
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
File: qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft (raw, json)
Hash identifier: jF2NPd0obuJcrcOhW7XG05Myeq7lVViO76RYzm8op6k=
Subject key identifier: 1E:77:EF:C0:AA:48:40:F8:3B:D6:08:34:15:8E:D5:2E:21:77:5F:B7
Authority key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
Certificate issuer: /CN=A91B8833/serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
Manifest number: 2B
Signing time: Wed 13 May 2026 08:58:03 +0000
Manifest this update: Wed 13 May 2026 08:58:03 +0000
Manifest next update: Wed 20 May 2026 08:58:03 +0000
Files and hashes: 1: qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl (hash: aociOgFX3m4y8oWdineNOvDw+1OMmql/6HpVr0yKm+c=)
2: ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa (hash: 1VgHobz4nzrs5NBqb89qRpxnur9wCmTVYrTP5UDXUqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Validity
Not Before: May 13 08:58:03 2026 GMT
Not After : May 20 08:58:03 2026 GMT
Subject: CN=6a043d1b-b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:bf:61:b5:7c:15:ba:d6:1b:ae:ab:66:9a:
ac:de:71:b8:3b:0f:5e:26:13:f3:fa:90:50:e0:4f:
5a:f0:26:dd:66:e0:1b:69:6a:85:51:ed:09:55:d9:
5e:5e:6e:e0:1c:d9:d7:28:9b:b9:6b:46:b8:a1:26:
f6:7b:5d:69:cc:c0:21:3b:70:01:d2:92:8b:ef:c9:
68:c3:b2:a0:f5:e6:f8:fa:e6:15:1f:bc:b1:38:a6:
2a:f3:47:28:b0:70:57:d7:5d:30:9f:55:50:bd:53:
a4:74:61:98:a9:41:08:a7:c5:cb:d5:d1:52:95:ff:
68:d1:24:09:49:82:98:f9:98:a0:bb:8b:08:05:db:
0f:53:78:e1:d7:d9:93:f7:9c:81:15:a0:f1:3f:1d:
da:57:f8:06:13:27:75:35:09:43:dd:74:97:f4:f7:
3f:b4:1d:03:d8:e0:14:19:50:74:c2:df:16:23:b1:
96:94:79:82:ac:fd:be:f9:41:16:91:21:00:bb:94:
3e:9a:c6:ed:34:7f:56:3a:94:13:c2:7c:fe:82:34:
f3:4d:c2:66:39:69:c6:50:33:75:6e:8f:6b:72:da:
bd:ae:c4:e5:da:01:c6:bd:f0:7b:32:26:25:84:12:
86:91:84:4c:d7:f4:15:18:2b:2f:e4:88:ec:ae:33:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:77:EF:C0:AA:48:40:F8:3B:D6:08:34:15:8E:D5:2E:21:77:5F:B7
X509v3 Authority Key Identifier:
keyid:A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:e6:fc:e1:98:97:ef:bd:ab:93:53:90:22:76:bb:cc:b2:dc:
31:cf:b8:5d:09:4b:6a:38:ff:24:8f:58:eb:dd:02:f4:96:46:
38:45:ba:00:53:ad:ad:07:46:b2:be:c6:6f:32:bb:c6:c3:04:
20:96:51:eb:a2:4a:cb:5b:b8:99:b9:14:d3:ef:dc:8f:04:ad:
d7:92:89:2a:63:e2:e2:8a:ee:7d:26:d0:66:79:03:28:42:47:
e3:26:c1:1b:c8:ae:d7:b1:33:7b:a2:d7:76:94:d7:4e:82:4e:
4a:73:a9:e4:16:35:cc:df:92:fe:9e:33:b5:1b:5b:80:29:8d:
06:b4:e9:c5:0d:69:a0:df:50:a4:d0:54:d2:74:f0:a5:ce:dd:
ac:4d:37:89:28:51:35:8f:bb:26:85:45:21:c4:cc:c3:40:94:
b5:02:29:82:7d:52:17:7c:1a:bc:1c:3a:79:8b:22:16:9c:51:
32:9c:df:a1:75:15:0c:da:79:65:d9:49:ae:63:cb:de:6d:13:
8c:88:7f:fd:25:e6:83:6b:5b:a3:64:29:5d:6b:59:bc:51:a2:
1d:14:17:d6:6b:c2:de:2e:84:eb:4a:46:3e:e7:ae:82:10:f0:
ec:39:89:ab:60:f0:fa:8a:9b:45:f1:ac:eb:7c:2b:f5:34:dc:
29:11:05:47
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODgzMzExMC8GA1UEBRMoQTg0QkQ5REQwNzVDMjBBNDdCQzExMDhBOTM0RDg2MDg3
QjU5ODZDNzAeFw0yNjA1MTMwODU4MDNaFw0yNjA1MjAwODU4MDNaMBgxFjAUBgNV
BAMTDTZhMDQzZDFiLWIzMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDERL9htXwVutYbrqtmmqzecbg7D14mE/P6kFDgT1rwJt1m4BtpaoVR7QlV2V5e
buAc2dcom7lrRrihJvZ7XWnMwCE7cAHSkovvyWjDsqD15vj65hUfvLE4pirzRyiw
cFfXXTCfVVC9U6R0YZipQQinxcvV0VKV/2jRJAlJgpj5mKC7iwgF2w9TeOHX2ZP3
nIEVoPE/HdpX+AYTJ3U1CUPddJf09z+0HQPY4BQZUHTC3xYjsZaUeYKs/b75QRaR
IQC7lD6axu00f1Y6lBPCfP6CNPNNwmY5acZQM3Vuj2ty2r2uxOXaAca98HsyJiWE
EoaRhEzX9BUYKy/kiOyuM45HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHnfvwKpI
QPg71gg0FY7VLiF3X7cwHwYDVR0jBBgwFoAUqEvZ3QdcIKR7wRCKk02GCHtZhscw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODMzL0Q5NDQzNjlFMUFC
RTExRjFCNjlFQzE0MDM2M0Q4QzY3L3FFdlozUWRjSUtSN3dSQ0trMDJHQ0h0Wmhz
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcUV2WjNRZGNJS1I3d1JDS2swMkdDSHRaaHNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
ODMzL0Q5NDQzNjlFMUFCRTExRjFCNjlFQzE0MDM2M0Q4QzY3L3FFdlozUWRjSUtS
N3dSQ0trMDJHQ0h0WmhzYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCE5vzhmJfvvauTU5AidrvMstwxz7hdCUtqOP8kj1jr3QL0lkY4RboAU62tB0ay
vsZvMrvGwwQgllHrokrLW7iZuRTT79yPBK3XkokqY+Liiu59JtBmeQMoQkfjJsEb
yK7XsTN7otd2lNdOgk5Kc6nkFjXM35L+njO1G1uAKY0GtOnFDWmg31Ck0FTSdPCl
zt2sTTeJKFE1j7smhUUhxMzDQJS1AimCfVIXfBq8HDp5iyIWnFEynN+hdRUM2nll
2UmuY8vebROMiH/9JeaDa1ujZClda1m8UaIdFBfWa8LeLoTrSkY+566CEPDsOYmr
YPD6iptF8azrfCv1NNwpEQVH
-----END CERTIFICATE-----
Generated at Wed May 13 11:32:14 2026 by rpki-client