
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: eFD3LyQTm31/aDlVBJGpX5aYasBd0QDt9qUO3cjnvMQ=
Subject key identifier: CE:04:5C:B2:E4:61:23:83:1A:F8:17:31:C6:D2:EF:9E:8E:66:B3:3A
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 06B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 0693
Signing time: Tue 12 May 2026 22:37:07 +0000
Manifest this update: Tue 12 May 2026 22:37:06 +0000
Manifest next update: Tue 19 May 2026 22:37:06 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: 2+QDf9BanW0LjydPLbW3mlbvNCWddYcY7wOgu5dBBCA=)
2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: iKG0U4dWo4Ii/ph+5g5SKDA8RO4TnmSAWL9RH3BX7Bo=)
3: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: gkPTMzL29fjMeAxqDDyIKfb4bjNAUoeuE5oKyKWBCYo=)
4: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: vBCGm7MlYdNXXeaoLUD2KJwJGSuIu+kSne2oG2vKSsU=)
5: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: 5CQDa/aa5UAIsTkpec0rYhloDDXKxfbpTB7+YpevLrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: May 12 22:37:06 2026 GMT
Not After : May 19 22:37:06 2026 GMT
Subject: CN=6a03ab92-8c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:d8:a7:3c:3f:50:49:cd:2a:99:4d:39:89:
ea:e9:14:4b:63:7d:12:09:42:9a:69:07:c4:d2:2d:
20:e9:06:1c:c4:30:fd:04:64:f7:e0:f4:52:e9:1d:
1f:05:e0:70:e9:1e:34:68:66:12:a8:10:2e:4a:58:
5d:47:42:79:a5:e0:e6:32:25:55:6a:e6:d3:f3:bb:
ca:5f:f3:c4:c3:00:eb:ca:1a:17:ea:aa:eb:c0:0a:
e3:6a:9f:87:a9:4f:e6:10:09:b6:f2:80:e1:ed:05:
a3:06:84:ac:3c:a0:72:3a:13:51:ff:06:8c:4d:14:
a4:cb:15:1b:3c:c7:d0:3c:da:f8:b1:2c:49:68:d7:
82:ce:01:b5:84:7d:f9:99:0f:0d:0b:c3:05:7a:6c:
8d:a5:ab:e3:76:f8:16:c0:05:94:73:c5:ba:15:3f:
45:08:cc:ce:ad:64:d9:55:2e:a2:c7:1c:ba:96:74:
e9:d2:41:03:e7:92:6b:67:96:bf:13:53:3e:00:d3:
d2:4e:25:03:86:aa:b1:8f:2a:e1:e7:5a:b5:31:55:
47:ae:1d:e3:1a:27:4c:e8:b7:66:9a:6c:28:d0:f1:
94:49:95:e4:8a:5d:4d:f9:70:b2:d1:ce:af:cf:6b:
b8:7a:f5:38:11:26:d7:0d:2f:20:bd:b2:59:17:e6:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:5C:B2:E4:61:23:83:1A:F8:17:31:C6:D2:EF:9E:8E:66:B3:3A
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e7:88:c6:95:a9:e0:b4:f9:5e:ec:21:e0:f4:84:ca:ec:41:66:
a6:f6:46:e9:db:6c:c1:4c:5d:79:a9:b6:99:a0:49:66:f3:17:
26:f6:a1:72:36:25:f9:d1:54:e9:a1:70:fa:0e:92:ec:4a:c3:
e2:eb:cf:20:16:ec:c8:a2:63:8e:0f:3f:a5:7f:73:84:9a:28:
b1:b4:2c:27:03:48:03:1b:b1:1b:0f:df:72:83:e2:de:d2:d4:
29:25:c4:63:9a:2b:22:81:04:aa:6e:57:2f:57:c1:58:b3:cb:
ce:f9:a5:5e:ca:15:29:de:da:c5:e2:de:16:69:e1:23:77:fe:
f7:2d:e1:af:92:9e:f6:2a:36:4c:43:a5:ba:92:39:6b:f8:00:
78:26:da:ea:dd:77:38:c8:d6:15:0e:66:46:b7:28:42:ac:fd:
6f:d7:8e:9a:fb:01:9e:64:69:ee:c9:f9:b0:c6:3b:d3:b2:74:
f3:b1:44:ae:a2:3d:5e:4e:8e:64:4e:a6:bd:b4:23:9d:67:e8:
27:14:23:0c:a2:12:44:4e:3b:89:55:9e:03:30:8b:75:50:41:
8a:28:f8:cb:02:0e:7b:f0:11:1a:65:32:e7:f0:7a:c3:08:71:
c7:5e:e1:dc:44:89:2a:48:45:d5:37:77:a8:1b:ba:36:4f:1b:
83:51:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:29 2026 by rpki-client