
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
File: _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json)
Hash identifier: I2uvJWR4s5n337qXQOps5xPbIA9L3wwIJcOx3F6sjdc=
Subject key identifier: AF:1D:AF:F3:E8:6E:19:7C:7F:6A:22:D0:2E:07:34:BF:2F:91:83:E4
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial: 0804
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
Manifest number: 07FB
Signing time: Sun 26 Jul 2026 21:56:53 +0000
Manifest this update: Sun 26 Jul 2026 21:56:53 +0000
Manifest next update: Sun 02 Aug 2026 21:56:53 +0000
Files and hashes: 1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: dBADtwkRdVeIxaf2wnwy3B1KPjXZJ95rjEy7EH/3G/8=)
2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: TnSaLf+xgZHXFIsS72cUr6qVZqPyupzxKL+9myIDylQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Validity
Not Before: Jul 26 21:56:53 2026 GMT
Not After : Aug 2 21:56:53 2026 GMT
Subject: CN=6a6682a5-e3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:25:69:99:8d:f6:90:55:50:e9:ed:67:2c:
2f:4e:b6:6c:35:58:36:71:dd:10:26:8e:b4:1f:28:
8c:87:69:76:f5:64:01:e7:d4:88:47:9c:eb:6a:e9:
16:91:37:14:15:33:e8:20:bd:86:e0:46:29:02:78:
2a:bf:61:8c:d7:48:b1:9e:3f:dc:61:18:c5:46:c1:
2e:a4:49:c3:38:cf:4b:e8:04:86:85:f1:f5:fd:26:
6f:ca:8c:88:e7:ca:4c:1c:e0:8b:99:3a:56:24:6d:
cc:db:5d:bc:64:24:f2:f5:2c:31:3c:0a:b2:85:94:
30:37:bc:4b:75:2a:f1:5d:c1:aa:4e:fc:dc:61:1f:
5d:30:20:43:4c:c8:36:31:d0:dc:27:dc:5f:8e:45:
71:b7:8d:d8:cf:7f:31:a7:16:04:94:55:d2:08:8a:
06:45:04:0e:cf:c5:b7:8f:39:dc:34:f0:e1:85:2a:
44:b3:ed:ed:86:03:6e:56:56:f1:bc:34:d9:1c:49:
80:8c:82:96:df:bc:83:b8:5f:b9:52:f3:07:0a:6b:
0f:10:9f:25:e3:19:eb:81:bb:d5:41:f5:50:2b:bd:
4d:8f:cf:09:22:4b:cd:73:d0:e2:b3:98:12:8a:6a:
9e:30:ad:b8:4c:28:16:21:20:b0:c3:ac:52:34:d7:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1D:AF:F3:E8:6E:19:7C:7F:6A:22:D0:2E:07:34:BF:2F:91:83:E4
X509v3 Authority Key Identifier:
keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:71:24:b8:7e:a2:42:b1:dd:6a:39:c7:6a:d5:7b:f0:6b:a3:
c6:6b:c1:a9:59:c7:a6:35:3b:9c:81:63:45:8d:ce:bf:df:0c:
f0:30:ad:45:ef:cc:81:77:45:27:51:7c:5e:18:9c:08:49:38:
4e:3c:db:c5:c5:0a:9b:2c:d1:37:ce:6c:7e:4c:89:38:10:39:
8a:78:1c:da:92:6d:61:ab:51:2d:ae:d2:78:b0:31:af:f2:0f:
77:ee:0f:b4:6b:ee:45:73:79:7f:d5:23:22:48:db:f6:a9:44:
92:78:a1:09:27:1f:82:a3:5d:68:b4:03:01:b9:ad:03:bd:8c:
29:ec:9a:5f:1a:87:5d:df:fa:1d:4e:3d:bd:00:bd:af:5d:b5:
91:4e:20:ea:b4:b7:54:3b:cd:b1:72:6e:81:91:a6:ef:6f:1c:
5d:f7:dd:fe:88:97:37:f2:38:fd:43:27:23:85:b3:55:9e:66:
d4:86:12:5c:8d:69:8a:57:a9:12:09:c2:45:27:a4:26:c9:a1:
98:97:f7:b7:0e:b1:a5:72:73:e2:94:6c:3a:aa:df:4c:5c:cf:
1d:ed:ce:99:f7:2d:ec:7b:5e:79:01:41:f8:89:ca:d2:28:d9:
02:b9:1f:ce:2b:29:62:34:08:1c:6a:4e:c8:ec:5e:58:a0:d9:
34:0d:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:45:00 2026 by rpki-client