
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier: YwEWnA2ABUc1B4hjNHNTMyeAcdOtcTCB9+gcI0tiBhE=
Subject key identifier: 63:43:0F:7F:BA:61:68:F4:7A:94:E9:68:69:B1:E3:A2:EE:94:F5:8B
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial: 1C52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number: 1C35
Signing time: Tue 12 May 2026 16:13:25 +0000
Manifest this update: Tue 12 May 2026 16:13:24 +0000
Manifest next update: Tue 19 May 2026 16:13:24 +0000
Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: E1oBm4F4zlv9G2ZL1Hk6I+gb++96EBJOW48ogAMdCx8=)
2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: Bq4dDyNuryVKgCHn3kt6G7S6oGEDro1j46GJUBDoNaA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7250 (0x1c52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
Validity
Not Before: May 12 16:13:24 2026 GMT
Not After : May 19 16:13:24 2026 GMT
Subject: CN=6a0351a5-7069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:74:7a:fa:3e:52:7f:c8:68:f7:bd:5c:34:
7e:37:d8:1c:3d:dd:21:ce:d7:02:d5:2f:ce:20:2d:
04:8c:72:e6:cc:be:72:11:9b:3b:e6:7f:1a:52:92:
45:21:36:87:90:f5:37:63:56:52:cf:e2:95:b3:71:
ce:31:60:86:2b:28:0a:63:fd:9c:3f:8b:5c:2c:46:
ec:26:bf:70:70:62:d2:9d:1f:d0:7e:7c:b0:18:40:
54:1f:67:17:8f:3b:78:7c:13:a5:55:06:a5:70:b2:
89:66:d7:62:4a:e1:6d:6a:48:94:a7:b3:9e:ca:92:
92:f8:d6:93:08:1d:c5:ef:2c:07:26:7a:ba:33:b3:
c8:df:be:04:6f:53:40:86:af:fa:34:e1:11:d9:42:
b4:e4:27:1d:29:37:24:f6:0f:8f:5e:41:47:d9:93:
6a:9f:0b:b0:a5:d1:fe:65:a1:b8:61:80:b2:93:53:
6c:e9:93:59:1a:ca:99:83:82:30:0a:04:dd:40:2a:
d6:93:77:86:4b:98:a8:30:ac:b8:30:69:78:3c:10:
9a:71:45:a9:56:6f:8d:4c:ae:4c:f2:70:bc:fe:e8:
63:a6:17:54:52:44:45:9d:a1:2c:b7:57:17:b4:0c:
55:a5:3d:05:39:50:db:a8:72:71:8d:65:35:06:58:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:43:0F:7F:BA:61:68:F4:7A:94:E9:68:69:B1:E3:A2:EE:94:F5:8B
X509v3 Authority Key Identifier:
keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:52:dc:5c:e3:1a:7b:d4:a3:77:66:0a:bb:4a:0d:5f:0b:eb:
34:92:39:6d:05:ee:83:74:11:30:ff:3c:ff:52:3e:5b:1d:3c:
b8:9d:41:99:83:1e:5d:42:48:ab:cd:bf:4d:22:b6:c3:39:3e:
14:ed:fc:a5:ad:d6:bd:27:b1:4f:b9:bf:f6:04:0b:bd:89:51:
a1:4c:71:64:9d:c5:ec:93:16:11:eb:5d:21:f4:6f:d7:86:cb:
5c:48:52:df:f0:70:e4:64:05:66:3a:0f:6a:92:ad:6d:f0:04:
76:be:66:82:ef:50:ad:da:c5:7f:27:a7:0e:aa:e5:c8:c4:63:
70:ec:d4:3a:80:06:4b:bd:c9:ae:bb:32:5e:1c:b9:f7:81:b5:
27:e1:07:e9:94:02:41:70:48:b0:b8:86:6b:17:e8:8a:84:2c:
6a:d1:59:86:a6:6e:2d:ab:12:a8:e6:ab:58:ee:af:af:ef:8d:
e9:c7:7d:20:0d:31:e1:ff:86:e4:a7:1e:ba:53:d3:34:c2:6e:
8c:46:e4:96:52:79:50:95:86:2a:ec:a9:05:5c:ea:9a:80:a9:
6a:84:00:2f:c3:0b:02:95:7f:b5:34:85:f9:b3:4a:96:01:0f:
2f:7b:31:36:c9:3e:70:1e:ea:ec:5d:cb:06:17:83:74:48:eb:
a3:f6:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:52 2026 by rpki-client