
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json)
Hash identifier: 3U4z9oKVMkKSww+YSGob+/E1qntmeBibcKMMcUSrU6w=
Subject key identifier: 7A:D7:8B:11:1C:99:02:AE:21:33:C2:DA:72:5E:15:4D:9C:9A:15:7F
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial: 0C03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
Manifest number: 0BF1
Signing time: Tue 28 Jul 2026 19:09:04 +0000
Manifest this update: Tue 28 Jul 2026 19:09:04 +0000
Manifest next update: Tue 04 Aug 2026 19:09:04 +0000
Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: v4pswdR2CtQA0Vgyt+dgpO4yp0B1KPp7lhmUYVLYf8Y=)
2: 74CA44AA049F11F087661234C4F9AE02.roa (hash: wKdTkyyXqkqw4zY6Mort6rY+08KcEGgpc9UUyZvX1D8=)
3: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: 52FStysb8y6SSS0DgpkYNnuMyVWPrRkIBtAubJdaP50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3075 (0xc03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Validity
Not Before: Jul 28 19:09:04 2026 GMT
Not After : Aug 4 19:09:04 2026 GMT
Subject: CN=6a68fe50-3153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:c1:bf:58:da:a1:99:07:c9:03:d2:f0:90:
98:9d:9e:a7:42:66:6c:0e:b4:d5:7e:72:c5:26:0a:
3c:61:df:0c:36:70:c7:56:0b:c0:0a:10:a3:37:d1:
3e:70:4c:05:de:b5:e6:2a:28:73:8c:5c:15:ef:71:
5a:4c:fb:0f:f1:90:5a:f4:dd:18:b3:08:f1:3e:d4:
fc:88:d9:4a:00:44:3c:92:69:15:f8:e6:d8:9b:1e:
23:20:f4:2c:91:62:3e:ec:44:d3:7e:15:21:b7:d7:
b8:1b:be:b9:dc:c4:cf:b6:fa:dd:99:9d:51:10:64:
62:70:49:3c:b3:ae:e7:32:03:51:93:6b:86:e4:45:
00:21:e0:37:c9:ab:15:fc:0c:97:31:2e:96:cc:76:
c8:e7:bb:c7:a8:78:09:6a:fe:51:20:e2:da:ad:6a:
05:bf:59:09:52:c1:8e:d8:2e:03:0f:e0:6b:43:59:
09:6b:ad:6a:97:22:7c:d3:27:24:cb:8d:64:cd:b5:
c7:7d:f9:3f:d0:b5:62:49:42:58:83:3f:9e:77:55:
3b:65:9a:3d:bd:c9:7f:1f:67:4c:a8:20:dc:a9:96:
0e:15:89:f6:48:80:17:5f:fc:23:bf:4f:6d:88:50:
2e:bd:30:90:2b:9e:3f:72:b9:a2:03:79:cc:11:9f:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:8B:11:1C:99:02:AE:21:33:C2:DA:72:5E:15:4D:9C:9A:15:7F
X509v3 Authority Key Identifier:
keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e7:f6:00:45:80:15:4a:1c:f5:27:70:09:27:54:b0:45:8c:
b9:d6:f1:1e:5a:9d:ef:4b:da:de:ca:66:15:23:9e:46:ec:aa:
a6:7b:08:b1:e4:a1:54:c9:f3:4e:77:36:f1:af:b1:f5:bc:23:
19:9c:3a:22:f1:ce:1c:6b:0b:f8:20:35:b0:e6:b9:22:b8:a3:
15:db:d5:31:96:cf:a2:f4:75:0e:df:fc:a8:76:04:5a:53:4d:
74:51:d0:d5:7f:3e:51:1f:90:3d:8f:c9:a0:6c:6d:5c:af:e9:
95:f3:b1:7a:fb:29:65:e5:7f:8f:cd:3a:51:a9:03:9b:0e:da:
a8:5e:3d:df:3a:be:04:58:42:66:6a:74:2e:1d:58:0e:c7:0a:
25:92:14:3f:c4:82:f7:6b:fc:a6:2e:a4:61:22:20:b0:b1:7c:
73:0b:a5:92:5d:c3:33:85:92:cd:74:af:71:fd:23:6c:d3:ca:
b8:81:f3:f5:39:9b:a7:f7:2b:08:63:2a:b6:43:7f:f7:6f:6f:
02:b1:f0:dc:f3:be:92:c6:67:e9:e8:81:6c:ca:03:27:5a:20:
6b:77:fe:cd:dd:82:e2:01:8c:16:03:d7:34:db:85:80:c4:fc:
01:d7:a1:a9:84:f5:86:48:ff:b5:ca:34:62:a1:9d:ba:fe:10:
fa:ff:45:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD
MUZBREU2MTcwHhcNMjYwNzI4MTkwOTA0WhcNMjYwODA0MTkwOTA0WjAYMRYwFAYD
VQQDEw02YTY4ZmU1MC0zMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAywfBv1jaoZkHyQPS8JCYnZ6nQmZsDrTVfnLFJgo8Yd8MNnDHVgvAChCjN9E+
cEwF3rXmKihzjFwV73FaTPsP8ZBa9N0YswjxPtT8iNlKAEQ8kmkV+ObYmx4jIPQs
kWI+7ETTfhUht9e4G7653MTPtvrdmZ1REGRicEk8s67nMgNRk2uG5EUAIeA3yasV
/AyXMS6WzHbI57vHqHgJav5RIOLarWoFv1kJUsGO2C4DD+BrQ1kJa61qlyJ80yck
y41kzbXHffk/0LViSUJYgz+ed1U7ZZo9vcl/H2dMqCDcqZYOFYn2SIAXX/wjv09t
iFAuvTCQK54/crmiA3nMEZ8NKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrXixEc
mQKuITPC2nJeFU2cmhV/MB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx
NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjQ3NS8yMDhGQjczMDQxNzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdk
VlZsRnpIOF9IdUhCLXQ1aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWuf2AEWAFUoc9SdwCSdUsEWMudbxHlqd70va3spmFSOeRuyqpnsIseShVMnz
Tnc28a+x9bwjGZw6IvHOHGsL+CA1sOa5IrijFdvVMZbPovR1Dt/8qHYEWlNNdFHQ
1X8+UR+QPY/JoGxtXK/plfOxevspZeV/j806UakDmw7aqF493zq+BFhCZmp0Lh1Y
DscKJZIUP8SC92v8pi6kYSIgsLF8cwulkl3DM4WSzXSvcf0jbNPKuIHz9Tmbp/cr
CGMqtkN/929vArHw3PO+ksZn6eiBbMoDJ1oga3f+zd2C4gGMFgPXNNuFgMT8Adeh
qYT1hkj/tco0YqGduv4Q+v9FIw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:14 2026 by rpki-client