
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier: mM4nm7DsABxmni6NVA1r4J4eQgTIX8dcSHZ8kHu0nTs=
Subject key identifier: CE:BD:16:99:CA:1B:9E:FE:0B:1B:09:D9:4D:FB:89:0B:3D:9B:C8:5B
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number: 0251
Signing time: Mon 11 May 2026 02:21:03 +0000
Manifest this update: Mon 11 May 2026 02:21:02 +0000
Manifest next update: Mon 18 May 2026 02:21:02 +0000
Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: SGuMXUHVae3rfjwFE7URDbf5GjocFELSxaiD/Q5CqKk=)
2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Validity
Not Before: May 11 02:21:02 2026 GMT
Not After : May 18 02:21:02 2026 GMT
Subject: CN=6a013d0e-b1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:23:fe:5f:3a:e1:0b:22:f8:b6:54:82:7a:
9b:44:82:75:8b:c5:32:7d:b6:32:fc:cc:dd:3e:2b:
c9:98:f7:26:a6:db:9d:c0:f6:bd:56:06:bb:ea:0d:
06:c2:63:c8:60:32:c8:b7:8d:47:86:0d:f2:5c:65:
24:96:de:70:37:48:ca:44:6d:4b:ee:9b:71:df:67:
fd:11:c8:73:80:e5:02:cb:e7:3e:d5:bc:fe:d4:13:
40:92:a1:50:2b:a0:39:0d:4a:36:1e:96:07:ea:f8:
7d:da:43:aa:80:24:cf:36:e9:66:83:5b:3e:aa:17:
f6:0f:79:20:10:c9:3d:f9:fe:8c:f1:86:b2:58:19:
7d:41:d0:71:0e:33:6e:f3:96:d0:bb:21:65:54:37:
52:7a:9a:3d:ee:a4:03:d5:0e:e0:1f:aa:51:c2:c2:
b2:b7:e8:4d:a1:5c:07:a9:aa:b4:eb:0c:0e:f3:ce:
9b:14:58:7a:6d:5a:ef:61:4a:3b:bd:0f:48:e3:f9:
76:b2:2e:b3:08:d5:f1:79:ef:04:f4:75:c0:d6:d2:
32:d6:cf:d5:19:99:ff:d3:b3:58:fd:f1:8b:46:a2:
c2:cb:e3:d5:33:84:5b:e5:ab:77:ae:1a:9b:e4:e0:
9f:20:89:1e:e7:0d:3a:ae:3e:10:01:aa:2d:c8:16:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:16:99:CA:1B:9E:FE:0B:1B:09:D9:4D:FB:89:0B:3D:9B:C8:5B
X509v3 Authority Key Identifier:
keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7d:15:37:2b:45:85:64:2d:01:d0:08:d6:cd:c4:ff:aa:1b:
77:01:cc:4e:0c:bf:4e:4a:a1:e3:39:b3:81:fe:18:53:92:ca:
c1:02:37:4c:d4:f6:49:51:7d:1d:2f:73:23:83:20:16:cc:f7:
22:46:cf:66:fb:67:a1:e9:d6:71:9b:90:7b:15:90:2d:81:d2:
d9:09:a7:da:b3:e2:1f:a8:82:ec:7f:30:1b:32:79:71:70:24:
ee:e4:3a:55:df:12:4e:60:77:6e:02:55:43:8e:f4:07:8e:b6:
e3:a4:b2:a6:72:14:f2:f2:19:3f:eb:01:7c:58:f4:7e:73:7b:
46:07:f1:3d:5c:7e:d3:ff:e1:db:2a:3b:cd:e9:a5:32:5f:5b:
d3:4b:db:b7:5a:97:52:99:7d:b7:9c:70:32:34:e9:83:7b:3a:
45:a6:0c:92:fd:60:88:92:3e:98:53:cf:f2:48:22:79:83:1c:
1b:a0:88:c9:fe:fb:2a:78:99:42:1c:68:a8:6b:1a:b8:f8:86:
8e:3c:22:d1:a3:e3:1b:42:e6:b3:1e:1e:0f:61:e8:1f:f4:20:
df:fa:91:b9:63:64:3e:92:3f:62:53:f6:43:56:db:85:87:35:
e9:be:9b:fa:b2:12:88:bf:f4:68:cf:fa:de:e2:ae:bf:26:19:
ab:e8:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:56 2026 by rpki-client