
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier: YAzAix7iw4mlUaYK5o9cQ2LAPI4Rz81Pgt5KgFcv8CM=
Subject key identifier: 06:20:57:87:E5:D6:59:79:48:C8:5A:B7:C6:D2:0E:B7:9A:2A:21:C1
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial: 3557
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number: 354F
Signing time: Fri 12 Jun 2026 15:00:31 +0000
Manifest this update: Fri 12 Jun 2026 15:00:31 +0000
Manifest next update: Fri 19 Jun 2026 15:00:31 +0000
Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: IYzElB1MDMfMaFr4nYUsI0pA0d1BuS54GI9uj4EXXKM=)
2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: uzaZKpbjTrWsFfOiIa8WfR03ueqsK9oa9a46XDa7tCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13655 (0x3557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Validity
Not Before: Jun 12 15:00:31 2026 GMT
Not After : Jun 19 15:00:31 2026 GMT
Subject: CN=6a2c1f0f-cdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:b7:d8:ab:f8:44:3e:47:46:08:1a:18:0f:
3c:fe:20:6a:92:e6:b5:e6:c6:aa:7a:f9:0c:c5:9b:
92:ac:d2:9b:d5:eb:5a:a7:d8:14:53:56:76:e8:29:
01:1d:84:a9:a3:ea:16:fd:3f:27:67:31:b3:34:cc:
f7:a1:31:bb:85:f3:4a:e8:88:5f:a6:6a:c2:80:4d:
40:ae:48:4c:ee:1e:a9:83:96:f7:2f:09:db:63:a2:
96:56:e1:a6:f7:72:13:f2:75:21:bb:ea:61:51:29:
e8:4a:23:9d:75:0f:02:78:6e:7e:f4:bb:17:9d:d3:
26:69:b2:a1:ca:13:ab:c9:d9:ae:01:0c:54:15:c7:
50:9e:e7:f2:ef:f9:e7:44:68:9f:c5:05:6f:ec:b9:
0b:03:2a:ef:d7:ad:b7:e4:4a:84:43:1f:af:03:8a:
be:ec:df:82:73:86:5b:59:65:40:8c:8a:36:8a:24:
7d:63:6b:38:74:ef:18:99:10:d5:14:17:b3:b1:d1:
26:f2:dc:2b:6b:d1:4e:7a:72:3f:c6:07:01:68:cd:
2a:83:47:f5:e7:af:56:94:05:49:3a:7e:39:7e:cc:
ba:d9:0b:11:66:0e:39:5c:be:f9:ac:8d:50:8a:b3:
20:79:72:ae:21:3e:52:31:57:f8:53:e8:71:15:3a:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:20:57:87:E5:D6:59:79:48:C8:5A:B7:C6:D2:0E:B7:9A:2A:21:C1
X509v3 Authority Key Identifier:
keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8e:0d:a7:af:6b:2a:0c:36:6f:c4:29:0b:c1:22:32:81:cf:
64:5f:ae:d9:c0:28:60:ce:b7:2b:a4:c2:d9:09:6f:6b:f4:4c:
f4:a2:f2:f0:b8:4c:9f:f6:86:ab:2c:9c:33:6e:00:58:6a:5b:
f3:f9:9d:98:fd:d6:3c:fa:44:b0:a3:fb:f3:ed:fe:60:6a:07:
f1:fe:34:e6:fe:9d:ee:2e:9d:58:42:ab:55:43:a3:79:d4:b5:
59:5a:33:75:d3:7f:97:3e:4b:0c:dc:38:d5:c6:8f:c7:c5:20:
96:05:6d:cc:18:19:65:52:99:84:42:b5:6a:00:14:02:9a:77:
bd:f7:17:0b:4e:37:64:83:af:25:b9:c0:2b:37:b6:b4:3d:b8:
a2:fe:6b:3b:44:20:51:0c:1e:89:2d:6c:e1:d2:0a:76:6f:03:
d7:ae:cb:c1:a5:ff:fc:89:24:f2:6e:30:39:01:39:3c:64:a8:
3a:23:c9:1f:86:ee:b8:48:97:f1:ce:52:42:98:f2:b5:97:4e:
d7:67:a7:5d:28:4e:27:37:e6:02:c3:88:10:2e:39:f7:54:6d:
80:7e:10:a3:a4:36:25:2f:2c:e7:db:c4:f8:47:43:ba:2a:4d:
16:21:4e:97:1d:99:5f:48:f9:a9:6a:85:8a:4e:be:da:9b:25:
82:4f:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:17 2026 by rpki-client