
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json)
Hash identifier: DAOsueC4+5WZYdxRjDercAyn8jbrdcJzpHzCEHB6QmE=
Subject key identifier: BA:A6:98:A8:41:35:79:45:5E:56:09:97:06:37:E1:36:33:E3:5E:33
Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Certificate serial: 3562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
Manifest number: 3560
Signing time: Wed 22 Jul 2026 14:50:55 +0000
Manifest this update: Wed 22 Jul 2026 14:50:55 +0000
Manifest next update: Wed 29 Jul 2026 14:50:55 +0000
Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: Ts7F5dRrkRaTFyouT4vAJqUazEugamL7dEBeaKghqSg=)
2: B214E89862DF11F1B42E082E6B47A888.roa (hash: 67D5OAf3QDK83q26hEzjDiIhbelSrK6yBD/M0iQ72XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13666 (0x3562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Validity
Not Before: Jul 22 14:50:55 2026 GMT
Not After : Jul 29 14:50:55 2026 GMT
Subject: CN=6a60d8cf-8fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:42:ea:37:32:e3:bd:5d:2f:57:bf:46:b0:
e3:a1:a3:07:28:f5:83:75:76:36:e5:5f:9d:19:5f:
fc:8a:4e:46:78:58:6e:34:0e:f2:8f:41:8a:80:c5:
30:1d:4c:6f:a0:ac:29:96:37:a0:54:18:10:93:1d:
57:06:d7:a9:f4:77:49:74:a3:d9:46:37:86:8c:54:
f5:34:05:98:02:f4:8f:16:a5:c6:05:fe:a9:7e:3c:
2f:78:f4:86:5f:6a:f9:34:66:93:96:69:4d:28:d5:
2a:30:c6:6a:55:79:57:0b:49:85:81:32:af:e9:16:
0c:81:0f:a5:51:d5:2f:60:e2:78:4c:5f:ff:6a:56:
0b:5f:51:0c:fe:34:d7:ca:02:c3:f0:55:40:fc:82:
ee:d1:07:7d:8a:72:e4:8f:cc:ca:12:4f:c3:11:02:
85:99:37:62:09:5c:95:fd:88:73:44:02:9b:05:75:
ef:ca:61:39:ea:d5:b8:a7:74:e3:70:e2:14:46:79:
ac:30:b0:41:63:f1:91:d1:62:23:9e:8f:81:ca:52:
13:50:a0:d4:5b:c1:43:5c:b8:d1:a3:2a:30:cb:49:
0d:1a:e6:d9:91:d7:f5:81:06:59:ec:12:43:3e:f9:
2a:e3:6b:84:8c:76:b9:06:b0:8c:b1:3e:2a:89:7d:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:98:A8:41:35:79:45:5E:56:09:97:06:37:E1:36:33:E3:5E:33
X509v3 Authority Key Identifier:
keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:7b:3a:fb:b0:34:a3:f9:3e:d8:a1:ba:b5:ef:ea:95:01:36:
62:ed:95:8f:53:5d:4c:64:65:f3:da:98:6f:f5:32:5d:d0:cc:
4d:1f:ab:45:3d:54:9c:c4:7c:87:e7:2e:2a:ed:6b:1d:fa:e5:
76:56:72:b5:5c:00:e2:b8:4f:3b:2c:b2:bd:1a:4a:f7:2b:52:
90:1f:bf:b6:85:cb:3b:17:2b:45:74:af:ea:86:58:62:4b:a2:
fb:42:cc:33:61:e9:1f:9d:7f:6b:1b:2e:26:a8:fa:f0:7c:ee:
94:01:09:12:fd:af:78:e0:fd:4f:0a:94:d0:31:e4:0d:75:a7:
60:1f:52:c9:66:e5:e2:d8:ec:7b:18:a9:f0:36:e9:d2:3f:52:
ca:d7:36:eb:b1:d3:18:b2:bc:98:11:23:a9:8d:c1:5e:f2:d4:
88:44:18:4b:98:a7:e1:5d:67:a3:b0:ad:e6:4d:e2:79:15:fb:
40:7c:dd:d8:47:86:26:38:1b:d1:be:34:fa:4e:af:eb:cc:79:
cc:4a:86:72:24:30:98:8a:f7:ed:f6:8a:7a:04:32:ae:bf:8e:
05:06:b6:ef:05:b8:ac:cd:8e:a0:d7:e9:ed:08:55:4f:70:1f:
3c:ad:e8:84:03:05:9e:c7:fd:64:0a:7a:a1:b6:07:a2:dc:66:
63:87:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:39 2026 by rpki-client