
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json)
Hash identifier: S+UK+58R1iI3JIXC+MTuML3/pYY/orozpzm0gfoAVEk=
Subject key identifier: AD:ED:A4:BA:02:57:F9:81:A1:9C:D9:E5:6B:3D:15:2B:E1:44:26:C1
Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
Manifest number: 013A
Signing time: Mon 27 Jul 2026 07:24:56 +0000
Manifest this update: Mon 27 Jul 2026 07:24:55 +0000
Manifest next update: Mon 03 Aug 2026 07:24:55 +0000
Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: 2jTiOa7eX0inRnMbD8tzXXn1pGrc5w1XToqNA1KTbaw=)
2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: hAmO+Dq9vGZAILDadtbesaeJmrxEB8UrXmpWc1/KCyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl
rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
Validity
Not Before: Jul 27 07:24:55 2026 GMT
Not After : Aug 3 07:24:55 2026 GMT
Subject: CN=6a6707c7-fb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:ca:6d:53:68:fe:cb:7a:a6:4a:94:ad:bf:
9a:8c:37:03:ed:48:d3:47:3a:39:9c:1a:c0:58:b1:
bc:8d:f9:e7:c5:16:e1:79:00:1a:35:06:91:7a:00:
c8:d4:97:d6:6c:fe:c4:4c:58:d3:b5:ed:0e:0e:6c:
59:c0:17:b9:21:d3:17:c5:27:4c:b0:f7:64:4b:60:
d6:e3:67:a4:62:27:2a:35:80:ad:74:5e:07:33:3a:
0d:87:bc:56:61:e7:2e:04:b8:bd:1b:b9:57:cd:f7:
1d:39:1a:d1:15:1b:20:71:ed:6c:4c:2d:b8:eb:41:
d1:c3:b3:72:08:d0:f8:c7:9f:04:f7:9b:69:59:9e:
8b:77:50:ee:eb:ee:37:06:fe:4f:0c:87:69:4a:55:
35:8d:02:74:e1:89:23:85:74:d8:7e:c7:3a:1a:9c:
15:3a:f8:50:89:e3:65:53:67:6a:bf:45:41:a2:9f:
b6:c7:55:d0:c8:f0:f9:20:ac:48:6c:14:62:44:82:
bd:ea:d6:48:7d:fe:b3:41:86:51:fa:ff:d1:40:aa:
b8:47:61:60:2d:24:ec:ae:91:26:30:35:e3:77:1f:
eb:2a:4f:87:a6:af:a7:b3:6b:5c:aa:fb:61:d9:69:
19:f4:b7:c2:ee:1a:4b:ee:81:3b:d9:6f:8c:84:d6:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:ED:A4:BA:02:57:F9:81:A1:9C:D9:E5:6B:3D:15:2B:E1:44:26:C1
X509v3 Authority Key Identifier:
keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:15:c1:68:14:44:2f:96:f5:ee:bc:2f:7b:87:32:5b:c5:a2:
b5:79:a1:00:2c:da:8d:34:c0:a4:b0:0a:dc:d9:48:b3:f8:a1:
73:69:09:71:2b:b6:55:a8:2c:75:6e:7e:1f:32:09:ed:55:8e:
3c:37:21:e4:51:62:12:08:0f:3e:c6:74:ae:c1:cd:b9:69:66:
12:c0:03:9b:1a:a3:2d:f0:36:d6:7e:51:7b:6a:46:a6:96:b5:
b2:22:5e:02:ce:e7:f3:61:f1:3c:a2:12:ef:48:51:5e:6c:69:
24:e3:6b:a7:9e:b2:b8:c8:cd:22:de:b4:35:7b:0b:35:ca:a6:
6c:d7:f9:70:38:2f:bf:d9:c6:05:9a:3e:a2:f5:a6:f1:1c:69:
80:90:ff:cd:4a:ed:e2:a7:c0:a5:6d:71:bd:bb:d6:b0:24:d9:
56:aa:c2:17:19:a2:f1:5d:15:5a:85:40:27:19:28:07:2b:7a:
8a:94:bc:a5:97:93:5a:85:5e:23:6f:4c:0a:aa:b9:63:44:1a:
cb:54:5a:96:aa:88:2e:c7:76:70:25:e6:cf:ea:96:54:62:fe:
05:53:4e:5f:53:a7:5b:c6:f3:e5:15:d8:95:74:d0:a9:b2:fb:
49:69:ca:87:e3:b7:8b:2c:ee:ed:b7:67:83:13:80:fc:34:06:
b6:1a:49:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC
NTM0Nzk4M0IwHhcNMjYwNzI3MDcyNDU1WhcNMjYwODAzMDcyNDU1WjAYMRYwFAYD
VQQDEw02YTY3MDdjNy1mYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzafKbVNo/st6pkqUrb+ajDcD7UjTRzo5nBrAWLG8jfnnxRbheQAaNQaRegDI
1JfWbP7ETFjTte0ODmxZwBe5IdMXxSdMsPdkS2DW42ekYicqNYCtdF4HMzoNh7xW
YecuBLi9G7lXzfcdORrRFRsgce1sTC2460HRw7NyCND4x58E95tpWZ6Ld1Du6+43
Bv5PDIdpSlU1jQJ04YkjhXTYfsc6GpwVOvhQieNlU2dqv0VBop+2x1XQyPD5IKxI
bBRiRIK96tZIff6zQYZR+v/RQKq4R2FgLSTsrpEmMDXjdx/rKk+Hpq+ns2tcqvth
2WkZ9LfC7hpL7oE72W+MhNYerQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3tpLoC
V/mBoZzZ5Ws9FSvhRCbBMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5
OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu
TDVGaldfZlZPODYxTkhtRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPhXBaBREL5b17rwve4cyW8WitXmhACzajTTApLAK3NlIs/ihc2kJcSu2Vags
dW5+HzIJ7VWOPDch5FFiEggPPsZ0rsHNuWlmEsADmxqjLfA21n5Re2pGppa1siJe
As7n82HxPKIS70hRXmxpJONrp56yuMjNIt60NXsLNcqmbNf5cDgvv9nGBZo+ovWm
8RxpgJD/zUrt4qfApW1xvbvWsCTZVqrCFxmi8V0VWoVAJxkoByt6ipS8pZeTWoVe
I29MCqq5Y0Qay1RalqqILsd2cCXmz+qWVGL+BVNOX1OnW8bz5RXYlXTQqbL7SWnK
h+O3iyzu7bdngxOA/DQGthpJRA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:34 2026 by rpki-client