
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier: XDrnPlqfvYBbqPgGpqdZgmGvZA3TfZRQ/iBeK2WOPcc=
Subject key identifier: CC:1C:F8:D6:B0:34:99:AF:C3:31:7F:E4:99:54:C7:A2:34:CD:94:60
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial: 1C7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number: 1C5E
Signing time: Tue 28 Jul 2026 16:17:48 +0000
Manifest this update: Tue 28 Jul 2026 16:17:47 +0000
Manifest next update: Tue 04 Aug 2026 16:17:47 +0000
Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: JAk/+5m4U/lGoA91LqCbaSISjOiCKgkR1UV0O9Xp40o=)
2: EB6B3FFA86EF11F19E006003A7EE528E.roa (hash: DAeAFcyF/YNOKPuEFYrJ40g8SH0qo3OoC9C6ggkgmKQ=)
3: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7292 (0x1c7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
Validity
Not Before: Jul 28 16:17:47 2026 GMT
Not After : Aug 4 16:17:47 2026 GMT
Subject: CN=6a68d62b-4e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:38:61:59:fc:a1:4e:9b:3e:fa:df:ff:88:
e3:85:e6:0f:70:86:a2:08:96:90:be:4b:cc:b7:f7:
ed:70:88:81:9e:53:9d:36:45:f7:5f:7a:65:57:5e:
b2:0a:1a:95:78:e7:9e:cf:a8:af:b5:a2:68:40:c2:
cc:10:61:80:9b:73:41:01:ac:4c:2d:60:4f:15:c9:
d3:54:c7:a8:e0:09:da:c3:b1:cc:c1:3c:a6:7b:1f:
a4:9b:b1:29:9a:b8:72:9f:6d:ba:f5:b6:08:da:da:
17:16:90:67:78:e2:ce:62:a4:2a:8f:60:41:6a:8d:
6a:7c:cf:66:37:38:4b:06:2d:f1:0e:d9:40:a6:a3:
07:d1:f2:7b:6b:95:be:dd:14:ca:a2:34:4c:27:fa:
47:f8:24:56:3f:67:f9:38:30:50:47:a9:74:71:37:
b2:cf:4f:3f:19:2c:ee:3c:ca:2f:d5:40:4e:19:57:
8d:65:14:bc:7c:b5:bd:71:0a:f3:ac:e9:b8:36:72:
f7:9a:80:56:15:2e:3b:a4:76:d1:03:c9:87:c7:99:
96:0b:63:cc:95:6c:4f:f1:27:5d:9c:00:63:d6:f6:
e3:93:da:03:98:4f:d3:32:fd:5d:98:63:ff:48:34:
49:1d:9f:57:e5:11:53:ab:2d:68:e7:10:14:43:84:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:F8:D6:B0:34:99:AF:C3:31:7F:E4:99:54:C7:A2:34:CD:94:60
X509v3 Authority Key Identifier:
keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:9f:e4:2b:43:e1:4a:4d:cd:b1:85:59:9d:27:d5:a6:ee:2a:
59:51:8d:42:aa:c5:27:fa:8b:4d:e9:43:9f:55:12:97:f2:eb:
3b:de:43:f0:b6:a9:0e:2f:c6:39:67:44:e1:4e:57:6e:b0:c0:
ae:70:e4:46:99:48:0b:76:a2:bc:19:e8:8c:65:b0:88:23:a0:
07:3a:dc:72:67:90:fb:c3:0e:03:32:1d:ba:94:dc:71:4c:db:
5e:94:52:ca:67:34:c5:66:88:83:24:86:4e:82:bf:90:e2:87:
5b:d0:69:be:78:a3:b2:ad:3f:29:7e:50:7f:06:a1:33:65:15:
7e:9c:40:e6:8d:6f:60:03:9f:e2:08:d4:2b:52:d9:b4:20:de:
83:43:b1:94:7e:b5:2d:a3:c9:32:e6:c1:da:4f:d7:ee:82:8b:
10:64:fb:6a:ac:a7:93:7f:16:38:49:87:70:7a:fc:8e:37:b6:
6e:e4:f4:1d:cd:52:dd:de:6b:f6:f2:2a:00:30:5e:23:8e:b7:
c7:95:be:16:d6:d1:ca:d2:22:15:94:a3:c9:a0:dd:e2:4e:68:
bc:9a:8a:17:b6:15:3f:5f:b6:5c:e7:0e:bd:cd:1d:4d:41:3a:
85:53:a7:bc:bf:c5:8c:50:27:96:d2:12:bd:2c:90:4c:2e:96:
f7:4c:0d:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3
OUQzMDUyMzQwHhcNMjYwNzI4MTYxNzQ3WhcNMjYwODA0MTYxNzQ3WjAYMRYwFAYD
VQQDEw02YTY4ZDYyYi00ZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvu44YVn8oU6bPvrf/4jjheYPcIaiCJaQvkvMt/ftcIiBnlOdNkX3X3plV16y
ChqVeOeez6ivtaJoQMLMEGGAm3NBAaxMLWBPFcnTVMeo4Anaw7HMwTymex+km7Ep
mrhyn2269bYI2toXFpBneOLOYqQqj2BBao1qfM9mNzhLBi3xDtlApqMH0fJ7a5W+
3RTKojRMJ/pH+CRWP2f5ODBQR6l0cTeyz08/GSzuPMov1UBOGVeNZRS8fLW9cQrz
rOm4NnL3moBWFS47pHbRA8mHx5mWC2PMlWxP8SddnABj1vbjk9oDmE/TMv1dmGP/
SDRJHZ9X5RFTqy1o5xAUQ4QBuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwc+Naw
NJmvwzF/5JlUx6I0zZRgMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5
ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX
ckZQRU03bGxoRzk1MHdValEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE5/kK0PhSk3NsYVZnSfVpu4qWVGNQqrFJ/qLTelDn1USl/LrO95D8LapDi/G
OWdE4U5XbrDArnDkRplIC3aivBnojGWwiCOgBzrccmeQ+8MOAzIdupTccUzbXpRS
ymc0xWaIgySGToK/kOKHW9Bpvnijsq0/KX5QfwahM2UVfpxA5o1vYAOf4gjUK1LZ
tCDeg0OxlH61LaPJMubB2k/X7oKLEGT7aqynk38WOEmHcHr8jje2buT0Hc1S3d5r
9vIqADBeI463x5W+FtbRytIiFZSjyaDd4k5ovJqKF7YVP1+2XOcOvc0dTUE6hVOn
vL/FjFAnltISvSyQTC6W90wNrQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:17 2026 by rpki-client