
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json)
Hash identifier: oVryL6g12oW3ytVPuTfjnUQabPXe3g1QxmsAzV8M25g=
Subject key identifier: 5C:A0:61:6E:7E:C4:63:FF:CB:C4:2B:C3:D0:F9:BC:01:7E:9B:7E:02
Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Certificate serial: 0D01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
Manifest number: 0CF5
Signing time: Wed 22 Jul 2026 18:38:31 +0000
Manifest this update: Wed 22 Jul 2026 18:38:31 +0000
Manifest next update: Wed 29 Jul 2026 18:38:31 +0000
Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: eM9WVkCRd1ueRNasE3H9W24Ym9DEsdf5GSXOdhUHi8Y=)
2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: t0uncGishM2Tsr9xzVJil2k3Roy5Hv6NFxmghAYpdGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3329 (0xd01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Validity
Not Before: Jul 22 18:38:31 2026 GMT
Not After : Jul 29 18:38:31 2026 GMT
Subject: CN=6a610e27-57ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:14:a9:c1:18:83:33:e6:a1:a8:6f:c1:1e:
92:cc:09:94:5c:3f:a7:b1:0c:11:49:49:0b:bb:15:
a0:9a:d4:00:67:e2:f8:ad:9b:8c:50:a5:ec:e9:1a:
ae:bf:05:ef:e4:7a:bc:e2:ed:9d:b4:de:96:33:4d:
d8:6a:65:97:6c:f5:76:48:2f:5d:5d:8c:e1:55:e6:
68:1d:59:5a:a1:e4:6e:0f:c7:9d:6b:4d:00:78:89:
f5:05:ba:f8:63:54:68:2c:3b:88:53:e5:58:28:cb:
80:4a:0a:2c:f3:48:ca:ea:7c:85:9d:48:df:53:d8:
ab:53:88:38:1a:11:34:a5:03:cf:16:9f:e4:bb:b4:
72:2a:22:37:4b:ef:6b:e5:73:3f:2f:fb:30:21:78:
cd:b3:de:47:78:72:a7:b5:36:7f:8b:b5:ba:83:00:
d6:18:95:7b:ff:28:e0:7c:5e:06:4e:c4:b5:a4:dc:
e1:90:70:75:25:52:14:b7:30:f0:3b:03:76:12:1a:
aa:e9:5e:e8:0a:a5:b4:52:cd:2a:37:de:09:a9:f5:
04:b5:9c:4c:a7:f7:9b:c8:9c:46:e6:c1:93:02:67:
45:9d:56:cd:ad:22:6e:e0:ff:7f:bd:9a:d7:ee:b3:
d0:3b:c6:0a:e7:a6:51:d1:29:ff:e2:3d:e9:04:34:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:61:6E:7E:C4:63:FF:CB:C4:2B:C3:D0:F9:BC:01:7E:9B:7E:02
X509v3 Authority Key Identifier:
keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:57:3a:c8:ec:50:04:72:d4:9e:36:a7:b0:29:cb:35:9f:ba:
02:e1:d5:7d:96:1b:b1:af:d4:db:ed:00:1a:09:58:15:35:02:
b7:35:9a:9d:f1:1a:92:91:0e:fe:4a:6f:64:71:97:0d:37:df:
71:2a:02:67:68:fe:f9:72:f1:3f:59:2a:dd:16:35:9e:9d:b5:
01:4f:10:01:6b:fd:fb:d4:0c:6a:84:47:07:c9:5f:25:42:e6:
9a:a5:71:de:91:15:91:e4:7b:dc:ab:59:49:20:8b:cd:40:c8:
cd:a9:7f:a2:01:15:ea:ec:bc:15:69:9b:85:b8:bf:b8:8e:8b:
3f:5d:8b:55:dc:e4:e2:e0:32:b1:e0:e1:0d:6a:00:2f:bd:52:
1b:b1:d9:a4:8e:32:e9:b1:75:37:dd:d6:9f:9c:8b:7b:c5:d7:
0f:94:b0:3a:06:b6:31:40:7d:11:fc:15:cf:48:a5:e9:71:cb:
17:42:41:4c:21:15:31:3e:0f:f6:d7:44:fd:77:d5:ca:81:ee:
5e:f4:64:c5:f4:78:26:14:07:65:b4:17:b4:06:e6:b4:0a:66:
03:ea:71:a8:32:0a:a3:67:97:4b:cc:8a:ab:12:f6:2d:cf:8c:
c4:e1:6b:ba:df:5e:54:e1:89:74:1f:45:43:e7:5f:96:b9:e8:
01:f4:fc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:51:01 2026 by rpki-client