
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier: HIXZPFlcT02fSl9/C8e0UFZHIlhaUYtIT/yZuZuUxm8=
Subject key identifier: 13:06:0C:6E:B0:00:66:8C:BC:0A:0C:3E:47:C7:82:BB:07:E1:91:C4
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial: 08F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number: 08E7
Signing time: Sun 26 Jul 2026 20:55:08 +0000
Manifest this update: Sun 26 Jul 2026 20:55:08 +0000
Manifest next update: Sun 02 Aug 2026 20:55:08 +0000
Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: h8d/iAY5KJ9AvUMm/jEooncTg3IXK/OKhw1J6/0ryEM=)
2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: D61mhla4ZKX7DfgoplRcuCG35MYNou9878EVBT40r2c=)
3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: tUsv3tNoQWMVfE/GiWVi84l0pY9vapkX9vPKn8R6z3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 20:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295 (0x8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Validity
Not Before: Jul 26 20:55:08 2026 GMT
Not After : Aug 2 20:55:08 2026 GMT
Subject: CN=6a66742c-27e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:ae:f6:dc:47:8c:e5:30:a7:22:a4:21:22:
d2:e1:69:7c:2a:92:67:fd:12:73:a9:a9:c9:9e:5c:
c7:d5:02:07:70:28:00:a8:d3:ff:7a:da:2a:22:12:
26:53:a2:e6:50:d5:ad:3f:67:54:22:36:6b:00:8a:
76:8c:47:e4:de:6e:c8:67:10:55:03:84:67:54:cf:
5e:2d:85:44:b1:18:b6:bd:e3:c6:ce:9c:d7:c8:d8:
cb:50:2e:54:00:d3:dc:1f:bd:31:07:2d:25:5f:64:
d9:64:1c:b4:fd:9f:2c:bd:5a:f6:88:39:14:e4:36:
d9:4d:ba:5f:45:8f:42:6b:24:f3:e7:3a:f0:53:22:
f9:0f:af:e5:57:0b:b7:5c:0c:3a:a9:dd:54:68:3d:
0f:af:52:3a:82:0f:fb:08:44:62:d6:8c:d6:79:23:
01:f9:d1:d7:cf:e2:d8:51:f7:f1:3a:84:42:76:8c:
92:4e:44:ee:58:39:2b:4a:73:9b:f5:d1:03:bf:65:
1e:44:df:42:50:e3:23:fe:2d:8c:eb:cf:fc:01:e6:
15:0d:d4:a2:6b:28:a5:52:45:d8:37:bf:38:5a:b3:
5c:2f:39:59:ff:58:a8:ed:ac:81:68:d3:34:ea:8d:
46:67:f1:98:b9:17:c9:45:cc:a8:60:42:b0:1d:db:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:0C:6E:B0:00:66:8C:BC:0A:0C:3E:47:C7:82:BB:07:E1:91:C4
X509v3 Authority Key Identifier:
keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ab:f4:e3:39:3e:3d:c2:2f:40:42:be:d0:03:47:d1:a6:da:
08:a5:83:b0:cd:15:f4:c6:ae:62:35:fd:2f:c8:a4:d8:63:19:
a0:11:7f:dd:96:ad:a7:79:81:4f:8d:38:fa:89:21:7c:85:c4:
32:5e:65:dd:d8:a5:09:99:bf:a0:f1:e4:94:b7:e5:a6:b3:55:
e2:9f:33:7c:73:aa:f8:61:60:81:a6:3e:fc:fb:6d:55:f1:ec:
e9:47:7f:94:ea:17:f1:08:7e:42:98:90:c2:7c:c0:52:a2:d8:
be:d0:11:cc:c6:97:9a:38:ef:cd:69:ea:5b:1a:c9:14:26:1b:
fb:87:ea:e0:5e:4a:75:c4:4b:3e:4c:1a:41:ea:6d:43:f5:48:
94:6f:5b:3b:43:3d:96:99:17:41:1f:3e:de:4d:d1:22:f3:03:
2c:a4:ed:13:e7:d2:54:a0:cf:01:56:4d:2f:81:6b:1b:73:e0:
9d:ae:30:08:30:1f:46:09:52:ce:af:38:b3:9a:8a:61:99:51:
73:35:96:87:e8:e8:fd:1e:51:04:01:9d:49:bd:cd:65:01:e1:
b3:7a:ab:82:3f:19:56:7e:82:6f:a1:c0:52:59:de:fa:93:ec:
d3:99:8f:2b:b3:48:ec:f1:13:3e:a5:14:d1:c3:31:46:96:06:
8d:53:71:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:01 2026 by rpki-client