
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json)
Hash identifier: MfPg+y4r5QchA0vTFtETRCDrkNiGsTQrTHel78oGy1w=
Subject key identifier: E4:F6:E7:28:42:1B:8C:A1:E2:F5:71:13:06:D3:BE:D1:25:7F:A2:0E
Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Certificate serial: 0CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
Manifest number: 0CCF
Signing time: Tue 12 May 2026 18:28:24 +0000
Manifest this update: Tue 12 May 2026 18:28:24 +0000
Manifest next update: Tue 19 May 2026 18:28:24 +0000
Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: tjE2F1pb1WSik94c9OxZGUwqa+IUOC/E2q/0MZKdLco=)
2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: MEjWiqABTdhN78FaTJw7zpdNYI15rHUaUXaBhHqc1lA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Validity
Not Before: May 12 18:28:24 2026 GMT
Not After : May 19 18:28:24 2026 GMT
Subject: CN=6a037148-01d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:33:8e:b9:5d:bc:43:4e:f7:21:60:3f:b8:
c2:dc:c4:98:3d:b3:5d:dd:6e:f0:28:37:bd:78:63:
fe:12:2d:2c:16:20:0f:d0:b0:50:e9:ba:70:37:ac:
1b:88:cc:d9:eb:76:52:18:db:d2:ba:15:70:d0:bd:
45:3a:88:0e:3c:11:9b:2e:a5:08:68:99:64:8f:d3:
67:4d:84:06:1e:13:39:81:a5:ac:37:d6:ca:5d:33:
5f:6b:52:2f:e5:9b:b0:4f:20:81:17:69:4b:96:c7:
f6:c2:e0:47:f7:6f:ed:5d:0b:ab:f7:fc:35:77:68:
6f:83:11:7d:0b:0b:05:97:d2:89:c6:98:e3:b8:e3:
6c:c2:c8:31:7e:65:3a:a9:79:3d:29:29:a5:24:58:
62:a1:2e:79:d1:c4:14:c7:f5:bc:45:8a:f9:17:ed:
01:f2:48:33:ed:17:6a:f7:3e:a6:05:fc:81:f3:3c:
c8:a2:c3:e5:6d:6d:ea:0c:a8:df:bf:f4:b2:49:20:
21:1a:de:59:46:84:cd:1f:ea:8d:de:d8:ce:0c:f9:
66:64:d1:bb:df:f1:d2:6b:4f:a5:82:a7:11:2a:7d:
8c:9a:f9:19:26:31:74:d3:f2:4d:8a:f9:2d:d5:0f:
fb:85:2d:88:29:65:24:a4:0c:72:f0:aa:fb:c8:61:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F6:E7:28:42:1B:8C:A1:E2:F5:71:13:06:D3:BE:D1:25:7F:A2:0E
X509v3 Authority Key Identifier:
keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:63:0f:8e:80:86:19:0d:72:dd:2e:0c:55:0d:a7:01:fc:ff:
23:7f:1f:db:17:b5:32:9e:2a:9e:fb:69:d9:41:d2:d2:0b:4d:
34:5c:74:08:45:31:1a:4c:fb:35:f0:0e:89:64:cf:2b:20:a3:
e3:51:55:94:5a:97:33:48:12:1a:0b:c1:9c:2a:ca:81:c4:23:
a8:ff:2f:91:d7:a2:4d:e3:f6:74:9c:42:69:1a:60:85:04:be:
09:79:08:7b:88:46:ca:65:c8:a6:96:8c:f3:34:3c:67:18:06:
f0:cf:d0:9d:c3:4b:13:9d:b6:17:c7:42:8f:20:b6:36:ab:1f:
a0:c2:92:c0:11:4b:24:69:c9:ae:a7:f8:18:94:7c:cf:a5:f1:
82:53:1e:99:27:6b:9f:cf:53:15:c7:e4:2e:34:e2:ce:11:0c:
9f:68:e4:f5:e3:59:e3:0f:81:85:25:94:f6:e3:ab:8d:2d:7f:
f0:d4:d6:3d:f9:83:5c:eb:e3:5b:32:de:d7:04:bf:5a:a5:0b:
a9:67:29:97:ee:19:ee:cf:c5:c2:a5:94:f9:d8:d0:9f:6e:8a:
56:bd:6a:fd:8a:23:69:e9:49:64:d1:cd:fe:d3:ff:58:f0:ea:
09:49:6e:8a:13:e4:3b:b9:5d:3d:9d:7c:ad:52:87:ca:6e:bd:
04:6b:2f:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3
QUU4MDlFRjkwHhcNMjYwNTEyMTgyODI0WhcNMjYwNTE5MTgyODI0WjAYMRYwFAYD
VQQDEw02YTAzNzE0OC0wMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZkzjrldvENO9yFgP7jC3MSYPbNd3W7wKDe9eGP+Ei0sFiAP0LBQ6bpwN6wb
iMzZ63ZSGNvSuhVw0L1FOogOPBGbLqUIaJlkj9NnTYQGHhM5gaWsN9bKXTNfa1Iv
5ZuwTyCBF2lLlsf2wuBH92/tXQur9/w1d2hvgxF9CwsFl9KJxpjjuONswsgxfmU6
qXk9KSmlJFhioS550cQUx/W8RYr5F+0B8kgz7Rdq9z6mBfyB8zzIosPlbW3qDKjf
v/SySSAhGt5ZRoTNH+qN3tjODPlmZNG73/HSa0+lgqcRKn2MmvkZJjF00/JNivkt
1Q/7hS2IKWUkpAxy8Kr7yGHBfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOT25yhC
G4yh4vVxEwbTvtElf6IOMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE
QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl
RGExbEwwTmEwSTU2NkFudmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWGMPjoCGGQ1y3S4MVQ2nAfz/I38f2xe1Mp4qnvtp2UHS0gtNNFx0CEUxGkz7
NfAOiWTPKyCj41FVlFqXM0gSGgvBnCrKgcQjqP8vkdeiTeP2dJxCaRpghQS+CXkI
e4hGymXIppaM8zQ8ZxgG8M/QncNLE522F8dCjyC2NqsfoMKSwBFLJGnJrqf4GJR8
z6XxglMemSdrn89TFcfkLjTizhEMn2jk9eNZ4w+BhSWU9uOrjS1/8NTWPfmDXOvj
WzLe1wS/WqULqWcpl+4Z7s/FwqWU+djQn26KVr1q/YojaelJZNHN/tP/WPDqCUlu
ihPkO7ldPZ18rVKHym69BGsv6Q==
-----END CERTIFICATE-----
Generated at Wed May 13 02:24:37 2026 by rpki-client