
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier: eiHgov3k6krhdvncwOEWQzPlQyqxQc0CNhDnb1jfZg8=
Subject key identifier: B9:8A:65:B7:C4:2B:42:96:69:AA:D9:8B:72:BC:51:E4:46:DF:61:CA
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial: 0B36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number: 0B2C
Signing time: Sun 26 Jul 2026 19:43:10 +0000
Manifest this update: Sun 26 Jul 2026 19:43:09 +0000
Manifest next update: Sun 02 Aug 2026 19:43:09 +0000
Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: FpJc5ygICX+qERSo8EOnXt0Vfh1Qda4fMFTjuVrz948=)
2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: r0lCb8PmrHuRVFml8CXtx2AwxypyCR8m21BT5Lcfkrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Validity
Not Before: Jul 26 19:43:09 2026 GMT
Not After : Aug 2 19:43:09 2026 GMT
Subject: CN=6a66634d-9152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:eb:d7:5f:61:98:e0:11:15:e9:10:fc:8c:
45:4c:ca:e2:75:ff:a8:14:34:91:24:3a:32:44:eb:
0b:38:71:9c:05:61:9a:13:4d:53:47:e1:cc:c8:02:
26:5e:91:63:32:84:4a:f6:2c:dc:e8:90:f2:5e:9b:
b2:82:cd:20:ed:f2:d0:83:70:0e:e2:e9:ae:5a:be:
2b:f8:b6:d4:d1:22:93:86:1f:29:0f:35:f2:7e:12:
52:77:ac:d1:2e:eb:94:c9:e1:44:1a:78:c2:4d:07:
ec:4c:89:a9:5b:b4:4b:2d:21:62:8f:fc:64:e0:5c:
3a:4c:4c:46:a0:9c:20:9e:ac:de:ca:44:bd:a2:37:
7f:ae:59:80:b3:67:a9:bb:c1:f3:c4:48:cb:15:8b:
e4:35:07:82:6d:5d:9a:67:32:0e:c2:52:ab:18:44:
3d:ba:06:38:f5:4b:f7:06:81:13:f0:e2:e1:c2:9c:
22:21:15:4f:51:d4:22:e1:b9:c6:2d:5b:53:47:36:
95:71:6d:60:b7:d3:59:2a:ca:29:b5:4d:70:c8:d6:
36:c3:dc:36:0d:a6:93:29:21:60:28:7b:d4:31:06:
04:68:f4:ca:69:36:f4:40:96:e1:97:04:45:ca:5d:
0e:67:0a:4b:d1:b4:34:f6:0c:97:7f:06:5c:16:f0:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8A:65:B7:C4:2B:42:96:69:AA:D9:8B:72:BC:51:E4:46:DF:61:CA
X509v3 Authority Key Identifier:
keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:a2:01:a1:9d:6f:8d:0d:1a:c3:c4:48:e0:c5:6a:9e:ac:35:
5c:99:77:54:2a:f1:d2:a8:38:00:aa:22:32:4e:6b:ab:61:67:
5d:35:41:2e:bb:d6:14:b0:e4:e4:c4:f6:22:69:70:3a:09:f8:
81:e1:fe:b0:19:6d:06:96:9a:fa:0b:36:e0:f4:ad:30:06:a8:
c4:bc:f3:63:8c:ea:70:27:da:81:d3:25:20:4d:1a:46:87:e3:
11:fe:24:61:ee:da:f4:30:3e:d0:19:9f:7f:57:03:43:47:94:
20:6f:3d:48:0b:c7:52:1c:82:35:60:ba:04:64:5d:51:f4:49:
bf:ed:57:e4:01:17:9e:79:48:bd:27:af:05:8a:ca:e1:2a:cf:
89:bb:17:23:6f:48:11:0d:be:da:70:8b:ac:ce:42:29:a3:13:
c8:40:9a:d0:23:06:ac:47:98:be:1d:68:63:03:0a:9c:6b:c2:
81:e7:fb:54:e4:a8:14:f5:e4:69:16:0e:38:79:3c:45:ed:3b:
9d:99:0b:ab:4a:33:83:29:53:9d:78:b2:27:2c:27:a7:53:34:
2b:7c:54:a0:56:1e:da:62:aa:f9:f1:d0:c3:b4:36:ef:84:e3:
ca:ee:b9:df:82:fa:56:a3:c9:43:31:c5:04:57:21:75:03:06:
c9:6f:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:12 2026 by rpki-client