
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier: K4Rbj2bXU+uEy7YmVudkhdNCXG6+oteUmkYlxsNOd8w=
Subject key identifier: F7:92:57:C6:64:B4:CC:2B:1F:7F:7C:2F:96:D0:98:9A:33:3C:A2:21
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number: 02D0
Signing time: Wed 22 Jul 2026 22:28:53 +0000
Manifest this update: Wed 22 Jul 2026 22:28:53 +0000
Manifest next update: Wed 29 Jul 2026 22:28:53 +0000
Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: CU55Q4aqWiOaPKerIA5d24P6KNoFtv1B5BPXBkpjn8s=)
2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Validity
Not Before: Jul 22 22:28:53 2026 GMT
Not After : Jul 29 22:28:53 2026 GMT
Subject: CN=6a614425-81ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:ba:57:bd:12:2f:40:71:3b:ef:36:eb:bd:
b9:04:f3:54:7c:9d:0e:1c:c5:f7:6f:62:6d:92:b2:
26:a3:90:c2:4b:34:ee:4a:93:4c:5c:f0:06:72:15:
1e:9e:92:7c:04:48:f8:14:e3:b9:a0:5a:88:6d:5c:
6c:8a:a2:4f:51:f7:9d:8c:9f:99:af:d9:4c:a5:54:
f1:3f:90:fa:46:83:c2:9e:89:ce:0d:8f:99:ad:97:
de:d2:a5:0f:d4:43:17:2d:5f:02:6b:df:8d:2c:5e:
41:bf:79:54:49:8a:d1:23:33:37:07:8d:cd:43:b8:
61:c5:57:47:54:e5:b7:8a:e8:13:ed:4a:b3:ae:e9:
f4:56:ef:82:17:d4:14:ed:23:9b:8b:14:ef:2c:45:
3d:95:47:cf:bb:3d:e2:5d:a0:02:51:86:ee:d8:0d:
97:a5:6e:05:b5:6a:aa:b6:cc:15:dd:02:0e:46:cb:
51:e0:6f:aa:e8:eb:f8:1b:d9:b2:1a:07:fc:be:d3:
76:e0:f3:1f:ec:45:f8:86:f3:a2:e2:94:2e:42:69:
92:6c:3a:cf:49:f5:88:6d:26:38:88:87:c2:c2:85:
11:f4:cb:f6:7b:f9:0e:95:2f:d8:1b:eb:fc:67:76:
5c:11:ad:19:c1:6b:9d:a7:30:20:eb:8e:10:4e:5f:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:92:57:C6:64:B4:CC:2B:1F:7F:7C:2F:96:D0:98:9A:33:3C:A2:21
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:2f:30:d3:d2:0a:fb:cd:8c:aa:08:3f:93:6b:c8:bc:2c:df:
9a:57:ff:05:94:66:bd:95:78:ef:60:a0:d7:dd:9b:29:99:f3:
42:33:20:bc:88:16:51:fe:af:9a:b7:6e:20:0f:ce:79:f4:87:
49:3c:50:74:1f:76:02:aa:fe:37:47:6f:a1:13:91:54:74:d0:
30:9b:5f:aa:de:f3:b7:ff:b2:11:f7:4c:e9:c2:15:ae:67:40:
4b:37:ee:72:3d:86:3a:4a:e6:09:66:ef:71:64:cf:c6:e0:cf:
93:38:59:06:39:1d:d4:8d:83:c8:71:ba:f0:04:4a:c2:62:bd:
f3:20:ec:2c:28:15:75:18:ba:b1:ba:e9:3d:fc:dd:a1:a9:f5:
13:9f:a0:6b:1f:5b:86:4e:0e:78:c4:fd:7d:a0:23:af:a0:5f:
28:12:62:cd:81:87:16:d5:4f:73:7e:e1:3c:bd:23:91:62:84:
cd:50:37:68:70:3d:d3:fe:92:9a:a6:17:4a:73:47:f2:89:85:
e9:88:e7:60:96:93:69:e6:6f:32:f5:73:39:85:cc:31:cc:9d:
d5:24:13:44:a5:5e:8a:6c:b8:ae:f3:47:9b:1e:26:a0:7c:c9:
fd:62:7f:e0:17:8b:04:b2:aa:df:2a:6b:5f:da:8c:c5:dc:6d:
4d:e2:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:32 2026 by rpki-client