
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
File: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft (raw, json)
Hash identifier: 5cF4o0ytj/n5traX6kZpnaH7rXudn2kbfvs+4goAypk=
Subject key identifier: 66:81:A8:51:CA:DF:20:3C:FA:3A:4F:9F:F1:97:E9:9F:C7:BA:BE:C6
Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E
Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
Manifest number: 5C
Signing time: Sat 13 Jun 2026 08:14:01 +0000
Manifest this update: Sat 13 Jun 2026 08:14:01 +0000
Manifest next update: Sat 20 Jun 2026 08:14:01 +0000
Files and hashes: 1: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl (hash: xhywi8OYOYBzi13pbCzPaL5rmMg5B5ubGOtE2bVUJmM=)
2: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (hash: FGeU1tZaj6B6d9kcXemk68XFxPuUp5ULKxFkHVuu17c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl
rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E
Validity
Not Before: Jun 13 08:14:01 2026 GMT
Not After : Jun 20 08:14:01 2026 GMT
Subject: CN=6a2d1149-e8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:3d:5a:b2:8a:25:d4:97:1e:bb:2e:65:77:
36:51:9c:7e:7b:48:e7:9d:70:12:f3:45:20:4d:dc:
0e:58:f3:77:26:b7:20:d4:bc:fa:4e:ea:3a:f1:85:
c9:45:97:d5:59:78:7b:1d:88:14:04:da:2c:4e:7a:
c5:f1:0a:f7:7a:8d:62:64:a6:ac:dc:f6:85:9f:73:
12:40:f5:0c:0d:80:d9:21:54:2f:70:6e:bf:44:36:
b3:7c:a9:7e:72:52:cf:24:6b:49:cd:25:c8:45:51:
5a:f9:ca:f9:5a:79:3b:78:22:ef:06:fe:65:07:83:
db:c3:74:81:1b:97:ca:48:de:3b:5d:a8:d7:5a:0d:
79:22:bd:8a:d7:30:26:88:fb:5e:11:86:6d:00:2f:
38:6c:80:ed:39:3a:d9:c9:ba:82:d7:6f:9b:88:76:
f3:13:af:3a:c9:31:ea:43:e2:d7:12:0b:85:71:85:
81:8c:1d:b6:39:8b:c0:92:43:9b:79:d3:6f:49:ec:
e1:8f:ed:7c:14:0f:b5:9d:64:f7:88:74:14:21:cf:
a8:14:10:57:52:8f:6d:74:d2:30:2c:a0:36:6a:d7:
55:ce:9c:bd:83:97:0a:e9:81:69:03:cc:07:ff:b2:
f8:95:82:27:d7:a1:f3:f1:6f:0f:56:0a:76:9d:c6:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:A8:51:CA:DF:20:3C:FA:3A:4F:9F:F1:97:E9:9F:C7:BA:BE:C6
X509v3 Authority Key Identifier:
keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:4a:22:11:69:a8:71:78:80:63:0e:9d:5d:19:28:13:a2:b7:
06:d7:50:55:ce:59:75:45:34:f2:36:6a:14:2c:65:44:55:bb:
ef:10:08:22:78:d4:0d:8d:ef:e9:f5:a9:b9:a7:79:4b:0c:ca:
7e:f2:8f:49:27:30:ea:c5:16:92:ad:1c:66:9c:30:59:19:9f:
57:29:d3:fa:a5:25:ac:8e:e7:d1:a6:e9:3d:e2:75:68:c1:7e:
8d:94:d5:db:27:c5:20:27:6f:f5:79:b7:d8:52:af:60:99:3a:
66:68:66:df:f5:f2:a4:40:c7:9d:91:24:80:11:a6:98:7e:79:
c7:80:34:1f:75:4c:cd:7e:a8:96:b4:cf:b3:4b:b1:14:b1:49:
79:05:6d:79:d6:44:d2:0a:3c:ce:04:15:cc:0c:c7:3a:94:3d:
a1:55:78:5e:39:7a:90:c4:7f:fb:9d:42:34:ed:b2:9b:0f:43:
66:8b:50:8a:44:28:92:66:32:0e:b7:3b:7c:b2:7e:17:b6:34:
45:e3:2d:18:37:f9:c0:9d:3f:44:5c:ee:f0:5a:dc:4f:c9:50:
29:8d:8b:60:b6:e9:ac:4f:06:75:c6:84:1b:64:e4:39:6e:5b:
3d:5c:8b:84:df:d9:60:b5:8a:10:e4:b7:b0:16:b7:e2:97:c8:
e8:89:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:26 2026 by rpki-client