
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier: LFqwDbGqV/sxHcuwO/p7x7AcgcqIT5PFtXvKunmCzrM=
Subject key identifier: 24:E7:8A:E3:D9:0F:E1:BE:24:A0:DD:70:87:23:11:34:FF:47:34:4B
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number: 0310
Signing time: Mon 27 Jul 2026 02:25:00 +0000
Manifest this update: Mon 27 Jul 2026 02:25:00 +0000
Manifest next update: Mon 03 Aug 2026 02:25:00 +0000
Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: lpsmzYfIkcQ53ZZXNf5fmviF2DqZYHNisHmMVnLF28M=)
2: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=)
3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Validity
Not Before: Jul 27 02:25:00 2026 GMT
Not After : Aug 3 02:25:00 2026 GMT
Subject: CN=6a66c17c-01fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:b9:de:86:ef:53:eb:2d:8e:08:e7:29:45:
45:52:8d:0e:da:8b:e9:34:4e:d9:89:fb:a3:49:82:
ff:13:ab:97:a0:d7:c2:37:89:ed:63:4b:de:56:bb:
e3:78:8d:15:28:95:5b:f8:af:d0:10:94:5b:ef:94:
18:3a:3a:c6:a9:4c:2f:94:ee:2c:27:c7:6e:29:f5:
3a:b2:90:bd:e0:12:5b:f0:95:03:dc:45:f0:9c:bb:
65:f3:df:71:6d:11:59:4a:2b:f6:ff:d4:3c:91:4b:
e6:6e:57:47:df:40:af:8a:42:31:c0:7b:7b:48:ee:
f9:17:3e:ee:6d:6a:2b:be:1a:5f:22:e6:2f:87:76:
a7:14:2b:d7:fc:49:e9:6d:d5:bb:65:36:e9:d0:5b:
53:40:3a:e8:7b:8b:56:ef:ae:92:77:dd:71:9f:21:
a8:41:85:5e:3b:6e:9e:33:d5:77:f7:86:81:71:9e:
cb:dd:3a:8c:e4:d5:c5:d3:ba:a6:9c:fd:f2:8b:cd:
68:00:59:52:77:13:79:cf:cd:bb:ca:9c:b5:b3:99:
21:a1:d7:67:bf:3a:88:56:82:ed:36:e5:d8:7d:ee:
7f:4d:b0:57:0d:1a:49:24:f7:0d:c3:1c:4f:1d:6a:
e0:d1:22:2a:7f:00:04:58:a5:ff:94:a4:5a:ff:ff:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:8A:E3:D9:0F:E1:BE:24:A0:DD:70:87:23:11:34:FF:47:34:4B
X509v3 Authority Key Identifier:
keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:af:71:75:a7:f4:f6:a9:11:8d:20:7d:e6:6c:af:c6:f2:6f:
b4:8d:67:ba:78:89:53:26:6b:20:5b:82:68:03:0d:10:20:69:
22:0a:8a:d9:28:91:41:0a:f1:33:05:3f:85:13:44:58:32:43:
a1:38:6d:1f:e5:9d:e1:e2:82:b0:ba:0a:b8:6f:9f:2d:7f:b8:
63:79:75:a5:48:cf:e2:ea:6c:8f:f7:23:75:69:3d:a1:e3:f4:
b2:4a:44:6b:a6:8e:80:84:9f:b9:30:94:ef:0d:b1:5c:72:46:
45:45:9f:bb:2f:f1:fe:7a:8d:06:e3:4c:f9:7a:7f:94:d8:30:
3f:c1:83:bd:9b:1d:17:25:0c:34:a0:9f:1e:c7:01:dc:60:32:
9f:dc:52:d2:f3:e9:10:f2:ec:ef:13:38:45:ae:9c:13:41:e6:
ed:5a:61:70:39:16:25:42:4e:86:5a:6b:f2:6c:10:68:f5:56:
26:77:8d:34:7e:ba:65:70:98:92:8d:6b:55:49:36:7d:cd:bb:
12:3f:e7:93:99:8b:3c:b1:fd:1e:f3:74:45:b6:7f:2e:b6:75:
49:5a:3b:77:36:ad:01:38:8e:96:18:9d:d7:ae:72:b0:44:2b:
88:f3:1f:c9:58:d9:6c:db:ab:91:e8:0f:f2:f1:f9:bd:b0:c0:
92:8c:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:28:26 2026 by rpki-client