
$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json)
Hash identifier: z1eCnMUwHlgrjGRyW/9g4+b6QJD+QKAUdkFgcYhI1p4=
Subject key identifier: 6A:D5:5A:C1:E3:8C:B8:B5:43:B5:74:40:B9:3B:FF:6E:8A:DA:04:92
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 0840
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
Manifest number: 07EC
Signing time: Tue 12 May 2026 21:38:43 +0000
Manifest this update: Tue 12 May 2026 21:38:43 +0000
Manifest next update: Tue 19 May 2026 21:38:43 +0000
Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: Y4dRRpBJMT0bWk1IQWnztegRjknfBs9q9PmtrIVv4X8=)
2: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: R34hnb67EtA7MxdkNi5WSU1aixEiNDr681Fh+Yd4Kag=)
3: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: iWVOHg6QDBIqMpA3MO5LObP6AHCPSfyjRAL55UZ4G0g=)
4: 8BF305A2F44711F0849EF3E6616F56BC.roa (hash: 8FXTDQ3pdrB9lI0tc6cwlsOBLuq+7Ubnrq4d6bTJfQo=)
5: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: yqzH+VRJDdIn8v1i8jejnoTV03RvjOrdo0NsV1Hhxj0=)
6: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=)
7: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: LJbta/JJVJ23WgZ0akF5Ov55pEZeCXuRcU1xDJv2re0=)
8: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: BtYPWm6haSNi67HssCRHuMs+/2A6YgL6H+ZvBM2G+Lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: May 12 21:38:43 2026 GMT
Not After : May 19 21:38:43 2026 GMT
Subject: CN=6a039de3-207a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:ff:86:4a:49:9f:06:76:db:19:1b:2b:45:
48:24:43:c9:c9:12:7e:9d:77:28:e0:79:4f:2e:c5:
f2:a9:59:c6:8a:82:ba:8c:b7:96:83:7d:7f:8c:2a:
42:d8:59:44:f1:09:5b:50:61:01:40:34:4f:07:13:
4d:4b:9b:b1:86:05:fc:ca:5d:f6:73:35:46:84:c7:
fa:18:6e:bc:ec:d4:85:e0:a2:15:9c:f4:a0:2f:2e:
70:da:76:f3:b8:48:68:7c:06:f0:b2:3b:4f:28:50:
88:c4:63:95:6d:e1:6b:99:0e:27:97:e0:5f:50:8c:
9e:9d:2d:b7:63:69:a4:05:72:c7:20:c6:aa:bc:ed:
8a:78:cc:e4:c4:e2:35:f9:f5:e7:08:d9:4f:d8:57:
34:7c:5a:4e:24:bc:e0:48:34:b3:de:94:db:1d:fe:
87:56:e9:76:07:ce:31:51:f1:38:c7:bd:8f:24:b8:
db:62:a1:34:db:9e:65:94:42:fb:2a:d5:d9:73:42:
86:09:ab:1f:41:87:dd:3e:d4:37:9b:df:47:9d:98:
0f:6d:a8:3f:a3:3d:28:ab:a7:e5:7c:f7:62:ea:4e:
95:5c:02:e5:96:74:42:d8:89:9e:b4:d9:f3:57:90:
96:fb:f5:4a:ac:d9:bc:81:be:48:50:d0:dc:28:4a:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D5:5A:C1:E3:8C:B8:B5:43:B5:74:40:B9:3B:FF:6E:8A:DA:04:92
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:01:58:c4:21:18:31:fa:64:83:23:80:af:25:68:6e:55:8a:
1c:f8:80:9e:d5:08:c9:d6:02:98:fd:c3:81:7b:98:5d:c0:74:
45:f9:5e:3e:6a:c5:c6:87:46:e9:2a:9a:06:10:f5:36:66:a3:
4c:50:a9:81:e7:ff:13:c3:9e:f2:53:26:d9:49:6e:05:55:a5:
e6:d4:ac:7b:bb:d6:b7:82:0e:c2:5e:af:d2:2a:7f:be:7c:e6:
ed:9a:0e:cb:85:c8:97:09:1c:11:e0:c5:81:97:93:8b:a0:7a:
8b:cc:de:a7:dd:c8:09:25:3d:9c:ef:d0:27:fe:46:ee:f3:7c:
30:e9:40:4b:d8:84:ae:72:3b:07:07:c1:1c:19:9e:e7:a5:9d:
ab:13:7c:e7:7f:5d:ce:73:80:b8:a6:58:fa:53:38:79:df:19:
cb:4b:90:c9:bb:aa:b2:1a:0a:ce:98:57:ed:09:9d:d4:67:1f:
5a:0b:c7:bf:fb:8d:2a:dd:ca:07:b1:a1:16:dc:58:2f:06:a8:
1d:63:af:26:9d:b2:d6:20:c6:69:99:10:d0:fc:3e:0a:e7:9b:
a1:8a:d9:a1:e2:d8:0f:4d:22:34:02:00:8d:a3:60:34:9f:ed:
14:d6:51:46:df:ac:48:1a:2a:7d:8c:4c:15:63:0d:a3:d9:b5:
ce:fe:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:32 2026 by rpki-client