
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: twiiv6Ww6smae0hpuO3m62g3pFfKOSXiyxjA2X6mic0=
Subject key identifier: A3:8B:92:36:14:9F:1F:93:53:D5:1E:8E:A3:2F:E6:C8:6E:3B:CC:54
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 06DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 06B7
Signing time: Wed 22 Jul 2026 23:07:16 +0000
Manifest this update: Wed 22 Jul 2026 23:07:15 +0000
Manifest next update: Wed 29 Jul 2026 23:07:15 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: qArHSbMHN/Vila9VCM2qKnW1NCsJlnCZx6hIgRl6KOw=)
2: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: gkPTMzL29fjMeAxqDDyIKfb4bjNAUoeuE5oKyKWBCYo=)
3: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: 5CQDa/aa5UAIsTkpec0rYhloDDXKxfbpTB7+YpevLrw=)
4: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: vBCGm7MlYdNXXeaoLUD2KJwJGSuIu+kSne2oG2vKSsU=)
5: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: iKG0U4dWo4Ii/ph+5g5SKDA8RO4TnmSAWL9RH3BX7Bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754 (0x6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Jul 22 23:07:15 2026 GMT
Not After : Jul 29 23:07:15 2026 GMT
Subject: CN=6a614d23-985a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:75:af:96:5d:7d:a9:2c:ab:4c:9a:f3:ab:
92:47:3f:c1:d5:84:f2:2f:cf:65:97:5d:cb:c8:08:
8f:a6:51:a8:66:6e:93:3b:26:79:3d:be:e1:5e:6e:
cc:78:18:ea:cd:d9:15:eb:fc:7a:bf:e1:4d:e8:92:
63:ef:84:62:19:0e:12:03:54:f0:c2:cf:22:52:33:
32:d4:a7:96:3d:15:30:da:4f:85:6c:ed:0c:1d:de:
ed:c0:71:0a:0c:c7:6c:29:96:a9:7c:74:6c:ea:4a:
80:2c:30:c7:82:9a:9b:f9:ab:68:ed:f5:34:cc:48:
77:ff:c6:ef:e9:c3:a2:0b:c6:74:c1:f9:e2:b2:ec:
b7:8c:30:8b:28:47:24:d3:ac:6c:ef:d9:bf:8f:86:
6c:c0:6f:d1:89:ee:b6:7a:a4:05:ed:df:31:6a:d7:
4b:19:dc:86:35:0c:f0:17:63:a4:df:03:25:6a:6f:
3b:ec:51:aa:e0:cd:a1:59:57:c0:7e:82:1f:16:ca:
16:a6:32:82:09:9f:da:23:ed:0e:32:dd:6f:c4:93:
2d:c2:5d:90:c8:2c:f3:33:97:a2:39:dd:0f:2a:ef:
f1:fa:38:29:5e:1a:6e:ea:39:4a:47:bc:eb:70:56:
67:c8:a0:f8:8e:b1:04:8c:a7:1e:a4:58:92:ab:67:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8B:92:36:14:9F:1F:93:53:D5:1E:8E:A3:2F:E6:C8:6E:3B:CC:54
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4b:2c:c8:67:9a:d2:66:5c:49:5b:86:df:82:36:63:f1:bd:
cb:a5:fd:85:03:0b:4a:21:0c:74:e4:d8:82:38:88:7a:2d:c2:
bd:01:76:dc:43:66:13:9a:07:1e:81:48:99:87:f3:6f:02:5c:
ed:9a:8b:15:f1:f2:75:23:25:f7:67:b8:9c:b8:31:6a:2c:0f:
a9:f5:23:4c:e7:d7:a3:8e:fb:6e:6f:05:fd:28:aa:dd:6e:67:
bc:c1:e3:d1:59:79:85:a0:db:65:03:cd:3f:1d:bb:13:ee:5b:
7e:ed:e0:17:8a:62:00:a7:43:76:7c:d9:bb:a4:a8:e6:1a:22:
96:38:8d:0f:9d:9b:d2:4e:85:0b:d8:3a:5d:ba:91:a8:07:22:
5f:e7:7b:33:b7:9a:73:63:35:8a:7c:76:48:bf:68:74:b1:46:
04:a3:a0:f3:fa:b1:86:e3:7c:5b:e4:d2:0c:8a:7a:c1:04:d4:
fa:00:30:30:b1:d0:43:97:72:c5:e6:5f:b8:1e:4a:46:05:86:
91:2c:80:58:46:b2:04:ac:b3:75:02:e6:9f:ac:11:ac:75:98:
db:67:08:aa:b5:07:61:5d:59:e5:11:e8:0c:e3:38:9e:c8:87:
52:13:4a:0c:53:3f:41:a1:2b:ae:5a:15:6f:a6:5a:06:6a:42:
8a:54:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:01:07 2026 by rpki-client