
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json)
Hash identifier: F2eosqPSRgIGm4nXj4isAPXp+jip66whc1uusfwFaV8=
Subject key identifier: C5:15:F9:CE:D9:DB:42:16:78:D8:5A:3F:0C:BC:77:6E:8B:A2:E8:89
Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
Manifest number: 0130
Signing time: Mon 27 Jul 2026 07:36:20 +0000
Manifest this update: Mon 27 Jul 2026 07:36:19 +0000
Manifest next update: Mon 03 Aug 2026 07:36:19 +0000
Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: mT6uVNE8tb98zS42CoXFJPPX8S8Ix6A82yBUcxoWJ/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Validity
Not Before: Jul 27 07:36:19 2026 GMT
Not After : Aug 3 07:36:19 2026 GMT
Subject: CN=6a670a74-8d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:18:31:7a:4f:66:3d:6e:eb:a6:56:8f:9d:
e0:58:ca:07:41:64:21:29:d8:21:1f:13:c5:25:ce:
fa:cd:6f:f1:17:b4:ad:c4:40:a7:32:b8:c3:9c:9d:
12:31:9b:d5:9a:ab:59:0a:02:e2:ec:d6:4b:2a:be:
d8:6b:11:8b:ae:3f:13:8d:42:b3:1f:2b:90:c9:96:
5d:81:45:91:70:e8:9d:0c:08:c6:20:80:72:f6:c2:
c4:ea:8e:a1:84:74:01:bf:8b:8a:60:27:f9:15:3a:
74:c5:54:9a:0d:b7:75:29:6c:98:1b:0e:16:f3:52:
f7:fa:bf:36:4b:7b:56:f6:74:a6:c1:27:6d:15:df:
5f:cb:e3:e9:a7:4e:cc:85:3e:f6:78:be:4b:4d:ac:
29:59:f4:8b:74:3d:c5:68:f0:3b:4a:26:28:38:eb:
7f:dc:0d:68:78:5d:bb:36:ab:7f:40:26:98:12:86:
dd:25:a2:06:61:1c:81:79:d3:a7:f9:84:8b:7b:07:
4e:29:d2:27:26:c6:00:89:f5:a2:d6:71:99:be:65:
bb:cd:1e:4b:89:ce:b7:15:19:51:5e:38:f8:e0:0c:
dc:47:f9:24:ab:c6:5d:87:ac:6d:d6:a7:f8:19:25:
84:26:12:e5:14:bf:5e:d5:1b:02:96:d2:1a:61:6e:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:15:F9:CE:D9:DB:42:16:78:D8:5A:3F:0C:BC:77:6E:8B:A2:E8:89
X509v3 Authority Key Identifier:
keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:0b:47:55:5f:6e:ea:b1:02:2f:4d:d4:81:da:c8:99:d7:99:
4d:f6:0b:12:60:04:41:f2:d8:ee:45:89:6f:84:e5:76:b3:d3:
af:ef:58:db:8d:2c:6c:25:b0:01:13:16:08:45:bc:83:59:00:
ff:1e:01:41:03:9e:a0:aa:7a:2c:5d:01:99:76:a1:a8:42:20:
75:2c:f2:7e:bc:f3:3d:ab:54:d7:e8:20:39:1c:99:67:ec:c4:
cd:65:79:98:9f:5a:c0:30:f9:36:21:45:9a:74:89:d0:0a:f9:
90:64:40:53:63:6b:c1:d4:e8:91:d4:8b:75:c8:87:fb:40:b8:
f0:36:97:8e:83:be:b7:72:8a:ac:c0:63:23:94:43:54:ac:18:
55:bc:c6:0f:86:d7:73:06:ea:1b:88:15:2d:9e:22:49:86:a7:
ab:2e:e2:c8:75:68:86:fa:23:38:e7:a5:56:53:7e:5e:d2:ce:
83:be:b3:9e:3c:a4:f5:a5:3a:ef:f5:0a:aa:78:d9:7a:3d:06:
d9:47:f7:2d:d9:80:98:ca:a4:8d:b1:9d:90:2c:99:62:56:35:
46:32:a8:f7:d8:6e:5b:15:40:c5:e9:2c:15:93:9a:07:93:8e:
6c:6d:52:aa:d2:5a:ec:89:55:00:ed:97:c2:ff:cc:b2:10:fe:
2e:37:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:47 2026 by rpki-client