
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json)
Hash identifier: LEC9LdT3Aew3NSrdpuQ4fnZDC9pvmuOKOJYO+lJGwFE=
Subject key identifier: CB:96:CD:E2:68:C5:C0:AB:DB:0A:A5:8E:9F:B3:52:0F:52:DE:9E:E6
Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42
Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42
Certificate serial: 03F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
Manifest number: 03D0
Signing time: Sat 13 Jun 2026 00:41:00 +0000
Manifest this update: Sat 13 Jun 2026 00:40:59 +0000
Manifest next update: Sat 20 Jun 2026 00:40:59 +0000
Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: dg0Y5Ly+Ca0U3rVwaG2K+8PEVMDtzBoVIc2OU3ntqUs=)
2: 595774341B6211F0B9733473C4F9AE02.roa (hash: FsghJjQsuRRGpnhop47UMyZjNIpI+E4uxqKOZi0XVJ8=)
3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: lkd89MpvF6HjrZnQ7+Am4kQJDo7BJMWf79Z8hJQl200=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl
rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1009 (0x3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42
Validity
Not Before: Jun 13 00:40:59 2026 GMT
Not After : Jun 20 00:40:59 2026 GMT
Subject: CN=6a2ca71c-f7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:7d:a7:b2:82:52:c1:38:1c:f0:bc:54:43:
1d:48:c0:fc:5e:6d:5a:69:f1:cd:d0:92:d9:90:bf:
76:25:f5:b2:2a:b1:27:23:57:b8:ae:7b:c6:96:76:
a7:3b:c1:92:2d:10:cd:f8:46:91:19:dc:6b:9f:e6:
63:68:dc:bd:21:8c:01:51:2a:37:85:16:4d:5f:28:
ed:45:05:4d:76:12:26:95:22:93:73:63:b8:13:8e:
ca:44:2e:28:5d:98:f3:43:71:8a:5f:83:2c:b6:09:
fa:44:66:14:9c:c2:53:0e:09:fe:e0:d3:e0:47:2d:
aa:9d:50:95:53:31:4d:53:25:f0:89:d5:fb:36:97:
ed:58:45:98:d1:0a:7c:d1:b7:71:80:a5:26:12:5d:
ef:83:d7:68:51:e3:f6:9b:7d:fe:eb:80:93:38:d9:
db:e6:5e:2f:6f:72:b6:2a:dd:bd:51:3e:93:ef:01:
32:99:14:86:42:6d:60:10:39:a6:bd:0d:a9:ed:8b:
3c:c0:be:a7:60:0b:be:f7:fd:f3:6f:b6:b3:ad:04:
f9:f0:bf:8b:64:13:f3:3e:9d:e4:ec:39:ba:7a:97:
6d:b4:eb:38:89:5d:43:ce:da:9a:f8:cd:38:b2:f0:
94:ba:e7:9a:08:d5:36:2a:f1:74:5e:07:48:c8:e5:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:CD:E2:68:C5:C0:AB:DB:0A:A5:8E:9F:B3:52:0F:52:DE:9E:E6
X509v3 Authority Key Identifier:
keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:e6:41:c4:11:5d:eb:7f:02:e8:25:f1:72:7d:9e:96:0a:49:
84:f5:8b:3c:57:d0:d6:4f:1f:d4:f9:40:d1:be:3b:e7:d7:2f:
57:1b:8a:e1:73:b9:74:42:1d:07:5e:21:ae:9c:49:2e:3d:03:
32:66:a7:51:4b:26:1a:8f:a2:1e:68:e0:fd:cd:6a:2e:80:89:
90:93:86:c0:4c:c7:13:ae:4f:75:e8:38:3d:a7:0a:6f:4a:48:
59:0e:86:06:ec:3b:38:92:db:9f:bd:06:68:f4:8c:ab:b6:c9:
2b:70:a5:7a:e4:ee:14:ec:be:4a:17:1c:c4:10:33:52:4d:23:
16:65:cf:21:4a:56:c8:66:67:a0:02:d1:66:5d:6a:ac:ff:55:
60:54:d1:db:1b:0e:50:4a:75:26:37:55:ed:6a:e9:1f:94:6f:
33:16:b9:ae:e7:51:32:df:42:b3:0f:b9:07:fc:bb:df:b8:8e:
dd:c0:13:ce:2c:aa:d1:24:26:61:b0:52:36:02:8b:94:aa:b7:
88:05:50:a2:16:12:62:c6:df:17:6b:fa:b9:82:eb:d0:f9:48:
51:95:22:d4:10:e5:e0:d4:21:5b:7f:b8:ec:43:77:9a:85:40:
6e:5f:e1:6a:e4:45:2f:50:30:f3:20:cd:83:b8:16:e3:75:77:
43:94:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:22:58 2026 by rpki-client