
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier: 2a/BSsCJboQJE+yDFrmoZHgLzDN/ldcF0ON8XpO2WYA=
Subject key identifier: C3:99:F6:52:3D:3A:40:10:8C:7E:2E:A1:E4:B4:F2:7D:88:BC:CF:6A
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial: 0C3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number: 0C30
Signing time: Tue 12 May 2026 15:12:11 +0000
Manifest this update: Tue 12 May 2026 15:12:10 +0000
Manifest next update: Tue 19 May 2026 15:12:10 +0000
Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: kBc6F+x3KY4+hYYECjKJShDtZfb31SHUuYX7MxE6BgY=)
2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /lTemBonHucyHdLH99iEZJS0pkpWT8EtwFhDtf78iXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Validity
Not Before: May 12 15:12:10 2026 GMT
Not After : May 19 15:12:10 2026 GMT
Subject: CN=6a03434b-872f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:63:91:26:74:6c:83:47:7c:dd:a7:4c:20:
bf:31:ea:df:d8:c5:ff:cb:06:65:95:77:66:8b:f0:
be:67:0f:d2:fa:23:c3:77:fb:f2:9a:80:fa:43:0d:
fa:1b:b2:a9:6c:7a:3e:04:df:d2:36:d3:8a:1b:5a:
a2:48:ff:22:76:b3:d8:55:61:3e:6c:28:7c:06:4f:
13:7c:d6:b8:67:8e:14:b1:9e:39:55:91:3c:4d:4d:
ea:8d:87:c6:19:03:93:fb:07:34:b0:30:e6:68:b6:
43:e7:9f:8a:f8:b2:d1:7b:e4:b9:00:d1:21:29:b5:
40:26:8d:f4:da:ac:57:b2:c9:3f:42:41:51:9d:c0:
70:b5:c7:77:9f:c9:fb:f8:aa:d9:7a:a5:c3:9d:a6:
78:4a:f4:07:05:72:e2:12:f6:02:d7:d7:e6:4f:1a:
d8:b2:46:59:76:51:29:3c:b6:9d:90:db:31:76:82:
a8:b5:99:d1:98:f6:58:35:04:b0:47:79:a7:68:75:
b9:a1:c2:a1:79:9d:44:53:6c:d1:a6:d5:9c:76:be:
0d:e2:69:f7:ac:00:a0:33:0c:d0:84:b9:5e:6f:c7:
2a:d0:42:23:60:d3:22:57:9b:1b:14:c1:71:92:20:
66:85:f1:4a:10:30:b5:c3:e6:4d:89:d4:c5:3a:2e:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:F6:52:3D:3A:40:10:8C:7E:2E:A1:E4:B4:F2:7D:88:BC:CF:6A
X509v3 Authority Key Identifier:
keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:fd:c1:e1:10:0c:23:60:b2:a0:87:39:39:0a:2f:60:d7:4a:
ff:80:81:2c:48:25:d7:5a:ab:7e:db:2c:b0:fd:b8:63:e6:cc:
c1:24:bc:02:16:8a:78:89:c9:d6:67:d3:c2:ce:b1:aa:bc:2a:
a9:f2:53:d3:d9:3a:11:56:05:db:80:46:28:22:3c:d4:62:84:
83:87:44:4f:1c:8e:1b:6b:03:3e:f9:86:01:7e:96:7d:f2:da:
90:1c:47:22:5f:b8:ef:87:78:e1:2e:2a:98:d1:62:a8:60:5f:
6a:8b:44:18:35:9b:e6:a0:fa:c4:06:ec:97:5d:ec:a0:c4:ea:
22:e5:65:61:78:bf:f2:8d:4e:80:0c:93:cb:b2:a9:43:1f:a8:
20:f2:2f:00:19:e9:8e:47:10:84:75:17:06:0d:6c:21:91:f5:
14:21:df:ed:8c:b0:44:2a:b5:80:5c:1c:6c:75:87:e8:aa:1d:
0b:b3:56:c5:44:24:37:90:2b:ce:c7:72:27:0c:84:20:c0:2f:
1d:39:9e:91:f5:06:ca:da:4b:b8:fc:a4:66:dd:03:91:65:51:
d6:9e:46:84:01:84:88:e1:bd:3d:7d:d2:cc:0a:c6:6c:e2:b9:
fc:87:48:d5:1c:53:91:8e:3d:4d:49:81:20:b1:dd:32:87:5f:
ab:6a:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:09 2026 by rpki-client