
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
File: qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft (raw, json)
Hash identifier: XTmbuJ5xBOJZJMWlC9qE7F22Y+4daUsyx/r6SbjJGjk=
Subject key identifier: A0:CB:63:1D:D3:38:86:C9:33:8B:E0:CD:04:98:8E:F8:DF:BB:5B:40
Authority key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
Certificate issuer: /CN=A91B8833/serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 08:42:28 +0000
Manifest this update: Sat 13 Jun 2026 08:42:27 +0000
Manifest next update: Sat 20 Jun 2026 08:42:27 +0000
Files and hashes: 1: qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl (hash: 8lrVI9sP/KyMag6bDNlDb52predHFO6g9QMexk66nVg=)
2: ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa (hash: 1VgHobz4nzrs5NBqb89qRpxnur9wCmTVYrTP5UDXUqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Validity
Not Before: Jun 13 08:42:27 2026 GMT
Not After : Jun 20 08:42:27 2026 GMT
Subject: CN=6a2d17f4-3c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:f5:78:de:83:4a:51:61:47:0f:c6:a8:e5:
ef:4f:5a:f5:df:29:31:96:51:5b:30:dc:05:1d:e1:
b8:6d:4f:1f:4f:81:83:5a:9f:99:52:a1:67:de:17:
72:27:e7:19:81:66:ca:20:4e:bd:ce:32:ae:03:58:
8e:7a:0a:18:86:71:20:f3:d2:7a:fd:b4:44:22:40:
e4:0b:e7:6d:6b:84:ad:87:67:d6:da:38:8f:f2:30:
9b:07:93:68:51:bd:c7:2c:d5:ce:2a:97:5f:77:57:
69:60:05:61:fa:35:3b:a0:1d:be:ae:b0:a1:6f:66:
31:c7:6e:22:02:45:43:18:ba:db:98:9f:0d:fe:bb:
17:e9:79:59:bb:94:ba:ab:92:d9:c8:d9:78:bc:20:
d8:35:34:d0:bd:9d:a0:b9:53:67:79:93:4b:42:4a:
cb:2b:36:af:ad:a0:ac:da:96:a6:38:9d:dd:8f:fd:
6e:82:01:dd:92:9c:ec:4f:73:c3:3a:c4:51:30:b7:
19:65:1d:46:df:90:8d:a7:1a:fc:19:8f:e2:52:99:
92:24:83:71:9a:2a:8f:3b:3f:db:0c:89:07:ad:5c:
02:06:67:31:69:a7:95:cc:40:e2:be:a1:33:39:91:
a9:4b:21:48:24:d2:e5:15:3d:89:7a:81:ff:61:59:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CB:63:1D:D3:38:86:C9:33:8B:E0:CD:04:98:8E:F8:DF:BB:5B:40
X509v3 Authority Key Identifier:
keyid:A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:19:4b:a1:c9:b5:ff:b2:af:b8:56:2c:ba:d5:61:7a:d0:ad:
a3:97:e9:50:ba:22:92:72:83:0c:6c:f7:98:cc:9c:06:e7:20:
88:2a:6f:cd:2e:69:0e:06:69:69:9b:0f:ef:e5:b2:52:65:c8:
33:2f:30:14:05:32:d5:a1:46:6e:a9:37:e8:c8:36:51:70:38:
3d:7a:6d:81:71:e2:76:4f:60:26:17:a6:88:7d:e1:ff:f3:ce:
a5:36:63:8a:41:ed:62:fa:f5:2a:73:da:7b:d8:a1:b6:bb:2a:
23:6f:55:b2:2e:bb:42:43:13:f2:ed:35:97:6a:06:7d:c5:c3:
30:e9:6c:ac:7a:c2:d0:6b:1a:2c:59:7e:9a:fe:75:66:92:ae:
86:64:87:bc:c4:a7:c2:fa:37:8a:f3:08:98:2b:b5:9d:23:6f:
b1:91:6c:7e:40:36:53:67:44:83:5b:22:44:ce:f8:db:16:1f:
0d:13:21:1f:ba:cd:15:2e:f9:88:bf:9f:54:2f:d6:e7:98:4d:
2d:4a:ee:c5:38:42:e3:ff:dd:8e:95:fb:5f:47:83:92:47:08:
7b:0d:7f:c2:31:80:63:ba:22:b6:4b:87:cc:5b:07:8d:0e:6a:
61:3f:ae:9f:b3:db:03:1c:4b:0b:18:eb:93:f2:ff:30:ec:fc:
8d:df:69:a1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODgzMzExMC8GA1UEBRMoQTg0QkQ5REQwNzVDMjBBNDdCQzExMDhBOTM0RDg2MDg3
QjU5ODZDNzAeFw0yNjA2MTMwODQyMjdaFw0yNjA2MjAwODQyMjdaMBgxFjAUBgNV
BAMTDTZhMmQxN2Y0LTNjNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpOfV43oNKUWFHD8ao5e9PWvXfKTGWUVsw3AUd4bhtTx9PgYNan5lSoWfeF3In
5xmBZsogTr3OMq4DWI56ChiGcSDz0nr9tEQiQOQL521rhK2HZ9baOI/yMJsHk2hR
vccs1c4ql193V2lgBWH6NTugHb6usKFvZjHHbiICRUMYutuYnw3+uxfpeVm7lLqr
ktnI2Xi8INg1NNC9naC5U2d5k0tCSssrNq+toKzalqY4nd2P/W6CAd2SnOxPc8M6
xFEwtxllHUbfkI2nGvwZj+JSmZIkg3GaKo87P9sMiQetXAIGZzFpp5XMQOK+oTM5
kalLIUgk0uUVPYl6gf9hWUAxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoMtjHdM4
hskzi+DNBJiO+N+7W0AwHwYDVR0jBBgwFoAUqEvZ3QdcIKR7wRCKk02GCHtZhscw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODMzL0Q5NDQzNjlFMUFC
RTExRjFCNjlFQzE0MDM2M0Q4QzY3L3FFdlozUWRjSUtSN3dSQ0trMDJHQ0h0Wmhz
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcUV2WjNRZGNJS1I3d1JDS2swMkdDSHRaaHNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
ODMzL0Q5NDQzNjlFMUFCRTExRjFCNjlFQzE0MDM2M0Q4QzY3L3FFdlozUWRjSUtS
N3dSQ0trMDJHQ0h0WmhzYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAAGUuhybX/sq+4Viy61WF60K2jl+lQuiKScoMMbPeYzJwG5yCIKm/NLmkOBmlp
mw/v5bJSZcgzLzAUBTLVoUZuqTfoyDZRcDg9em2BceJ2T2AmF6aIfeH/886lNmOK
Qe1i+vUqc9p72KG2uyojb1WyLrtCQxPy7TWXagZ9xcMw6WysesLQaxosWX6a/nVm
kq6GZIe8xKfC+jeK8wiYK7WdI2+xkWx+QDZTZ0SDWyJEzvjbFh8NEyEfus0VLvmI
v59UL9bnmE0tSu7FOELj/92OlftfR4OSRwh7DX/CMYBjuiK2S4fMWweNDmphP66f
s9sDHEsLGOuT8v8w7PyN32mh
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:22:15 2026 by rpki-client