
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json)
Hash identifier: Uf4ntyhWr/AeciHwNK9uwGYDAbOrSbuA99M3rycfZrk=
Subject key identifier: BE:7E:73:70:D9:8C:24:97:F3:29:21:25:EF:90:53:EC:8F:44:2C:9B
Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Certificate serial: 0D0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
Manifest number: 0CD5
Signing time: Tue 28 Jul 2026 18:43:51 +0000
Manifest this update: Tue 28 Jul 2026 18:43:50 +0000
Manifest next update: Tue 04 Aug 2026 18:43:50 +0000
Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: s61HDhRARWlZSHlmasyFxrQbzUcGBoE7t3oVYNGTYNY=)
2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: Pa3ot+5z5ol95lA2w+Jvw6Gsu2PMGQdkC+e3HT9MeD8=)
3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 5CBCbCNQtmal7jhPIzguEfXdAdwnlI8iW5BfKYZoqfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Validity
Not Before: Jul 28 18:43:50 2026 GMT
Not After : Aug 4 18:43:50 2026 GMT
Subject: CN=6a68f866-93bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:ba:fe:d5:71:56:b3:21:ad:13:88:ff:72:
ea:30:9c:f8:e3:e6:5e:97:e9:84:99:c0:f0:af:37:
24:2c:38:1a:99:10:60:de:4f:35:9e:85:65:14:ab:
14:e3:55:c9:86:16:6c:af:c3:a7:e8:51:12:b7:01:
23:82:e5:dc:af:2d:54:d8:c8:3b:86:86:1c:7a:a9:
1b:8f:54:44:47:2c:eb:3d:c7:1f:97:35:19:88:48:
11:f6:6b:43:d8:f0:6c:ba:de:3b:f9:91:9d:99:3b:
81:9c:32:22:ba:4b:a3:db:d4:dd:25:f4:18:2e:28:
e5:86:66:29:26:d5:43:f4:77:50:08:b7:83:12:51:
6f:24:74:9a:06:ed:db:4a:69:d4:33:32:d4:e8:18:
4d:12:15:69:fb:8e:c6:65:ca:e1:a2:8e:99:10:7e:
4d:0e:c2:29:2f:67:e2:3c:01:21:e8:51:d2:4a:e1:
b1:d4:6a:1b:ad:a6:e5:6f:f0:5e:f8:17:c0:49:fd:
27:f7:2a:41:e8:ef:92:f7:1e:03:b7:04:72:b6:2d:
6f:96:60:72:f7:62:9e:6c:ab:e3:70:e2:aa:18:7a:
f5:68:ba:a3:a4:54:4f:c5:69:ac:24:e7:4c:e9:9c:
b7:a3:44:27:03:db:a1:3d:04:92:04:e2:57:d9:62:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7E:73:70:D9:8C:24:97:F3:29:21:25:EF:90:53:EC:8F:44:2C:9B
X509v3 Authority Key Identifier:
keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1d:c4:16:66:53:01:5d:06:9e:22:23:78:4b:74:11:cc:e7:
3a:9d:57:a1:75:f7:13:6e:6c:3b:e1:8f:4e:71:2d:13:1c:1b:
01:8f:16:5f:4d:90:6c:25:15:3e:b3:d3:9c:7e:dc:d4:af:05:
68:98:42:e1:e3:4f:be:dd:f0:dc:dc:0e:84:a2:ba:7c:ce:66:
0d:56:91:49:b2:94:33:d4:b1:6f:42:d6:9a:88:e5:ac:2a:6c:
6f:8b:b3:27:ff:59:68:a6:42:48:7d:6c:b8:d6:64:87:0a:ea:
38:53:b2:5b:bf:39:55:ba:1e:5b:8e:52:a7:4e:f6:e1:3e:e2:
ae:f9:7c:35:70:48:61:14:64:98:cc:cb:1b:af:52:6b:d2:40:
c3:c1:88:13:66:6a:30:1e:47:43:ee:73:a3:b4:5b:cd:2e:37:
80:20:ca:33:8a:8c:26:c2:8f:56:a9:4a:e2:38:16:73:af:d1:
d4:59:53:fd:ce:60:13:8d:e8:98:23:c2:f4:d7:ba:67:42:42:
ae:08:6a:2f:82:64:92:9e:6f:40:54:13:c5:e9:b4:ea:fb:e1:
7e:c2:a2:cc:ff:5f:1a:3c:ac:c1:f0:e4:3b:b4:e8:d3:27:a2:
58:c5:57:ad:a2:66:27:82:dd:3e:e7:64:4c:5b:40:fe:ec:50:
7d:ab:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:55 2026 by rpki-client