
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: b0/eyTsRWmnu7GNJzfjfSaaz1i72DJRH0SnjGMj4f2A=
Subject key identifier: 9D:C9:1F:9E:4D:52:43:F3:86:C3:AE:86:06:10:B1:6D:7F:25:62:13
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 06BA
Signing time: Tue 28 Jul 2026 23:00:07 +0000
Manifest this update: Tue 28 Jul 2026 23:00:07 +0000
Manifest next update: Tue 04 Aug 2026 23:00:07 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: vt5c6MAVRucG+3zM/uYIfDNnaePJoO6wXECBBdyqQ+k=)
2: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: vBCGm7MlYdNXXeaoLUD2KJwJGSuIu+kSne2oG2vKSsU=)
3: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: iKG0U4dWo4Ii/ph+5g5SKDA8RO4TnmSAWL9RH3BX7Bo=)
4: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: gkPTMzL29fjMeAxqDDyIKfb4bjNAUoeuE5oKyKWBCYo=)
5: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: 5CQDa/aa5UAIsTkpec0rYhloDDXKxfbpTB7+YpevLrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Jul 28 23:00:07 2026 GMT
Not After : Aug 4 23:00:07 2026 GMT
Subject: CN=6a693477-0f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:8a:bf:41:a7:94:6e:83:78:9e:ca:b5:99:
e0:e1:e7:7e:c4:47:50:63:19:17:2f:18:b1:4c:71:
a1:e4:ee:5e:f4:4d:9a:36:94:dc:f9:f6:88:10:3e:
0a:b7:9a:47:41:9c:ce:09:d4:ef:37:11:32:48:b2:
fa:c2:77:72:91:88:08:4a:5c:03:07:b4:39:7b:68:
08:ab:4f:af:75:f7:5a:b2:ee:ac:3e:e7:bc:5c:6e:
5d:e1:27:60:0c:bd:00:07:a3:75:7d:f5:69:86:37:
5e:83:c8:90:c4:0e:4a:02:2a:a0:a5:23:1f:b4:94:
68:f3:d2:98:d7:aa:86:f4:69:24:64:94:2b:1b:70:
47:7b:5c:f7:6e:d0:12:92:8e:fc:fb:ce:ab:a1:c8:
a4:1c:a0:7e:cf:6b:99:d4:66:04:57:48:9c:2f:58:
36:27:08:b5:42:ee:c9:a0:cc:87:32:f8:2e:15:3e:
38:4a:ee:8c:8e:cf:00:40:9d:8b:db:0e:a7:3a:1e:
db:7a:e9:6e:f5:14:0e:49:90:30:e8:8d:24:7e:0f:
7e:d0:26:12:36:c0:7b:ae:6e:3f:77:49:fb:7a:4a:
ec:42:09:e1:9f:53:2c:f4:79:4b:52:cb:b8:85:72:
b1:ea:af:a8:5a:19:4e:17:87:0c:b1:80:df:37:75:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:1F:9E:4D:52:43:F3:86:C3:AE:86:06:10:B1:6D:7F:25:62:13
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:66:1e:ac:0c:a9:d8:41:8c:63:7d:e1:38:0d:28:73:ff:28:
fa:48:8a:b7:6c:2e:86:cb:50:e9:e5:1c:bf:13:36:81:66:3e:
fc:94:0d:5e:95:8e:0c:65:71:ee:81:42:3b:c9:15:ad:52:30:
66:49:da:b0:36:3d:90:69:b5:79:c9:de:eb:c5:56:11:a8:95:
01:57:31:5b:7c:78:55:67:d4:27:5e:67:95:6c:b5:c7:89:7d:
63:02:e4:b2:21:cc:09:86:d2:e2:40:f4:bf:08:88:29:92:f5:
e1:6c:b3:5a:67:3d:75:cc:25:3b:d6:62:6d:9f:c5:92:0c:08:
97:b0:61:51:59:fe:e2:c1:8e:e2:b5:0e:4c:9f:91:60:d2:17:
29:24:0f:60:52:ba:71:dc:93:59:8d:58:68:e4:70:31:d3:42:
bd:b3:12:5d:ea:54:32:51:36:47:4c:d9:0e:b7:4c:8b:53:cd:
d4:95:80:bc:4b:65:08:07:d8:ff:fb:fe:b4:50:7a:54:0b:0e:
c0:6c:d0:c1:2d:2c:dc:cd:5e:8d:c4:1e:19:df:c3:44:ae:62:
a5:ad:8d:75:2d:4a:52:df:58:fe:14:19:34:46:51:2c:e6:7c:
24:5b:b7:d2:a8:7c:32:a5:24:3d:ac:c3:ff:57:0b:7e:78:82:
06:23:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:02:11 2026 by rpki-client