
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json)
Hash identifier: Ep7aWTBttR5UQGTIr3QpjTt1DF06OF308hBclmFqjHc=
Subject key identifier: FB:DD:28:6D:14:D5:86:50:CF:34:47:91:BD:D1:A6:AA:94:96:A8:BD
Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
Certificate issuer: /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
Manifest number: D6
Signing time: Mon 11 May 2026 06:50:34 +0000
Manifest this update: Mon 11 May 2026 06:50:33 +0000
Manifest next update: Mon 18 May 2026 06:50:33 +0000
Files and hashes: 1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: va4SRkPmFTVvvDjaIyHQCURukc0KBqhx3Xo4Y1xLUUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Validity
Not Before: May 11 06:50:33 2026 GMT
Not After : May 18 06:50:33 2026 GMT
Subject: CN=6a017c3a-3a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:b7:c4:7c:e5:f7:1d:a0:e1:17:ab:31:65:
f9:09:40:12:ab:6e:ad:15:67:fb:77:20:5a:0e:e2:
5a:81:fb:f5:72:2a:c7:8f:7c:5f:7e:17:ff:bf:b4:
e0:d1:48:71:31:f2:c4:e9:bd:8f:20:d2:a5:e5:5a:
98:86:7d:88:1b:ff:93:5c:98:9f:4c:af:ce:7c:09:
30:f5:74:c6:64:3a:d6:81:a9:c1:e6:5d:f4:33:d0:
2e:8b:a1:7a:04:d1:59:0a:2d:4d:3b:8d:fb:73:1b:
16:77:64:49:92:fd:e6:f2:4d:21:b8:33:62:2c:f3:
3f:5e:8a:ab:12:13:c2:e7:b7:83:aa:c5:59:47:c6:
96:77:ac:95:7b:02:33:ca:95:ff:fa:b1:c0:66:a4:
57:d9:c0:e5:ed:6a:84:10:b2:6f:8c:a2:63:04:94:
ee:56:c3:ec:8d:eb:2c:19:1c:06:df:87:c9:90:4a:
2a:7c:44:17:de:37:28:9c:67:37:4a:81:f0:a0:18:
0c:e8:26:30:17:69:95:8d:c2:1c:3f:2c:78:d7:32:
02:e0:bd:34:29:e7:54:4a:18:60:10:b5:36:65:e3:
68:a9:70:e4:fb:81:65:4c:17:08:94:0f:e4:35:b1:
07:c1:44:2e:43:ac:2a:8e:0d:e6:95:94:78:69:da:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:28:6D:14:D5:86:50:CF:34:47:91:BD:D1:A6:AA:94:96:A8:BD
X509v3 Authority Key Identifier:
keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:91:c5:cf:da:0d:c0:1f:5d:32:a8:9a:1e:67:f7:b4:ff:53:
c4:e9:63:5b:a6:a7:b4:6d:9e:51:8c:99:4a:d1:cc:18:f2:b1:
47:35:f8:7d:89:6a:75:9a:c0:9c:36:7f:39:b9:f3:ef:c2:3a:
00:72:15:3e:c5:7b:d9:54:cb:71:68:06:b6:83:12:8e:9b:6b:
52:c2:0a:e6:82:4f:7c:d3:87:fd:51:c2:23:d2:1e:94:50:30:
5f:96:eb:a3:90:54:98:ec:76:14:b5:c0:7b:5c:70:e6:00:f2:
a2:37:e8:63:02:0f:e5:53:2b:2c:8c:8d:4d:e8:ae:14:24:93:
6e:5c:0f:50:5c:57:ef:8e:34:84:27:77:6b:82:bd:f8:26:5e:
33:0b:de:ae:9f:98:2e:d2:ed:ba:13:7c:ce:bf:60:e6:c8:ae:
39:98:4c:42:cd:d1:64:bc:ac:f6:8b:4f:73:30:fd:15:71:a5:
ae:4d:dd:c3:13:af:d4:1e:72:d5:26:03:cf:03:a5:83:e6:b0:
49:74:1c:e4:90:6f:90:f2:91:ef:24:08:4c:3e:e6:0b:a8:82:
c7:ef:e7:df:ea:87:37:80:a4:6a:25:6f:20:6b:9a:ad:62:da:
ca:b1:06:27:ba:c0:60:a0:f1:7c:f8:b4:c0:eb:0a:b5:25:02:
87:a0:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:15 2026 by rpki-client