcC96lbLhboC
NYzB9oha53cug4Gbp2iXGHhRPJpYUPZ0l1FrgICbX6U92XuqqKWDGhBauneU1A0I
YVttoSvdbcBf4B/y9yhrtA83OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNBh1PT
Nk8P2Svq9PCzC+/1GUaHMB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5
OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq
WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMxyeo7E59qaf6SbpXLPRhsJEUVH/h0LaocNe/I4eXzK4b+k/scVIVYX8iOcP
AKSiDwxU8c6EzNsuEJlagCkguREIyhxrR1IQIF/ZVgmGDxNyh2Rl+7ap3cBRoqhm
pnXMr8uHHpxbxCIBs0brIg6ILhcF674ZRXzgfsJdOxLF7v3QZteSmeTLFVPXv3XL
Wuaum+MsGMzj4rKJkNL1Pji4TrLx1YffKETtOtXOn3aedBBR63oIRCKx4i7A2SNQ
ESIsi5cLdcV71kn353Et0JlYkCwGaqUh/hOBjOOf1AjUeRU2F3DW4QH2Dmtg6EYM
xsqJHI145phofFLhc1AevRyCsw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:50 2026 by rpki-client