
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier: 1N1gw3TXp2O+3hICRkLVoKzDcFVuwDRLjt0DqfkGUGw=
Subject key identifier: 1F:B8:83:49:4F:05:56:06:FB:07:0E:96:C1:18:EC:2F:A6:B2:00:BF
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial: 1BFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number: 1BE2
Signing time: Tue 16 Jun 2026 16:14:12 +0000
Manifest this update: Tue 16 Jun 2026 16:14:11 +0000
Manifest next update: Tue 23 Jun 2026 16:14:11 +0000
Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: hpnJYXyQLrtnrG07At4lDHNdk1bXsDz/cl9EW9oZG/g=)
2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7164 (0x1bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Validity
Not Before: Jun 16 16:14:11 2026 GMT
Not After : Jun 23 16:14:11 2026 GMT
Subject: CN=6a317653-20c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:b3:f0:f1:af:e6:69:83:7a:34:fb:25:eb:
09:af:1f:a4:4d:95:53:d8:89:b2:f2:8f:6b:e0:3f:
d8:6d:23:fa:bf:01:3b:1b:56:56:fc:d0:98:8f:9e:
9a:a6:d0:3b:16:03:ba:81:ef:37:c3:48:d3:fd:38:
27:05:c2:ff:f5:57:05:e5:5f:db:1b:20:db:af:33:
9a:04:7a:06:61:dd:2d:3b:f6:2f:00:56:f7:f2:cd:
7c:5e:e8:11:77:c4:6b:ec:ba:1b:72:f9:bb:da:09:
ba:39:59:47:3d:0b:04:d8:b2:8b:ab:c2:53:20:b5:
36:89:f6:ad:52:f5:12:ac:40:36:a4:91:43:de:c2:
9b:b8:ba:6a:35:ce:c8:b4:9b:6d:ff:6b:a4:01:80:
79:02:c4:72:8e:74:17:03:45:b7:6c:1e:8e:dd:69:
50:7b:6e:a8:f4:81:ea:15:76:05:76:ac:09:be:41:
a0:b3:5c:0d:e6:96:0c:2d:94:64:fb:1b:43:2f:d1:
f0:7a:d4:67:fe:d9:29:6c:c8:ee:22:5b:ea:30:f0:
17:c2:b1:8f:74:e9:d6:42:6e:b9:c7:d6:46:08:35:
af:3e:c1:31:cd:12:c4:99:9c:e0:a1:39:a6:72:2d:
9b:34:01:21:89:e0:f5:57:9b:36:b7:30:f1:51:f8:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:83:49:4F:05:56:06:FB:07:0E:96:C1:18:EC:2F:A6:B2:00:BF
X509v3 Authority Key Identifier:
keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d9:06:d0:ce:c5:2a:23:14:23:f0:a3:8e:56:3e:88:db:20:
f2:d9:04:b0:73:a4:5e:17:6e:64:88:b7:10:31:51:3d:8f:d0:
d4:22:8a:97:8a:f3:13:a0:2c:df:8d:3b:5d:7a:04:e8:5e:ad:
43:e3:c4:58:2f:f0:cc:39:ad:66:f3:04:e7:8c:cb:3f:d3:b8:
82:4a:db:18:ff:43:41:58:77:c5:69:f7:9a:f1:09:80:6d:a7:
fe:7f:4f:c9:c4:c9:04:1d:59:cd:04:55:7a:2f:5e:10:84:dc:
ad:04:c6:3e:e3:dc:bc:27:e1:74:b9:50:5e:11:84:14:b4:a8:
44:02:ee:ab:2e:8a:f7:41:95:f4:8b:ab:c8:ed:27:aa:21:25:
e8:27:1d:de:45:4d:a5:b9:33:eb:72:dc:53:a6:eb:62:01:f8:
61:fd:24:ce:dd:be:90:8b:9a:a0:bc:5c:a3:1a:b7:99:1d:46:
19:3e:10:25:9e:a2:78:3a:09:e2:d3:55:03:5a:75:9e:7d:77:
18:b5:d3:d6:83:b4:11:64:1e:f1:9d:eb:7b:40:f8:e9:f9:46:
9f:aa:ae:76:83:0c:35:ed:c2:60:8d:62:b1:3b:eb:1c:cf:19:
51:47:e0:76:4b:96:c2:da:83:50:5d:61:c1:cb:da:8c:07:1f:
6d:ab:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:57 2026 by rpki-client