
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json)
Hash identifier: Fg7c8BlXmpOVAqIt3GoLzaKojJ46vS3+4S0Xk+GvP8Y=
Subject key identifier: 72:B6:C9:38:47:0D:F5:CB:61:C2:FE:12:3B:11:3C:77:31:A5:8F:1F
Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
Manifest number: 0234
Signing time: Sat 13 Jun 2026 02:38:45 +0000
Manifest this update: Sat 13 Jun 2026 02:38:45 +0000
Manifest next update: Sat 20 Jun 2026 02:38:45 +0000
Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: K04E9FPVRBTlWbc2R7dJIiAOG9LvzpHrza8IzgI7kBY=)
2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Validity
Not Before: Jun 13 02:38:45 2026 GMT
Not After : Jun 20 02:38:45 2026 GMT
Subject: CN=6a2cc2b5-b569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:0c:1f:41:72:94:52:a2:b8:f1:d6:13:0e:
54:8c:85:e3:eb:89:05:5f:86:84:8f:6e:b9:80:58:
1c:2b:87:8e:42:17:66:05:90:75:13:e9:44:2c:43:
7e:6a:87:92:ac:d8:d2:99:26:69:2a:dc:8a:09:ac:
7a:4b:39:8b:2b:1c:25:ba:ee:99:9e:78:e2:ab:27:
03:e5:bd:49:4c:0f:ac:6b:c1:1a:6b:c3:5d:e9:e5:
33:cd:8c:c0:62:82:32:22:b0:ce:a3:1d:a5:f4:9d:
58:ee:9a:b4:05:8c:d7:f4:ca:b1:ef:1d:d6:aa:dd:
c6:fd:b9:49:db:a9:83:07:4e:23:62:a9:dd:d9:4c:
f7:0c:8c:53:32:48:15:93:86:de:67:e9:d9:93:82:
3c:51:b5:ca:d0:52:c5:53:df:cf:c4:19:ec:4d:09:
95:72:54:e2:3f:f2:fb:6a:5d:23:13:77:ec:29:91:
c1:1c:a2:6f:2b:03:25:f6:da:c3:a6:b3:80:74:47:
66:7b:e1:a6:a7:21:8e:61:a1:15:39:d6:4e:2a:eb:
49:db:c9:d3:ee:47:d2:33:ff:31:1b:8e:87:5e:53:
60:71:25:2c:d3:df:4c:08:02:2b:63:a2:2b:f8:ef:
11:2d:51:a5:03:c0:f0:f8:0b:ee:2c:5b:9e:41:f9:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B6:C9:38:47:0D:F5:CB:61:C2:FE:12:3B:11:3C:77:31:A5:8F:1F
X509v3 Authority Key Identifier:
keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:21:8b:89:1a:92:ee:71:6b:99:2f:0a:f6:65:2b:21:e0:71:
4c:dd:04:a3:a7:78:14:b7:a0:4d:22:b2:30:15:aa:a4:b4:bd:
82:94:d0:d9:64:21:b0:c5:7f:37:93:22:23:cf:cd:6d:98:3a:
32:fe:27:1d:59:b7:8d:da:99:7c:e1:b2:c7:02:d7:ef:2f:e0:
5c:bb:cb:b7:91:14:ea:50:bc:ac:22:85:2c:3e:fb:55:55:cb:
db:9c:3c:5e:e0:99:7d:e8:81:ad:fa:6f:f6:95:1b:c7:a2:83:
1b:96:f1:22:95:21:ff:22:32:52:79:11:ab:e6:f2:d6:8e:d6:
56:09:52:e5:46:56:d2:d0:da:41:09:12:1b:c4:3e:a4:d3:7a:
16:1d:46:b6:10:01:e2:ee:7a:b8:6c:8c:40:f7:2f:13:48:a2:
5e:9e:63:14:29:16:94:86:45:c4:3b:48:08:24:24:2d:4e:23:
9b:e8:e3:7b:a6:cf:0a:44:7f:be:c6:e2:1c:9b:62:b5:d2:a6:
75:7d:b8:7a:78:b7:76:a4:4b:6e:4a:93:56:1e:01:be:25:a6:
0b:13:f9:78:32:9e:1d:8c:74:56:c4:40:49:a1:b8:ed:00:21:
a7:07:22:82:40:d2:b8:43:a1:e8:80:0e:95:e5:9a:5c:f2:30:
04:6a:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:16 2026 by rpki-client