
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json)
Hash identifier: aEBA8M6YO79c15V2qgNAdBv2+WnslIxTHs/PnoNYfrM=
Subject key identifier: BE:0C:82:F1:2C:25:5D:AE:68:BB:95:DD:E2:8A:DD:DF:C8:B3:A2:E6
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial: 0398
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
Manifest number: 0390
Signing time: Mon 27 Jul 2026 01:50:20 +0000
Manifest this update: Mon 27 Jul 2026 01:50:20 +0000
Manifest next update: Mon 03 Aug 2026 01:50:20 +0000
Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: FLfXSsxRjW161kAH4yUOXE5UXa9Kd1DVw99VodNRR7I=)
2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: tyV63/6XwWHMEnlVNrZpKRUTH+qgqLOvrBf/JcSlvnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920 (0x398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503
Validity
Not Before: Jul 27 01:50:20 2026 GMT
Not After : Aug 3 01:50:20 2026 GMT
Subject: CN=6a66b95c-87c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:db:6e:1a:e7:2b:cf:ab:52:bc:1f:5c:2e:
f2:b8:47:4c:13:bd:71:bb:03:bb:49:da:1e:d3:6d:
c3:71:9f:af:49:81:f7:da:ce:5e:f2:03:9a:7d:97:
42:29:65:96:00:50:79:91:16:14:1d:66:c9:f8:e1:
b0:f2:3b:fb:72:31:d6:a1:74:0e:1c:36:b0:61:07:
57:eb:87:ae:25:a5:ae:df:e9:dc:ad:33:02:94:1f:
5c:81:83:7d:0e:28:71:51:c1:d6:cf:2a:3f:76:0a:
00:34:08:98:0c:4c:73:78:7a:c8:ba:8e:e2:f2:96:
db:01:52:83:08:1c:55:cd:7c:a2:f3:86:f0:1b:11:
03:ed:43:42:7e:c6:87:fa:41:fc:da:5f:ea:a4:75:
46:a5:4a:77:ae:b0:90:33:5d:37:e6:ab:91:ca:21:
53:4b:4c:25:eb:3d:0f:7e:c1:ef:14:ce:32:12:7f:
95:8d:bd:3a:69:f9:95:e8:a1:03:55:d2:78:11:00:
3c:99:63:a8:0b:c0:03:e8:d3:1f:64:00:ad:c6:f3:
08:d4:23:d9:4c:0a:42:52:a4:50:6a:ec:63:58:ea:
fd:61:4b:5e:de:13:c5:43:32:dc:dd:0d:27:4d:b5:
a2:72:37:96:80:33:de:9b:96:a8:b4:49:24:8d:12:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0C:82:F1:2C:25:5D:AE:68:BB:95:DD:E2:8A:DD:DF:C8:B3:A2:E6
X509v3 Authority Key Identifier:
keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:42:90:b8:0f:e5:92:98:70:2c:5d:a2:c2:40:4b:22:2e:a0:
66:7c:69:1c:da:66:40:a0:71:8a:35:2b:42:b7:e5:b3:00:a4:
1f:44:b4:27:f8:31:a2:c0:ef:df:7c:a0:07:66:73:63:c2:76:
e2:f6:9e:57:d7:00:ea:af:eb:fb:0d:73:c1:5e:9e:49:eb:b1:
88:59:06:e7:b7:c3:e2:f7:19:61:2f:d4:4c:b7:1a:75:8e:73:
cb:6a:d6:12:28:9a:52:94:f1:96:70:4d:f0:84:4d:aa:05:e4:
ad:65:9f:79:cb:b7:f1:66:a9:28:93:41:b9:ab:29:5c:a8:22:
52:8e:49:c2:e8:00:48:9d:e2:6a:af:10:08:0a:e3:a4:00:42:
ea:3a:c8:ae:10:c7:e5:78:79:cd:27:7a:e3:27:d1:7b:be:de:
4c:a9:06:3c:cd:72:9d:ef:47:8d:0c:19:9c:fa:d8:31:35:10:
1e:c4:fb:ff:0c:75:ea:64:c1:0f:37:8b:b2:05:97:cd:7e:f4:
cc:21:60:8b:e2:5b:32:ad:23:b1:33:68:ff:16:4e:3f:86:20:
8f:87:d0:66:70:ea:d4:89:89:ac:4c:a2:6d:6c:ae:da:48:c3:
3c:ba:09:f1:d4:76:c1:a1:b9:5f:fa:44:f4:78:9d:84:a0:f6:
7c:0a:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:47 2026 by rpki-client