
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier: cM5xTXjmstcaWDbNzJJF30XjyW+JfsHAEoVLGJuDIEY=
Subject key identifier: 98:88:5E:76:35:D6:B7:E1:18:D8:C7:E4:A9:F0:DC:E2:D5:2B:C5:31
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number: 01E5
Signing time: Mon 11 May 2026 03:26:25 +0000
Manifest this update: Mon 11 May 2026 03:26:24 +0000
Manifest next update: Mon 18 May 2026 03:26:24 +0000
Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: 2EcPtlPxJYZYlqfXaB803j6V9c7uVhNityM0AzXwvak=)
2: 294325DC699711EEB317603DC4F9AE02.roa (hash: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Validity
Not Before: May 11 03:26:24 2026 GMT
Not After : May 18 03:26:24 2026 GMT
Subject: CN=6a014c61-6140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:3b:df:f6:5d:cf:ff:b9:b0:86:39:7a:25:
8c:2f:86:58:77:e9:a2:83:9b:55:4d:c7:e7:3d:58:
ef:00:e1:a4:b5:29:69:9f:9d:66:57:48:fe:86:2c:
6d:aa:c8:10:74:53:c2:d6:71:1d:0a:d5:8b:f1:1e:
fa:14:e6:2e:f8:1a:84:04:81:43:16:05:9b:7d:b2:
aa:7b:d3:b4:e9:38:af:39:b2:3e:8f:02:fd:20:b8:
6c:b4:cd:dc:48:2c:23:5d:6b:e3:53:3a:5b:b5:a8:
99:a2:d0:e7:dd:98:b6:32:e6:8f:55:cb:c0:c9:48:
f6:df:41:61:10:83:f2:43:fb:1c:16:fe:12:d5:a5:
a3:63:5f:be:8b:f2:10:61:e5:4c:52:ac:d4:cb:1d:
0c:fa:1c:a1:45:28:55:2d:02:87:18:1f:6b:da:6d:
d8:87:cf:1d:19:c4:e1:4c:7b:7c:b6:c2:47:f3:31:
26:0f:82:56:80:ba:b3:25:e5:95:5f:a5:74:05:78:
e9:5a:1f:42:9e:86:b3:0a:08:f5:5d:79:79:aa:60:
3e:d4:f3:56:17:15:2d:8e:82:b6:29:cc:92:aa:68:
3e:b1:7e:59:9e:ca:6b:fc:62:85:71:37:a2:26:e6:
6b:fc:1c:ae:a2:46:bc:fd:42:fb:51:be:01:aa:79:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:88:5E:76:35:D6:B7:E1:18:D8:C7:E4:A9:F0:DC:E2:D5:2B:C5:31
X509v3 Authority Key Identifier:
keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c4:19:a9:27:be:cc:6d:89:4c:4e:d9:62:7f:1e:39:5c:18:
88:ee:c6:a9:2e:7f:21:bd:71:58:0d:9e:94:d7:db:0e:c6:e1:
3b:5b:9d:ea:c5:8f:af:4c:25:64:d6:db:c1:af:2f:34:0e:df:
12:16:e5:af:85:27:5a:20:f3:5f:20:86:bf:99:d5:1a:3c:f5:
03:17:d7:ce:2d:d6:bf:af:07:55:7d:40:1b:6f:93:15:8f:65:
e4:65:26:75:9b:9f:90:46:5f:f7:0f:be:37:da:41:c6:12:3b:
c6:b3:4f:98:e0:b6:c3:96:2f:9a:c0:0f:68:e4:73:4c:c1:74:
2d:fc:71:ac:37:7e:ae:93:63:7a:f5:72:e0:86:d6:df:51:0e:
4e:e9:eb:f4:54:29:ce:90:ab:51:0f:19:cf:88:3d:61:8c:dd:
8d:a8:35:2f:bc:55:fc:f2:61:1a:66:87:34:68:a3:27:0e:cb:
bd:cc:02:9a:86:bb:66:b7:b8:6b:54:11:e3:9b:7c:33:16:2b:
0b:7f:50:1b:50:8c:01:08:3f:a2:c7:9a:4b:03:4e:9a:ca:e1:
34:09:fc:40:b5:cd:49:ec:ac:1f:c9:e3:8c:35:a3:31:54:08:
a4:1f:4f:d9:1b:aa:d5:39:02:5d:e7:98:c4:e3:73:dc:d9:e8:
fb:0f:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:22:51 2026 by rpki-client