
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier: kb02KU8jO8v4okrbuVbNw8GsZ/iEXxGzWQg8jSzCpcs=
Subject key identifier: B7:EE:B5:09:6A:71:86:A9:85:F7:29:6B:BD:E5:CC:F4:1A:45:65:2F
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number: B8
Signing time: Mon 11 May 2026 07:20:51 +0000
Manifest this update: Mon 11 May 2026 07:20:50 +0000
Manifest next update: Mon 18 May 2026 07:20:50 +0000
Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: lCECIXx7CyDYJWHGaBViVLEIY8u3fYTG8V96cLxULb4=)
2: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: kYrLbQFT1ZzGHGGu97W4fdlheMT2k3tj7Vb3H/0HdO4=)
3: B87594FC08B311F1954B37591C3D8C67.roa (hash: wztUnu/AtmwGJSEKvUQ+sSvPTP/4Cs6eUYir69FLSaI=)
4: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: cG6u0zgjdvCrRZeQ4usyXAcEzT17uS3cbK/qREEeINU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: May 11 07:20:50 2026 GMT
Not After : May 18 07:20:50 2026 GMT
Subject: CN=6a018352-fa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:10:24:f8:48:d2:ca:09:a1:4c:67:12:ed:
b6:dd:c5:43:21:04:93:98:4e:2d:7f:ec:e6:b2:3e:
1f:61:86:52:b0:49:05:7b:98:e3:04:19:67:13:d5:
13:67:7b:9d:e6:c3:78:8d:04:45:68:a9:51:1b:15:
de:e9:a2:e2:47:3e:9b:08:ff:57:b0:28:48:9e:bd:
73:8e:a9:62:f1:69:a8:78:68:98:01:5f:4a:0f:95:
a0:44:3c:72:48:ce:4c:e6:dd:d8:0e:75:ea:89:e5:
1e:ef:ae:ad:13:05:b2:7f:ca:8f:e3:15:b1:0b:ea:
af:46:5f:2a:8e:bb:4c:ba:9a:52:38:de:3a:e7:13:
6c:2b:ff:a5:cf:32:cc:ff:cc:ec:be:00:e9:59:43:
08:be:5e:36:7a:95:b8:b3:30:f0:2e:f2:31:81:67:
77:df:b2:7e:dd:dd:0e:56:89:66:95:93:3c:0f:b2:
df:84:06:2e:f1:d4:57:4d:3b:3a:a1:53:c1:5f:df:
c5:b5:51:67:db:3b:c9:18:ae:b8:2e:62:0e:9b:9d:
1a:3b:a0:a0:89:85:f5:05:d2:e5:55:af:ba:94:fd:
09:20:d9:22:54:6f:bf:24:1a:8b:17:21:71:e3:b1:
cf:56:d1:54:45:9b:30:34:35:40:a0:5a:19:15:c2:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:B5:09:6A:71:86:A9:85:F7:29:6B:BD:E5:CC:F4:1A:45:65:2F
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:66:ed:12:2c:12:1e:2b:6b:31:5c:0d:6a:0a:87:a9:ee:22:
83:c8:07:5d:34:e2:8e:d0:04:e9:fb:36:e1:67:99:b1:76:3a:
07:67:bd:16:e4:60:76:23:a5:e7:35:dc:d6:c2:93:06:bf:a0:
d0:d2:8d:3f:ff:d5:54:f9:a6:91:64:d9:00:c1:15:19:89:76:
0b:a8:4d:63:93:d6:1f:a0:1d:40:03:63:a1:5c:52:9f:f2:a2:
67:5f:b6:3e:a4:3b:70:39:b3:bb:bc:98:41:0f:fb:fd:5f:7c:
97:40:d7:0a:13:6a:6f:2c:04:14:53:c4:94:4a:9c:2e:40:fe:
17:57:02:42:fe:94:57:1b:55:87:ab:3b:5d:05:13:02:50:43:
02:7c:03:3a:e9:a4:85:88:4e:cc:34:64:a4:2d:ae:3a:f8:81:
26:f2:58:7b:3b:a9:01:84:f3:5e:7b:1b:82:5b:07:e8:b3:6d:
72:b7:88:4a:b0:d0:d8:3a:57:a4:92:3c:02:55:cb:d2:98:ac:
aa:c8:b7:2f:cc:22:fb:65:6d:ea:5c:ce:67:37:b9:a4:1c:d6:
da:10:13:8e:85:63:01:17:5e:41:b9:14:d2:41:61:3d:0a:30:
88:d0:ae:a0:76:8f:e8:cf:74:34:fd:1d:74:e5:af:1c:b5:26:
a2:36:b3:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVBOEIxMTAvBgNVBAUTKDQxQzc1NzE0Mjk5QTU3OEREMTkwRkQxRjczMDk1NUIx
RkQ5QUMxRjQwHhcNMjYwNTExMDcyMDUwWhcNMjYwNTE4MDcyMDUwWjAYMRYwFAYD
VQQDEw02YTAxODM1Mi1mYTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4KMQJPhI0soJoUxnEu223cVDIQSTmE4tf+zmsj4fYYZSsEkFe5jjBBlnE9UT
Z3ud5sN4jQRFaKlRGxXe6aLiRz6bCP9XsChInr1zjqli8WmoeGiYAV9KD5WgRDxy
SM5M5t3YDnXqieUe766tEwWyf8qP4xWxC+qvRl8qjrtMuppSON465xNsK/+lzzLM
/8zsvgDpWUMIvl42epW4szDwLvIxgWd337J+3d0OVolmlZM8D7LfhAYu8dRXTTs6
oVPBX9/FtVFn2zvJGK64LmIOm50aO6CgiYX1BdLlVa+6lP0JINkiVG+/JBqLFyFx
47HPVtFURZswNDVAoFoZFcLC/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfutQlq
cYaphfcpa73lzPQaRWUvMB8GA1UdIwQYMBaAFEHHVxQpmleN0ZD9H3MJVbH9msH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUE4Qi9CQTA4QUE0MjRC
ODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0M1JrUDBmY3dsVnNmMmF3
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUE4Qi9CQTA4QUE0MjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0
M1JrUDBmY3dsVnNmMmF3ZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJmbtEiwSHitrMVwNagqHqe4ig8gHXTTijtAE6fs24WeZsXY6B2e9FuRgdiOl
5zXc1sKTBr+g0NKNP//VVPmmkWTZAMEVGYl2C6hNY5PWH6AdQANjoVxSn/KiZ1+2
PqQ7cDmzu7yYQQ/7/V98l0DXChNqbywEFFPElEqcLkD+F1cCQv6UVxtVh6s7XQUT
AlBDAnwDOumkhYhOzDRkpC2uOviBJvJYezupAYTzXnsbglsH6LNtcreISrDQ2DpX
pJI8AlXL0pisqsi3L8wi+2Vt6lzOZze5pBzW2hATjoVjARdeQbkU0kFhPQowiNCu
oHaP6M90NP0ddOWvHLUmojazEQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:57:56 2026 by rpki-client