
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json)
Hash identifier: 3JxaZ/okB1RlBmNqVVHhMoVHEgZXma59Lwdobql6Zng=
Subject key identifier: BE:88:CB:47:6D:CA:53:EC:A8:B4:10:71:4D:D4:EE:98:3D:89:CA:D3
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 36FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
Manifest number: 360C
Signing time: Tue 28 Jul 2026 14:29:51 +0000
Manifest this update: Tue 28 Jul 2026 14:29:51 +0000
Manifest next update: Tue 04 Aug 2026 14:29:51 +0000
Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: 2U9Uwv5vh6J/J7VJQ/jambxoNJtQiATYq0LLJlJoxqU=)
2: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=)
3: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=)
4: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=)
5: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=)
6: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=)
7: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=)
8: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=)
9: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=)
10: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=)
11: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: Vuo+8i5V4Znap+Qs1dOcHdE1nAFejMLQYP5EDIvQcjU=)
12: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14074 (0x36fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Jul 28 14:29:51 2026 GMT
Not After : Aug 4 14:29:51 2026 GMT
Subject: CN=6a68bcdf-c9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:28:31:53:cf:49:37:0d:4c:e5:a0:97:8f:
40:d4:39:49:9c:34:61:3d:cd:e2:54:6a:94:a1:c3:
82:04:9f:10:ba:fa:d6:12:87:c1:c3:09:07:62:67:
c2:2f:93:65:b2:d6:85:3d:36:f5:ee:6e:41:5c:54:
98:03:bd:70:66:3b:ff:1b:cd:0b:58:77:ac:ea:06:
5a:a9:f7:62:5a:fb:55:3b:d6:fb:8a:d2:57:4e:16:
d0:24:49:d4:20:d6:54:50:5b:ac:6d:b1:0c:2a:7c:
e8:81:cc:1b:7f:ab:d6:cd:03:5a:67:7b:39:e1:cf:
86:c1:f4:87:8b:03:2e:65:97:d9:74:50:c0:48:12:
3c:f9:83:4a:8f:e2:c2:54:65:93:03:6c:fc:f6:c6:
47:62:d7:1d:70:f6:3e:4b:d9:29:96:db:de:6e:2c:
8c:e0:25:eb:c9:6b:17:11:23:3b:41:3b:0a:c5:d0:
f4:45:c8:13:e0:0a:2d:92:44:d9:45:9b:16:85:99:
ce:18:38:49:7d:6f:5c:95:f5:6f:11:c7:5f:f9:a9:
3b:d2:c2:bb:3e:35:af:64:e7:f3:ad:c4:6f:82:68:
ad:b7:d0:65:45:ab:e7:10:54:5e:14:35:1e:fb:4a:
1a:d9:09:e6:65:f8:db:ed:d0:8f:38:cd:ba:e5:81:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:88:CB:47:6D:CA:53:EC:A8:B4:10:71:4D:D4:EE:98:3D:89:CA:D3
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:24:6c:b7:42:17:5c:85:c7:d4:c0:42:f7:68:c7:a0:98:c5:
22:f4:67:3b:13:3c:1d:11:f5:7f:b9:e5:56:c3:a5:57:54:1e:
8d:e8:19:2a:0e:1d:81:58:04:dd:71:7f:8d:f6:85:17:61:87:
22:10:47:a6:c1:15:86:fb:d9:4b:f5:c0:a0:cb:e7:1f:1f:29:
8b:27:3d:73:d7:63:05:1f:16:9f:94:ee:97:d3:e4:f7:23:25:
1c:ad:9b:de:19:10:ed:1c:57:dc:16:43:23:8f:82:7b:bf:46:
94:32:58:16:81:9c:16:79:17:b1:67:e0:e6:ea:15:ee:c4:f4:
e4:c7:6e:ea:46:10:5d:78:7c:31:d0:df:3a:66:22:c3:93:ce:
6f:67:14:84:ae:37:9e:88:5a:cf:ae:60:70:28:7c:1e:27:61:
e0:60:41:a2:ff:71:e8:c3:e9:04:a6:a8:33:25:dd:e9:6f:35:
7f:eb:46:21:2e:9d:45:09:1f:78:b5:20:cc:9b:ef:9c:24:60:
c8:9b:53:2b:e1:48:22:16:08:0d:1c:ab:ad:49:60:53:08:99:
fd:fa:99:54:ea:ee:f6:9e:be:bd:f8:01:c0:9c:bb:f7:9f:9d:
d7:21:60:a0:89:44:42:3b:a5:c6:55:f8:46:e3:96:ce:cc:46:
8d:89:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:33:55 2026 by rpki-client