
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
File: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json)
Hash identifier: xhtElpdCChCFDCsyLEMB1dU4NzBi/9A508cjoo3eM5U=
Subject key identifier: DB:CB:41:14:0D:33:AF:3B:02:3B:67:BC:F2:1A:C2:1F:10:6D:2E:08
Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
Certificate issuer: /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Certificate serial: 1361
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
Manifest number: 48D4
Signing time: Fri 12 Jun 2026 14:21:15 +0000
Manifest this update: Fri 12 Jun 2026 14:21:14 +0000
Manifest next update: Fri 19 Jun 2026 14:21:14 +0000
Files and hashes: 1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: htOJEeI4WMduXm5MQAAZ1DxeuRP0jaErey9LCOfM0Do=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4961 (0x1361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Validity
Not Before: Jun 12 14:21:14 2026 GMT
Not After : Jun 19 14:21:14 2026 GMT
Subject: CN=6a2c15da-68b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ab:4a:8e:79:2a:55:c2:31:77:d5:ac:18:cd:
8b:18:3b:56:4b:ba:9c:6a:89:a1:08:40:75:90:a2:
d7:a4:af:fe:03:85:38:cd:3c:7d:b9:d3:f4:6d:1a:
15:c5:9f:37:dd:d5:c8:50:8d:4a:a1:df:03:d2:fc:
fe:d7:9c:23:e9:e2:d3:42:5d:22:af:59:4b:56:37:
b4:75:cc:aa:3e:70:14:31:c5:1b:c5:a4:eb:ae:0e:
f8:b8:21:0b:e3:2d:ab:b9:f2:27:98:60:19:6a:29:
4f:df:73:ee:28:3d:d3:eb:d7:8b:87:56:38:a5:02:
f3:f4:c1:d1:7f:5d:af:6f:f2:f5:3a:1b:a2:29:32:
23:f9:81:c2:4f:8a:b1:e0:8b:bc:47:4c:d2:b4:c3:
47:15:26:f2:d6:13:71:c0:0b:e8:21:3a:94:e1:35:
23:c8:81:3d:01:59:fa:93:35:eb:74:de:09:9d:bb:
40:73:5e:89:b6:87:e8:f6:34:81:06:90:3e:3d:8d:
88:6d:2b:62:a6:1b:bc:c1:19:1f:15:9f:a5:8b:78:
2b:85:ba:39:1a:5f:08:31:fc:57:9e:4a:2d:c8:36:
6e:ef:7c:88:29:28:99:1a:ca:33:1e:dd:6b:f6:69:
89:ba:80:db:48:2e:8d:f5:55:41:95:1d:2c:d2:21:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:41:14:0D:33:AF:3B:02:3B:67:BC:F2:1A:C2:1F:10:6D:2E:08
X509v3 Authority Key Identifier:
keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d4:f2:70:3b:71:c9:fd:24:a2:af:66:7b:ee:4e:60:15:0e:
b4:17:d7:1c:89:a3:e8:14:d8:23:87:34:d1:d3:77:a6:b5:b5:
b7:a5:96:57:8a:a0:f3:13:1c:51:98:bb:cf:a4:d2:dd:cb:cd:
3d:9a:3f:41:94:39:28:d3:4e:11:e7:f0:fd:f9:89:5e:c6:40:
b3:68:e2:36:83:f9:0d:4e:61:7f:eb:4c:19:da:2b:96:0b:27:
f3:a3:7d:cd:32:22:2a:6e:ae:2a:c7:1c:b5:c3:72:b0:62:c3:
13:18:e7:c7:8c:42:84:47:e6:56:2a:eb:6d:17:54:ea:25:0d:
18:db:68:f3:3a:05:c5:a6:1d:9e:4a:80:c3:c7:ae:93:56:31:
de:4d:c1:15:66:b7:85:4d:94:4b:2d:a4:1b:2f:24:fb:95:9d:
ea:7b:9e:ad:7f:22:41:bb:98:5f:25:a2:09:58:62:8a:e3:7c:
55:8c:fd:81:2a:22:ff:a6:a8:81:b2:86:b1:56:b9:7f:4f:aa:
2c:9b:cd:20:47:d3:63:e1:0f:83:a9:ba:25:9f:1a:81:5f:98:
d4:1a:41:22:58:55:49:4a:7b:02:2e:5b:15:a0:f9:de:cd:2f:
a9:4c:c8:ff:2d:54:41:a0:49:ce:a8:ff:f6:30:e5:a6:d8:b9:
07:04:58:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVENjExMTAvBgNVBAUTKDQxNkQ2Q0Q2MDM5MEZCN0M5NkVENzlENzhDRTc2RjU0
QUZDRjQ0NTgwHhcNMjYwNjEyMTQyMTE0WhcNMjYwNjE5MTQyMTE0WjAYMRYwFAYD
VQQDEw02YTJjMTVkYS02OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7qtKjnkqVcIxd9WsGM2LGDtWS7qcaomhCEB1kKLXpK/+A4U4zTx9udP0bRoV
xZ833dXIUI1Kod8D0vz+15wj6eLTQl0ir1lLVje0dcyqPnAUMcUbxaTrrg74uCEL
4y2rufInmGAZailP33PuKD3T69eLh1Y4pQLz9MHRf12vb/L1OhuiKTIj+YHCT4qx
4Iu8R0zStMNHFSby1hNxwAvoITqU4TUjyIE9AVn6kzXrdN4JnbtAc16Jtofo9jSB
BpA+PY2IbStiphu8wRkfFZ+li3grhbo5Gl8IMfxXnkotyDZu73yIKSiZGsozHt1r
9mmJuoDbSC6N9VVBlR0s0iHBPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvLQRQN
M687AjtnvPIawh8QbS4IMB8GA1UdIwQYMBaAFEFtbNYDkPt8lu1514znb1Svz0RY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE
NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0zeVc3WG5Yak9kdlZLX1BS
RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FXMXMxZ09RLTN5VzdYblhqT2R2VktfUFJGZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0z
eVc3WG5Yak9kdlZLX1BSRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs9TycDtxyf0koq9me+5OYBUOtBfXHImj6BTYI4c00dN3prW1t6WWV4qg8xMc
UZi7z6TS3cvNPZo/QZQ5KNNOEefw/fmJXsZAs2jiNoP5DU5hf+tMGdorlgsn86N9
zTIiKm6uKscctcNysGLDExjnx4xChEfmVirrbRdU6iUNGNto8zoFxaYdnkqAw8eu
k1Yx3k3BFWa3hU2USy2kGy8k+5Wd6nuerX8iQbuYXyWiCVhiiuN8VYz9gSoi/6ao
gbKGsVa5f0+qLJvNIEfTY+EPg6m6JZ8agV+Y1BpBIlhVSUp7Ai5bFaD53s0vqUzI
/y1UQaBJzqj/9jDlpti5BwRYLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:08 2026 by rpki-client