
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier: I1MyRjOVzmd1IAmyYPHxEEd+ZNBzV7HVoOaQVvhG3Z0=
Subject key identifier: 28:44:21:0D:F1:7E:A5:B8:6D:97:DC:4F:0D:1E:5A:0C:56:B5:5B:1D
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number: 01C9
Signing time: Mon 27 Jul 2026 05:31:57 +0000
Manifest this update: Mon 27 Jul 2026 05:31:57 +0000
Manifest next update: Mon 03 Aug 2026 05:31:57 +0000
Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: I6QjtuSqK17mAD18RRBkgzh4czSF9z+/85Zxi6xhVDU=)
2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: FMQ4cQsw3VD3QYGrAPTdPSBgnIKTRxDIrjgjXzARTlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: Jul 27 05:31:57 2026 GMT
Not After : Aug 3 05:31:57 2026 GMT
Subject: CN=6a66ed4d-c2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:dd:f0:21:f9:62:d6:83:84:61:b6:9e:4a:
93:fd:ed:ed:83:d8:0b:d0:b5:c3:97:19:43:68:c0:
00:0f:57:69:3d:46:7a:22:a7:ce:98:98:ad:3b:b1:
c1:2b:32:74:7d:cf:d5:91:59:28:9b:f5:4a:a3:f0:
92:27:2f:b5:27:22:ab:4f:be:b4:2c:e0:d8:ba:a5:
6b:5c:72:ec:1f:ae:99:9b:a4:91:40:17:f0:f1:50:
4a:ac:61:6b:37:39:a4:8f:8c:63:4e:2c:5c:c7:8b:
e0:99:b0:4b:29:83:a9:19:c1:c9:5a:84:64:10:f0:
bf:90:0b:c8:a3:1f:7a:28:6f:74:b7:2d:a4:4e:e5:
45:87:7e:d1:ee:cb:94:e3:13:7b:9a:54:fd:b9:3d:
d7:e1:3e:c6:9c:dc:b0:fa:ba:74:45:71:8d:a1:e4:
e0:36:99:91:c8:31:a0:c0:97:82:17:ae:4d:f9:a1:
21:1f:90:35:7e:7d:f1:3c:35:33:ba:04:93:c4:3b:
db:d4:79:83:40:cd:f3:31:82:af:ec:64:66:7f:16:
a1:f8:94:2e:02:68:55:1c:6f:5f:cf:3c:20:36:53:
1e:87:c4:b2:be:ce:5a:c2:bf:72:fa:71:78:5b:01:
b0:33:62:88:fd:26:39:d2:db:98:48:f3:86:b0:04:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:21:0D:F1:7E:A5:B8:6D:97:DC:4F:0D:1E:5A:0C:56:B5:5B:1D
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:c2:f4:18:6b:4e:b4:b2:fb:e3:39:ad:53:be:e1:5e:0c:64:
35:2a:4f:cf:c9:6e:87:38:6f:eb:48:61:ac:a7:f0:a8:8a:d8:
3e:47:b4:0d:71:c5:fd:ec:1d:c6:80:93:aa:8d:5d:47:eb:51:
c7:b1:4b:5d:d2:aa:f8:b5:ec:db:de:7f:f8:08:d7:c9:b3:82:
bf:15:9c:1a:36:88:a0:00:42:64:3d:a7:56:a8:53:78:24:de:
e4:e2:c4:fe:7b:a7:b8:5a:72:22:08:13:99:d2:8a:76:51:b1:
e3:a1:09:ca:b3:5c:1b:00:12:2d:bb:e3:45:c4:14:49:a8:1c:
bc:be:2b:6b:9a:32:e2:7c:cc:fe:45:a9:98:a1:89:70:3b:c7:
bd:da:8b:9f:72:43:b1:3b:c8:93:8b:46:f1:72:b0:89:0c:f9:
81:7d:7c:38:4c:1a:c4:37:93:46:56:3b:5c:55:57:34:e4:64:
91:51:86:8f:40:13:27:00:71:26:bf:55:a2:77:68:11:ea:84:
33:0d:0d:94:2e:02:89:19:bb:ad:3e:a3:30:5b:42:e9:51:d3:
da:a6:77:02:55:dd:d5:31:ff:e2:d4:12:de:f3:98:24:f8:78:
94:f3:90:23:3b:2a:df:d2:3a:d4:8f:9c:37:db:24:ac:ed:e3:
53:12:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:39 2026 by rpki-client