
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier: Z6H13i1L+Dut6SHbRgVXBBvZeKlu5fwdJ8B3HYZChvU=
Subject key identifier: 3D:D8:DD:5E:37:34:C9:26:17:D9:86:62:5F:0F:79:E2:09:E6:A8:FC
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number: C3
Signing time: Mon 27 Jul 2026 09:04:20 +0000
Manifest this update: Mon 27 Jul 2026 09:04:19 +0000
Manifest next update: Mon 03 Aug 2026 09:04:19 +0000
Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: zvm9kSdrYFZeB769er0rUVIW9KpxKrQT9y9xRVnAbwk=)
2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ZIVHyn4HDYxvTrf1jI6tJxVlx+GuNfOvlQ+9Flv3lLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Validity
Not Before: Jul 27 09:04:19 2026 GMT
Not After : Aug 3 09:04:19 2026 GMT
Subject: CN=6a671f14-60fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:14:81:34:f0:60:37:fe:7c:c4:d6:88:15:
03:ae:13:8d:b4:0c:b0:a9:dc:23:02:16:d8:40:88:
94:46:71:84:91:7c:c8:37:ff:23:c3:80:c3:52:e8:
ff:c7:fd:80:33:0c:10:6b:e0:8c:3c:f5:0b:c6:b2:
81:bd:bb:50:78:39:97:5b:22:51:c3:5d:10:30:85:
01:b9:7a:b0:f5:84:6a:97:a2:14:ce:17:6f:e4:b4:
b3:df:f4:fa:1e:3f:5e:20:72:31:1f:0d:4d:57:5d:
ec:40:45:ad:31:ff:ca:27:5b:90:7c:d2:4e:c1:24:
f9:1e:ba:21:5b:8a:17:3d:91:f4:72:07:6e:dd:86:
18:0d:53:a6:e7:70:f6:e5:78:74:0a:16:72:90:dd:
14:35:c1:c6:b4:0a:5b:b3:24:4a:96:f2:93:a7:88:
1f:9a:86:0f:c8:62:28:03:47:96:36:64:22:ef:c7:
ec:d4:d7:a3:5e:3d:9b:71:a7:2e:50:a3:66:a6:3e:
14:ec:f2:69:93:cd:6a:c1:ca:fa:89:3b:49:42:f6:
b1:7e:0d:61:0b:38:d3:e0:9f:bf:77:37:c4:f0:bd:
54:70:28:fc:4d:d9:63:8f:b1:7a:bb:e0:35:20:4a:
29:1b:ea:48:cd:3a:d9:16:30:c3:44:58:a0:46:85:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:DD:5E:37:34:C9:26:17:D9:86:62:5F:0F:79:E2:09:E6:A8:FC
X509v3 Authority Key Identifier:
keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7a:61:0c:3d:10:2d:e7:61:9b:14:d7:4e:c2:c2:4f:bc:fe:
96:ef:03:45:52:72:45:7e:61:d4:a0:0a:84:c5:5f:8b:f3:1e:
7d:5d:08:4f:3f:e6:6f:7a:61:b4:67:27:3c:8c:da:81:57:f7:
6f:88:f0:6d:e8:8a:c0:96:cf:0d:97:39:b6:07:a4:c0:36:58:
78:ec:51:7e:a6:38:2f:d1:8f:0e:ad:61:3c:a9:35:90:ed:8f:
6b:5b:32:40:3b:88:be:0b:f5:73:83:a5:b3:18:d1:95:69:c8:
91:81:93:37:e1:bf:24:83:df:30:26:ba:d4:13:0e:39:9e:56:
2a:74:85:c9:c0:10:70:bc:e0:40:c1:a7:50:86:b1:c7:b5:b4:
bd:17:be:a5:82:32:c6:32:1e:cb:fb:8c:44:21:76:09:f4:1c:
dd:3c:6a:04:d1:fa:ac:09:42:22:8c:17:3b:ae:39:90:0e:13:
5f:f6:ec:0b:01:fe:9b:5d:62:ac:ce:ab:f0:7b:1c:1d:83:ab:
a6:ae:22:ee:2a:82:eb:68:ce:cf:67:b8:aa:da:b5:f7:27:ea:
7f:1c:9a:cb:18:28:1f:12:e5:e5:62:2c:14:85:10:ea:ad:1f:
db:f9:d9:40:f3:d6:2c:04:54:af:85:88:bd:ef:e8:43:c2:c5:
1f:cc:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:07 2026 by rpki-client