
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier: Et26Eeoj6aphRZU23ZwvmyPI4gaKVWpDAqthhLMTNIk=
Subject key identifier: 4C:CE:1B:3D:EC:A8:31:DB:A9:F1:FD:40:04:AB:17:B0:43:EA:BE:61
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number: 0256
Signing time: Mon 27 Jul 2026 03:44:08 +0000
Manifest this update: Mon 27 Jul 2026 03:44:07 +0000
Manifest next update: Mon 03 Aug 2026 03:44:07 +0000
Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: 1cOEar3BOzIH6D0UK9Q4ICq3c36P8KDRI1FrbWzIjzc=)
2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: gp5WZJBdG8buH2FoAFWLx0g28D8rX+R/fO2EnJ+4Rtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Validity
Not Before: Jul 27 03:44:07 2026 GMT
Not After : Aug 3 03:44:07 2026 GMT
Subject: CN=6a66d408-9291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:95:f8:0b:18:f9:62:c2:4e:d4:a6:21:36:
bf:a3:c3:bb:78:d4:40:06:77:b1:25:9a:85:fc:78:
04:f1:00:a9:c1:d6:2e:94:03:0d:f5:d0:8c:51:7f:
7c:c6:03:bb:22:75:dd:cb:54:88:d6:c9:36:c2:e8:
2f:43:3c:a1:63:e5:7e:a6:66:37:d7:1d:14:0e:3f:
a7:85:07:1f:50:9b:ec:cf:68:48:b1:5e:e2:69:89:
32:48:4e:49:c5:1f:ba:80:3e:cf:64:f1:7a:d6:6d:
a3:b8:65:14:42:cf:1d:9e:07:47:2e:28:d9:0d:a9:
01:b4:7e:74:16:2b:54:a3:07:88:24:6e:2d:57:dd:
28:25:8a:74:88:ca:5c:33:19:35:64:62:26:27:3e:
4e:2a:41:44:35:7b:c1:ad:d8:ca:51:87:0c:1a:17:
58:84:6c:ce:1d:77:a2:ee:e4:41:f4:c3:40:39:c5:
5a:58:e8:c3:e3:a8:ed:f2:76:9c:06:49:70:fb:86:
45:b4:57:ab:1e:bf:87:87:f6:91:06:1f:4c:bf:17:
d2:86:3e:e0:f4:d3:48:a9:b1:2d:d0:cd:ed:49:e9:
03:d9:f7:16:e8:d3:5b:01:b4:f6:8e:52:4d:a9:8a:
9d:96:57:81:8a:64:b0:c8:9f:ee:1e:c5:dd:b0:06:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:1B:3D:EC:A8:31:DB:A9:F1:FD:40:04:AB:17:B0:43:EA:BE:61
X509v3 Authority Key Identifier:
keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2a:7a:8b:51:96:6a:bb:f7:67:bb:e6:aa:8e:68:4a:8a:e0:
61:69:3e:da:f2:8c:9f:87:67:6e:19:70:cf:ca:17:aa:da:c2:
e1:a3:7b:b8:23:5d:de:09:27:49:02:f6:11:21:62:17:33:c7:
60:6d:34:5f:d1:20:f8:fa:bb:91:bb:e4:13:ae:e7:a4:fb:b4:
db:7a:a2:3c:35:42:d8:59:6e:57:71:f4:46:10:f6:15:a1:5e:
37:b7:43:bc:cd:90:fe:8f:59:04:5e:d1:c8:aa:ae:51:7e:c3:
48:56:8f:60:d0:b5:2c:52:ea:2b:54:dd:ab:53:13:3e:11:22:
1d:15:92:45:8a:b7:b5:2c:df:75:97:92:b9:08:e4:63:4d:bd:
0d:84:ac:a1:86:1b:eb:b9:67:c2:cf:11:c4:5c:a3:a5:3c:4e:
64:d8:d5:92:bb:af:9d:15:17:36:01:b6:2c:56:74:68:0b:aa:
d8:ea:41:19:ed:11:11:d9:b4:d7:d6:a7:98:ab:e3:8f:c4:73:
1b:c6:02:95:d0:dd:5b:86:12:57:5d:0c:7e:46:1e:99:89:60:
99:93:bf:78:1f:a4:c6:b5:f4:3c:4b:7d:fe:ca:b1:b4:73:b1:
2b:a5:e5:fc:2f:ff:70:5c:4b:dd:3f:90:9f:f7:19:be:b6:5c:
53:f1:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:19 2026 by rpki-client