
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier: LQtR3b3e4yU/tGVAzdBqFkMzA8vu4gj8hyRceOBkawI=
Subject key identifier: E8:EB:7D:03:FE:13:C4:2A:CE:95:F6:90:9A:F7:37:55:BB:5A:3B:1A
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial: 04A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number: 049A
Signing time: Wed 29 Jul 2026 00:42:11 +0000
Manifest this update: Wed 29 Jul 2026 00:42:10 +0000
Manifest next update: Wed 05 Aug 2026 00:42:10 +0000
Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: SgNr4fcSxaN/DNILx0UHbLFqQTIofzrb6HnSSmhNqBE=)
2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Validity
Not Before: Jul 29 00:42:10 2026 GMT
Not After : Aug 5 00:42:10 2026 GMT
Subject: CN=6a694c62-4c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:b0:67:c6:da:86:89:ac:f4:92:2f:cf:41:
f2:37:25:f6:0a:3c:57:b1:76:47:95:b6:f9:34:72:
65:7a:c1:f1:b0:74:55:03:c5:fd:38:92:fd:1d:ff:
3d:c9:49:8f:df:cb:7f:3e:43:11:f2:0c:56:64:f4:
08:66:f5:21:b7:c9:f3:7a:a3:7f:7a:09:ec:9e:be:
1e:54:0b:5a:2f:a2:22:24:2d:fe:bf:5f:d6:6b:8e:
a0:70:0c:7f:d3:47:db:65:a3:bf:54:b0:9e:0b:54:
99:2c:49:81:9a:f6:21:7c:d7:29:4a:43:5b:ae:ad:
c8:b8:c4:57:44:9a:c7:50:92:06:f0:0b:62:8c:5c:
3f:6d:04:b9:b8:93:2b:e5:f4:4f:3f:3d:c2:09:27:
e8:4e:9c:84:b8:f8:ab:b7:fa:79:13:9d:65:be:0d:
29:e2:f5:6a:56:79:4f:cb:57:4f:b2:b8:27:dc:98:
07:76:1a:0d:db:ff:4c:d8:4f:0b:a7:4c:c9:cf:84:
d4:62:ed:1d:d7:6c:a6:a8:d0:ab:71:22:55:23:78:
80:27:04:2a:b5:2c:d0:f7:33:b5:95:67:e5:73:2c:
b1:75:3f:56:89:44:c5:2c:ca:33:3b:8c:85:c7:2f:
83:0b:1d:86:fb:38:8a:63:a8:ed:7e:b5:b0:b6:14:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:7D:03:FE:13:C4:2A:CE:95:F6:90:9A:F7:37:55:BB:5A:3B:1A
X509v3 Authority Key Identifier:
keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:36:b8:56:9c:32:1a:bd:f9:dd:58:40:60:14:5b:da:0f:ec:
73:76:2e:4e:9c:bd:ca:e7:29:74:53:b3:e5:8d:ab:62:ba:23:
d5:9e:e1:cf:da:cf:da:26:d9:7a:ac:7f:c9:49:6f:72:cf:a7:
34:86:7b:b3:e2:45:ec:a7:0f:91:c6:1c:2e:ec:f5:b5:15:58:
9c:bb:95:03:23:6f:1d:d6:89:c1:29:64:57:e0:6f:2d:27:38:
04:24:bf:6c:b1:1e:e0:35:46:dc:1e:dd:73:4d:7e:5f:1d:e8:
63:e9:f6:b9:5d:7e:21:c7:43:0a:eb:5a:94:e4:d2:c7:d1:b8:
d9:9b:fb:1f:16:c0:73:ae:90:f8:ac:b1:67:ef:ba:cd:00:7d:
3b:25:44:4b:2d:af:75:ec:a8:38:1b:eb:48:91:ff:66:70:74:
9b:0a:e8:76:a6:a2:71:0f:f9:09:3c:2f:5d:d3:28:e5:59:6c:
1e:07:c3:ac:75:f7:3e:86:e8:83:77:8f:70:83:08:39:75:01:
81:90:d9:26:a4:0e:5f:76:3a:f2:50:98:2e:7e:b9:de:ba:1d:
39:ff:dd:86:36:d8:1b:f2:9f:a0:4d:ec:82:33:b2:d4:72:2f:
d1:37:d9:f1:60:02:a9:14:6a:44:fc:73:f1:28:50:76:43:f0:
d9:2a:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:48 2026 by rpki-client