
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
File: QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json)
Hash identifier: GkwAEYFdny9hhv78dSg6oNX5mu9rTMA8tTNZt3F+Z3I=
Subject key identifier: 11:45:07:6E:DD:FC:D3:4A:35:91:1B:5E:A9:42:AB:35:0D:65:B1:68
Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED
Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
Manifest number: 66
Signing time: Mon 27 Jul 2026 10:18:10 +0000
Manifest this update: Mon 27 Jul 2026 10:18:09 +0000
Manifest next update: Mon 03 Aug 2026 10:18:09 +0000
Files and hashes: 1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: E5Eed6AQWxp45gzSTz8eUMlzaPGhxfO12uIMLQ7xruM=)
2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl
rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED
Validity
Not Before: Jul 27 10:18:09 2026 GMT
Not After : Aug 3 10:18:09 2026 GMT
Subject: CN=6a673062-f02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:17:21:9f:aa:b3:56:a2:95:6d:92:ca:ec:
78:e2:42:98:13:6b:b5:02:df:91:61:ef:4e:15:da:
c4:f3:2d:6a:22:2f:a2:3b:8b:14:58:6e:36:58:64:
52:c6:c6:d9:45:ce:c2:2a:07:28:76:4a:05:93:f0:
09:49:8c:32:01:bf:fc:17:0c:b5:86:21:87:d7:77:
3d:94:a5:ff:b7:f2:33:40:2b:46:55:76:cd:e7:89:
2e:e3:68:43:d2:8d:93:8c:8c:96:06:d6:65:ca:d6:
87:da:08:30:20:6c:16:83:9b:2c:58:92:b6:f6:e0:
97:0b:2c:eb:1b:da:b6:32:79:31:55:3e:f4:27:27:
61:6b:b2:53:9a:75:eb:3d:e1:5f:0e:52:cb:ec:20:
73:f0:61:99:10:53:6e:6d:ee:e1:3f:f4:0e:50:b2:
8f:ef:d2:10:66:4a:12:8f:45:d5:be:8b:38:b8:61:
0f:aa:ed:fd:c5:d4:e6:a3:25:f9:a8:e5:91:d9:52:
d6:0b:6e:15:ae:2d:57:7c:da:26:bd:5a:79:7a:2f:
f5:fd:ae:72:35:0b:d8:f9:e0:c4:8b:a7:fb:f3:21:
38:79:aa:2c:29:b6:f5:37:db:c8:85:09:86:16:e6:
f7:49:cd:bb:0e:6b:b5:6f:1d:05:c6:09:98:c2:ce:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:07:6E:DD:FC:D3:4A:35:91:1B:5E:A9:42:AB:35:0D:65:B1:68
X509v3 Authority Key Identifier:
keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:aa:de:95:85:81:e4:ab:16:50:87:5a:7a:fa:66:2b:3a:a3:
31:5e:48:77:1b:8d:b0:8c:ae:90:5e:09:c5:db:06:13:32:58:
4e:b5:a7:57:81:06:31:bd:b6:0d:b0:37:84:b9:7b:1e:e5:0c:
a1:26:65:d3:69:a2:5d:94:20:a0:78:9d:e3:4f:81:dd:20:22:
12:33:a1:5f:fd:6d:fe:cc:a0:f2:df:29:22:aa:ce:ff:36:9c:
3d:a8:ac:af:41:fc:74:ba:4b:d9:5d:6c:f7:10:43:c4:47:b7:
1e:41:c3:3e:96:6a:b6:83:6c:fc:3c:04:e2:1b:3e:a4:45:68:
f3:05:c2:a2:2f:52:02:4a:10:2c:a7:a7:28:f7:d3:49:63:56:
02:d2:61:a4:be:78:15:ba:37:1d:71:86:5c:50:04:90:e5:37:
80:6e:5d:cf:16:40:a0:6a:2f:6b:5a:1a:ab:d8:bb:5f:71:0c:
66:19:82:a2:db:09:c3:d4:27:8f:34:54:a9:c2:19:83:80:fe:
94:01:27:22:46:f2:68:2a:f0:e4:c3:ff:a2:f2:3f:f5:12:ed:
00:1a:e2:15:bc:9e:bd:eb:f5:9c:ce:c2:1f:a9:0e:ba:2c:e0:
d7:d9:66:1a:2b:05:98:48:65:b8:f5:15:7b:c5:e4:98:30:8d:
c2:44:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:13 2026 by rpki-client