
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier: R7AoXbfkcd1njd4c/qJGFBmDKNWAM/QdLkOgj91T5Nk=
Subject key identifier: 8C:9C:DF:4B:54:EF:31:DB:1C:79:24:7A:8F:DA:5E:3F:A6:43:E5:1F
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number: 028C
Signing time: Thu 23 Jul 2026 02:52:52 +0000
Manifest this update: Thu 23 Jul 2026 02:52:52 +0000
Manifest next update: Thu 30 Jul 2026 02:52:52 +0000
Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: ToSPa3wTZ/V8OqlJqQZr+FfE6H0hg2Q4D0W4kCHjkGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Validity
Not Before: Jul 23 02:52:52 2026 GMT
Not After : Jul 30 02:52:52 2026 GMT
Subject: CN=6a618204-3f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:20:ce:8b:99:0a:d6:66:d0:5a:02:63:fa:
b3:96:52:09:a5:1c:6b:54:ea:48:fd:1f:da:15:dc:
ad:00:98:a6:f7:41:b7:7b:d2:4b:3e:b9:4b:8e:7b:
31:c7:6c:a7:9e:81:b8:44:a2:35:7c:a9:4d:3d:35:
81:c6:0f:a1:16:c5:bc:30:2a:fa:5f:fa:e5:9d:68:
c7:d5:9e:0a:d9:11:12:1e:58:ce:ae:16:95:f8:17:
53:f4:f2:e6:09:20:52:a8:da:71:23:38:a3:e2:97:
b2:9e:3d:1e:34:5d:4f:37:3b:d1:e9:24:11:98:f9:
cb:29:26:db:61:43:46:f6:7c:e5:df:dd:e7:c7:4d:
29:6b:28:84:0c:08:fc:a1:d7:cb:d1:2e:23:75:15:
51:61:cc:c5:d5:d4:92:7d:ec:2d:5c:ce:2e:33:f5:
92:51:3a:30:66:46:2f:34:7a:39:ae:a1:ef:d3:5d:
e7:6d:6a:6f:f3:f6:7b:29:67:63:5f:3b:1b:6e:cb:
16:49:c7:d3:83:9c:a0:67:c5:03:db:7f:f9:ba:c3:
41:a0:55:2f:6d:3d:55:c0:3c:ab:50:5a:52:65:29:
b9:be:45:36:f6:86:12:9d:89:b3:9f:8e:07:9b:7e:
32:6e:f3:b7:d9:25:40:96:33:94:ea:1e:ac:a1:47:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:DF:4B:54:EF:31:DB:1C:79:24:7A:8F:DA:5E:3F:A6:43:E5:1F
X509v3 Authority Key Identifier:
keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:f2:7e:72:c8:61:2f:6c:8a:23:32:9e:96:6a:a5:00:af:e3:
70:7b:d7:9f:d3:72:a4:79:2b:42:7d:a4:f4:b9:92:11:00:e4:
57:02:d6:75:91:a7:55:66:d2:12:ec:79:b5:36:82:fd:1b:f2:
57:f2:64:40:ae:ef:e0:b0:fe:e0:2a:83:6b:bf:1b:4c:8d:ad:
51:7e:14:55:e2:ff:27:08:ae:c4:fa:d6:6a:e7:7f:65:4d:70:
2f:10:f7:c7:9f:dd:f8:da:43:5f:dd:dc:1e:4b:84:ac:b4:81:
e2:7c:a0:98:cc:5e:bf:7d:a5:e5:f2:11:d8:e7:26:8e:46:9c:
90:a4:c8:c4:eb:4f:95:20:77:51:cd:30:da:ef:09:29:47:dd:
67:66:b2:21:50:02:0c:1e:ec:57:fb:67:99:79:86:3a:47:de:
b6:ba:6a:8a:8a:00:62:7d:18:63:24:b6:58:dd:a8:bf:83:de:
98:79:49:5b:5e:df:3b:dc:19:71:16:e7:77:ad:3a:62:fd:77:
55:83:c5:56:8b:d6:ab:e7:18:09:3c:6a:00:05:44:fb:02:74:
f9:38:a8:b3:d2:aa:d0:42:de:b7:81:3b:dd:67:41:53:8a:0f:
2b:1b:e3:03:41:e7:9a:3c:db:56:cb:41:03:b7:5f:1c:e5:d4:
62:3b:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:34 2026 by rpki-client