
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json)
Hash identifier: f+lUVWB9kt4sJazuyaBt/fgQxdJevCb54/uyk9xoDqA=
Subject key identifier: 4D:91:D9:7D:99:AE:C7:21:D6:67:25:71:90:6C:B1:AC:E9:A3:61:36
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial: 1114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
Manifest number: 10F0
Signing time: Wed 22 Jul 2026 17:26:30 +0000
Manifest this update: Wed 22 Jul 2026 17:26:29 +0000
Manifest next update: Wed 29 Jul 2026 17:26:29 +0000
Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: zjs+MpNiB+jdLQALzL2dT4ng49TyiXEpv4o4wnvYu1Y=)
2: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=)
3: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=)
4: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=)
5: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4372 (0x1114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Validity
Not Before: Jul 22 17:26:29 2026 GMT
Not After : Jul 29 17:26:29 2026 GMT
Subject: CN=6a60fd46-4a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:34:58:6f:7e:c6:20:0b:b4:09:76:7b:90:
fe:48:cf:4a:5d:2c:a5:57:32:c2:2b:6d:3e:23:36:
89:ad:bb:87:7c:a4:d5:a6:c8:ea:99:06:28:14:dd:
12:af:b4:a0:45:0e:50:54:6e:16:3b:42:0c:63:1c:
99:72:5d:71:b4:8e:50:ff:e5:19:51:7c:78:f5:07:
a3:f6:5c:60:b1:c0:9b:d6:03:74:88:ec:bd:0a:7b:
f7:78:85:9e:da:d1:93:d6:d9:4b:38:f6:f5:ef:5e:
27:54:b3:02:70:f2:c4:13:08:82:c3:88:4b:d2:cd:
99:68:50:92:e5:3c:89:7d:fb:1f:76:c0:11:a0:e7:
43:48:ff:40:6f:82:d9:fa:ef:a6:a3:d6:6f:99:45:
55:ee:9e:5c:e7:fb:40:c6:a0:e3:b6:57:93:6f:f1:
ee:8a:ab:88:6c:7b:61:93:af:66:1c:e8:09:83:90:
b9:cd:05:12:ea:7d:f8:6a:2e:74:bd:9c:41:2b:12:
cc:8a:f4:60:ed:26:0d:4b:56:c9:c3:01:c9:77:f2:
95:d6:4b:c6:7c:b9:5a:5f:be:ad:7d:a8:7b:44:7d:
a1:9a:86:75:fc:41:91:21:5d:e4:cc:8d:78:04:4e:
b8:9b:17:30:5c:67:85:b9:7e:d7:27:1c:d4:c5:2e:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:D9:7D:99:AE:C7:21:D6:67:25:71:90:6C:B1:AC:E9:A3:61:36
X509v3 Authority Key Identifier:
keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d0:dd:b6:dd:78:fb:c0:6f:1f:24:98:35:cc:a4:22:45:f7:
08:fb:ff:cf:de:e5:e8:6d:69:1c:08:a1:20:b5:77:49:eb:45:
52:b6:65:0b:e2:89:ce:a3:d1:9a:2a:7c:96:55:c2:a7:02:ec:
13:bf:b2:98:3e:3c:01:83:a8:a4:10:e4:02:46:67:3f:0e:0e:
d1:23:61:86:76:06:b2:e2:ea:be:fe:21:19:59:32:3d:9e:84:
3c:67:3e:50:c4:26:41:e1:d4:dc:97:84:b3:0d:b3:2a:a3:93:
92:5f:bb:1e:f7:30:b0:90:77:f2:83:ca:e8:b1:02:4a:3f:9f:
d5:5f:b3:77:90:46:78:29:77:07:d0:5f:97:cb:65:d9:1a:35:
f5:6f:12:96:b9:9b:bb:dd:2c:47:71:ca:5d:f8:b3:3b:15:81:
05:3c:3a:8f:64:60:bc:a1:67:1f:3f:7f:f3:fb:99:3e:d6:60:
52:aa:25:47:e5:40:23:ff:e1:cd:65:90:41:b3:3e:cc:5d:6d:
7d:06:07:ce:e6:30:41:9b:26:1d:b1:49:fe:6d:04:5d:cc:8e:
91:a0:39:91:c6:22:48:37:07:4e:13:6c:45:19:3b:78:a8:6a:
74:cd:79:72:60:8f:0b:3c:3a:ef:cf:5e:76:aa:12:58:15:e0:
f8:59:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:41 2026 by rpki-client