
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
File: qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft (raw, json)
Hash identifier: Iayw2TWHKkjaYDIgHDEpWxJPlQHm9TRU2x6E8krQ4OE=
Subject key identifier: 62:A1:4E:B5:1D:AC:0D:4D:3A:B3:20:69:A8:59:C8:55:C0:EE:35:7A
Authority key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
Certificate issuer: /CN=A91B8833/serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
Manifest number: 4E
Signing time: Thu 23 Jul 2026 10:23:58 +0000
Manifest this update: Thu 23 Jul 2026 10:23:57 +0000
Manifest next update: Thu 30 Jul 2026 10:23:57 +0000
Files and hashes: 1: qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl (hash: qUhHAGuCG+LUbevsa38eRbqqS2Ft2T1Ywf5Iu3oTSyo=)
2: ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa (hash: 1VgHobz4nzrs5NBqb89qRpxnur9wCmTVYrTP5UDXUqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Validity
Not Before: Jul 23 10:23:57 2026 GMT
Not After : Jul 30 10:23:57 2026 GMT
Subject: CN=6a61ebbe-0420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:20:03:df:b1:c7:4e:63:5c:8b:f6:8d:d6:
87:92:96:c1:18:7e:c2:46:c8:ec:01:cd:9b:85:39:
74:cc:69:ac:45:c1:f7:32:f9:08:e3:1d:33:44:b9:
6b:26:b5:7b:7f:b9:9b:78:6b:2c:9b:c1:ce:d3:e1:
bf:ac:df:78:38:87:d1:ff:dc:08:37:47:b0:6d:df:
ce:a8:98:58:50:0b:3b:7f:89:4d:d1:16:e1:aa:47:
06:32:e3:6f:b5:c0:5e:2b:ed:db:36:c7:a7:55:da:
89:95:17:63:d1:23:ad:da:88:9b:c2:c7:4e:31:ed:
b4:3c:a0:9d:29:21:92:e0:18:40:a0:aa:1b:6a:af:
bd:c4:9d:48:19:60:1e:05:e6:ea:65:58:4c:30:3c:
33:3a:98:2c:1f:92:4f:f4:46:ed:16:8e:c0:11:be:
bd:0c:f9:88:29:b6:5c:2d:7c:9a:f7:9e:96:5d:b4:
d1:42:1d:9e:75:b5:11:cd:b3:38:70:b2:93:06:f5:
f0:98:28:f6:d4:b3:24:38:98:d6:7b:f4:56:41:50:
0b:8b:f1:28:70:88:bf:e1:e4:63:45:49:89:f6:11:
a9:6b:51:d7:51:e5:5f:c5:9b:f4:88:d6:c3:e7:d8:
74:18:78:32:b8:23:f0:da:71:32:cc:ed:cf:8e:2c:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:4E:B5:1D:AC:0D:4D:3A:B3:20:69:A8:59:C8:55:C0:EE:35:7A
X509v3 Authority Key Identifier:
keyid:A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ef:45:f0:82:ca:c3:fb:ea:be:59:60:29:69:5c:2b:a7:ba:
3a:61:6c:d9:2b:ea:66:81:00:8e:e3:ac:5d:9c:f8:7c:65:ae:
15:8e:d1:a8:e0:cd:24:e2:0f:dc:bd:fe:90:14:31:c7:14:9b:
0a:ef:d8:5a:15:ed:fe:c5:f8:f7:07:12:69:f1:f5:66:e0:c8:
03:c9:4e:7f:9d:18:df:60:db:9a:4c:1f:4c:54:3d:c0:a3:f3:
1a:47:1b:ba:f1:0a:0c:1f:4a:10:7c:8c:fc:c6:18:ae:53:9b:
07:71:a8:a7:5f:0c:79:16:2f:b3:ae:f1:bb:d3:2e:8d:dc:8a:
95:bb:6d:bc:9b:dd:e5:15:12:1a:8c:cb:02:5c:50:a1:af:f5:
63:7e:a4:2e:50:df:31:7f:31:b5:d4:62:52:26:ee:41:47:1e:
ca:2c:b9:d8:78:75:8d:ee:9a:05:7a:bf:39:57:b0:40:03:bb:
d1:6a:c3:21:1b:02:ab:63:96:77:08:fc:0a:26:91:04:9a:1c:
4d:bd:7f:bf:cd:b9:26:38:5b:42:5d:34:98:ae:c0:79:d4:28:
29:1a:7d:6d:ab:29:2a:99:73:0b:51:49:66:df:a1:b1:f7:58:
ce:7f:7f:91:83:97:4a:43:c3:98:c3:26:9e:e0:d3:55:99:bf:
b7:ba:38:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:59 2026 by rpki-client