
$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
File: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft (raw, json)
Hash identifier: sXgwu+86DJf7VZGdo7MvFdmtHG1ZdtuZAyVF/bVGZgk=
Subject key identifier: 43:28:85:A0:61:81:31:C2:89:0B:AA:A0:6D:87:C5:2B:24:4D:AD:09
Authority key identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85
Certificate issuer: /CN=A91988EB/serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
Manifest number: 6C
Signing time: Thu 23 Jul 2026 09:53:07 +0000
Manifest this update: Thu 23 Jul 2026 09:53:06 +0000
Manifest next update: Thu 30 Jul 2026 09:53:06 +0000
Files and hashes: 1: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl (hash: UAZykv5WPN64vdhyC3KQDyTKdi+IP/gR7yh1NYCCQDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl
rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91988EB, serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685
Validity
Not Before: Jul 23 09:53:06 2026 GMT
Not After : Jul 30 09:53:06 2026 GMT
Subject: CN=6a61e483-5153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:e2:ca:d0:fb:98:f8:14:07:da:01:9a:f7:
a6:da:65:81:8e:f8:f1:1c:28:62:a1:9d:5b:ef:47:
59:d2:1b:53:c9:15:df:33:d9:db:4d:57:56:6f:d6:
a8:c1:5c:1e:25:95:7b:0c:c7:c7:75:60:1a:16:0b:
3e:ae:86:28:09:63:51:43:52:8a:b6:b5:31:29:c3:
4f:6b:56:31:98:05:75:54:24:ad:c5:55:3c:76:cc:
ba:01:83:5c:96:6d:6d:17:8b:fc:a0:21:7c:12:13:
07:d5:8c:57:a5:cd:4e:5f:ea:2b:12:22:7b:4a:9c:
b5:4e:69:00:a8:a8:e1:9a:ad:df:3b:e2:5b:8a:19:
da:8d:f5:8f:c6:61:66:38:41:20:48:aa:a3:d9:c1:
f4:e3:b4:52:f7:33:a6:2b:93:61:f2:fe:f0:ea:5e:
42:9a:2d:2d:66:c7:13:81:cf:53:e5:53:31:c5:55:
34:81:76:6c:b1:8b:2b:6d:07:08:cc:d2:da:f5:08:
84:72:79:d8:9a:5e:2a:5d:5b:61:36:78:e2:ab:d7:
5c:29:41:3c:f5:85:eb:b3:0d:c9:57:19:06:3d:69:
8e:c6:0b:32:e2:e8:55:ef:8e:9e:10:05:c4:4c:13:
6f:0c:14:3e:f5:d4:4b:0e:e3:14:44:80:de:8a:f6:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:85:A0:61:81:31:C2:89:0B:AA:A0:6D:87:C5:2B:24:4D:AD:09
X509v3 Authority Key Identifier:
keyid:43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e5:e4:23:00:8c:cb:ff:4d:1f:01:17:68:a6:4e:d3:42:8f:71:
0a:d0:4b:1c:ac:ad:11:17:99:73:88:be:0c:23:1a:e2:87:48:
bc:26:d2:2e:9c:b0:ce:bb:a2:9f:7e:15:d3:2a:ba:07:8d:77:
c0:5d:82:23:97:ca:e7:cb:d7:f8:fe:c9:a5:dd:4f:b8:76:22:
a2:a0:3f:7b:e3:a3:f8:60:57:67:67:bc:6d:88:a7:2e:bb:8b:
3a:8d:e7:5d:e7:0e:6c:32:7a:9d:78:db:e9:47:ac:7a:97:71:
e9:a3:49:e3:56:6a:87:8e:e2:91:d5:7e:8e:df:88:9f:0a:91:
ee:7f:d6:d8:b4:e4:0e:8e:f3:65:13:a7:ca:8d:00:9a:63:14:
fc:56:3b:03:69:b5:46:91:13:4a:71:fe:a2:a4:0b:c8:c5:64:
cd:f4:8c:57:16:a0:33:e4:db:e6:2b:3d:e0:10:f6:30:94:c2:
81:38:5f:b6:75:e4:df:e1:77:30:cb:25:42:f2:ac:10:fc:d5:
dd:73:9b:14:33:1d:2a:05:19:45:ce:dc:05:f2:90:93:7b:c1:
51:44:23:4a:b0:a9:ef:81:41:2f:f3:44:a9:00:c0:f5:c5:e1:
61:0d:51:cb:7e:e4:46:53:f2:80:c8:e1:3d:75:3c:04:12:3b:
83:f3:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:28 2026 by rpki-client