
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json)
Hash identifier: ugGHkqJnI/Z22dgh+2jbPO8ayhiLDxHGa6tmEOdDxfY=
Subject key identifier: D5:1F:58:88:71:88:CD:B9:2E:CA:7A:07:8F:56:7D:7D:EA:44:4F:4C
Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
Manifest number: 027D
Signing time: Sun 26 Jul 2026 15:58:12 +0000
Manifest this update: Sun 26 Jul 2026 15:58:11 +0000
Manifest next update: Sun 02 Aug 2026 15:58:11 +0000
Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: EBH1kJm+T5gBkh9JmzHQJSRFzTvKekSa+Rt+OAb3QOg=)
2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: 49BUIWXY2kRKbxVwv8L7UkKYY+v5irFyHsawrnEYjXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Validity
Not Before: Jul 26 15:58:11 2026 GMT
Not After : Aug 2 15:58:11 2026 GMT
Subject: CN=6a662e93-398d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:32:30:10:37:50:ea:40:6b:41:1e:80:b8:
9f:8d:12:85:2e:13:f1:1b:be:f4:e8:66:5c:a2:77:
c2:aa:6e:b3:5f:69:3b:e1:02:b8:6f:f3:4a:09:28:
d1:d0:0e:48:dc:bb:05:18:ed:88:49:d1:8a:4b:8c:
79:93:36:e6:d3:86:3a:e4:0c:d7:bd:2e:03:01:36:
f6:b0:9c:3b:dc:da:83:63:38:8d:5a:e7:14:7d:bf:
00:9c:77:b0:c7:cf:13:7e:98:0a:76:48:b5:b1:89:
c1:a1:8c:71:a1:f9:8f:99:6d:75:84:cb:cb:d5:33:
12:ad:2a:db:a7:7e:5c:e3:49:b4:04:f2:dc:c3:db:
75:96:bf:aa:f2:01:96:70:12:1d:bc:41:f7:a9:ea:
8f:e4:fc:3b:aa:4c:5b:ff:11:08:06:dd:22:bb:dc:
86:31:0c:22:99:5c:59:b4:16:4c:6e:30:f4:ba:3e:
65:a8:48:69:2d:aa:70:ef:5d:cd:e2:b1:33:70:39:
30:d6:2c:0d:f0:b2:b9:be:05:40:73:d3:f2:d8:fb:
18:62:72:31:56:a4:df:9c:a9:e2:cf:56:7b:4c:d9:
6c:3d:d4:04:15:16:da:77:dc:02:7d:38:9a:3c:bf:
94:6b:cf:8b:cb:ab:bc:f1:40:5d:85:a6:42:94:e3:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:58:88:71:88:CD:B9:2E:CA:7A:07:8F:56:7D:7D:EA:44:4F:4C
X509v3 Authority Key Identifier:
keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b2:04:c2:dc:d9:df:58:1b:e0:d8:3b:e8:b2:e9:09:97:67:
b6:51:a6:78:9f:b0:26:02:de:5e:7f:9e:f2:54:0a:83:4a:07:
b4:cf:64:17:51:aa:d8:bd:80:6f:7b:cc:d8:f8:08:4a:92:c3:
b5:9f:91:10:f8:2f:db:e6:15:95:17:ba:69:15:c3:a5:48:be:
1d:c1:8c:f2:30:76:df:26:01:05:4a:64:ae:b9:63:9a:49:02:
7c:70:6f:b0:a6:9b:39:eb:fd:38:a3:e1:33:e3:c7:d6:0e:64:
b3:39:ee:1d:0b:ca:2b:68:15:3e:d1:fc:0b:d2:53:78:68:6b:
b3:53:bf:5b:e7:ec:4f:7d:81:0d:e1:92:69:b9:26:1d:5a:ac:
93:cd:a9:12:2d:50:a8:53:48:dc:53:4f:07:ae:28:10:a6:7a:
f4:94:01:ff:07:41:3e:ec:05:ae:0a:c4:22:8a:e4:c8:c8:74:
b6:63:25:44:d0:1d:f2:84:0c:ca:6c:25:31:eb:19:f1:69:da:
6d:fa:51:4e:00:c6:33:20:a1:c5:8f:3d:cf:54:73:b3:e7:01:
13:17:e3:21:64:32:f8:4e:0c:3a:c1:5a:2f:54:d2:dc:0c:be:
d6:ff:72:c3:94:7f:45:69:50:32:41:d7:d4:ec:6d:00:11:50:
b8:af:1f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:34 2026 by rpki-client