
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier: BMkJ4qtE3UdHcEDdF36ikW5d+SSF0dljdGJKvyKt/d8=
Subject key identifier: 5F:85:13:D2:4E:72:4F:0C:98:ED:CE:3C:F7:6D:3F:A1:2D:E5:3D:D9
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number: 3561
Signing time: Tue 28 Jul 2026 15:19:16 +0000
Manifest this update: Tue 28 Jul 2026 15:19:15 +0000
Manifest next update: Tue 04 Aug 2026 15:19:15 +0000
Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: ionuO9XFYan7OypjZXapg+4IFyJADCfCwWrXEsB2Bd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Validity
Not Before: Jul 28 15:19:15 2026 GMT
Not After : Aug 4 15:19:15 2026 GMT
Subject: CN=6a68c874-3b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:99:a9:95:84:41:d6:74:b3:34:1d:b8:69:
89:a1:72:5a:50:c0:bc:0c:4c:b6:87:f6:26:61:45:
f3:6a:a8:7d:b1:2f:56:84:ba:a7:d6:6c:dc:96:bb:
a2:77:79:0d:3e:2d:e4:7c:60:81:ea:55:cf:da:7c:
3f:c8:28:30:54:6a:b5:e9:62:a6:ad:f9:86:78:e5:
8f:55:7b:ad:a8:7f:8b:35:8e:64:a5:7d:1b:2d:36:
22:88:24:d0:8f:5e:3b:d8:58:a6:d0:1e:e2:f9:f3:
e3:b5:0a:9c:3f:90:22:1a:4d:03:54:3b:30:97:1d:
fa:ac:d3:96:ef:7e:3f:01:72:00:2b:93:f6:78:3d:
98:6d:0d:7a:94:3f:73:4c:fe:e4:15:9c:30:35:43:
d3:41:ce:50:47:8b:14:ca:b1:49:54:2c:21:1c:cf:
9a:76:e3:4b:49:3a:90:1d:97:65:06:ff:2a:ce:65:
ab:79:49:ea:68:41:c0:7b:d3:38:82:02:76:29:e0:
51:24:80:e6:59:13:d8:30:3e:38:b2:4e:23:74:ca:
c4:69:86:be:b2:68:fe:7c:a3:e8:c1:99:f3:12:62:
e0:16:9d:6d:96:41:92:6c:da:a0:78:98:c0:22:6e:
8b:4d:e8:9b:0f:11:29:36:78:5a:3c:c0:4a:a1:70:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:85:13:D2:4E:72:4F:0C:98:ED:CE:3C:F7:6D:3F:A1:2D:E5:3D:D9
X509v3 Authority Key Identifier:
keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:3c:69:82:f9:36:b1:b7:38:22:cd:cd:b6:97:64:fa:d4:7f:
9d:01:14:fb:f9:e2:b0:15:1d:ca:0d:08:5a:c8:15:21:f9:8b:
09:a4:ff:c9:af:45:aa:c9:fb:ac:c5:06:88:be:16:4a:65:5d:
10:4d:30:ff:b1:27:fd:20:f3:15:44:5e:f9:64:cf:c1:5a:65:
f5:34:52:65:20:77:eb:96:cc:9d:3f:e0:0c:3a:33:9c:8e:3a:
11:db:db:ca:93:3b:e6:8f:b0:e0:21:ff:d3:62:97:b2:bd:b3:
e1:0a:96:f4:2d:0f:55:db:79:55:f4:63:b1:71:da:28:22:bc:
2f:bf:7b:16:24:00:fb:3a:dc:67:a0:cb:c8:e7:b5:c3:11:8d:
3d:11:d0:bc:c3:a1:28:d5:53:6b:b1:13:8a:70:65:e0:fa:d9:
2b:08:5b:08:3c:b7:0d:3f:33:0b:8b:bb:3a:33:91:3c:20:07:
36:2a:62:bc:02:68:a5:58:30:de:40:b4:ea:a9:cc:0e:07:80:
79:c9:4a:4d:5e:5f:30:d5:e7:35:25:53:f5:2e:fe:7e:67:92:
e1:08:c7:ee:41:4e:e7:2d:c6:f0:ce:9c:0a:46:0b:cf:26:01:
1d:ad:59:d9:f5:0a:01:c3:1c:db:84:55:ae:65:6d:44:9c:d8:
93:50:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:57:16 2026 by rpki-client