
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier: B2OI7zpMMhIQ0yYJ9y2smW/q0Xxl0WGyz+NSWVL8pTA=
Subject key identifier: D6:57:5A:4A:14:9D:DA:64:AF:0C:70:FF:A6:81:69:6C:BE:35:8F:0B
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial: 0305
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number: 02E9
Signing time: Wed 13 May 2026 01:31:10 +0000
Manifest this update: Wed 13 May 2026 01:31:09 +0000
Manifest next update: Wed 20 May 2026 01:31:09 +0000
Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: QB+/j+ZE4tiZ1XgS6C/kGnbExqpxirSzq+RkzFak0kg=)
2: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=)
3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Validity
Not Before: May 13 01:31:09 2026 GMT
Not After : May 20 01:31:09 2026 GMT
Subject: CN=6a03d45e-0e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:5a:e0:9f:8e:d1:b1:bf:14:46:9b:7c:cf:
83:37:31:38:9b:48:d7:7f:a2:93:36:41:da:97:cb:
80:6a:83:2e:e5:3a:5c:4a:ca:b0:db:21:70:6e:f3:
7c:be:d0:bf:7b:cc:8f:a7:87:ed:f3:2f:0a:07:12:
8e:a5:63:91:38:6d:87:5a:6e:31:96:fa:b4:ab:91:
0c:8e:54:98:6d:bd:8d:d0:b8:80:6b:b7:b3:55:bb:
c0:9e:45:f0:60:52:c7:a2:0d:be:a3:34:26:32:94:
f1:d7:a6:86:76:69:93:ae:c2:91:82:21:fb:25:59:
ae:3e:91:c6:6b:cb:b9:f2:fe:1b:4d:6b:10:d2:24:
7f:36:85:58:85:58:b0:b2:7c:e6:92:98:e8:b4:ff:
fc:2f:ad:d2:e9:5f:bd:f8:dc:7d:23:55:75:d5:4d:
3a:bb:90:e2:d5:8e:d0:f7:c1:4a:a9:09:b4:2d:31:
9f:c4:2b:22:23:7e:03:1b:de:e0:54:d2:99:7e:c5:
ea:af:10:43:00:d8:3a:55:5c:09:5c:3b:49:bf:c0:
35:fc:1b:c9:5a:7b:54:9d:b5:13:88:c3:9c:02:2a:
a1:03:ad:fe:bc:f5:b1:f2:d7:69:14:8d:b7:37:a1:
68:79:93:23:38:5c:07:86:ed:4d:ae:6c:33:cb:02:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:5A:4A:14:9D:DA:64:AF:0C:70:FF:A6:81:69:6C:BE:35:8F:0B
X509v3 Authority Key Identifier:
keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:37:3b:2c:fe:57:2c:ad:ca:02:c0:c9:30:ac:5f:f6:d7:4e:
8f:1d:a8:de:29:bc:21:e4:87:02:a4:4b:59:a3:a6:73:23:c6:
ed:bf:fb:37:f6:a1:a3:63:0e:a0:92:34:8e:91:7c:3e:de:29:
7e:a3:6e:df:38:d6:a3:8e:51:8a:77:26:d1:e2:f5:27:75:50:
de:20:63:df:ca:9a:33:63:71:86:e7:35:1a:b3:a0:7b:e5:1f:
a2:67:c1:9e:32:dd:eb:13:87:79:36:e8:2d:de:88:51:8d:cd:
94:d3:5f:24:17:53:19:5d:29:7d:91:97:66:9b:45:96:de:10:
8a:f3:ca:66:e6:4c:2a:8a:9a:5e:5f:64:ad:12:f8:e9:b5:50:
9f:38:a9:80:ba:ed:2e:de:02:83:32:13:38:4e:a1:fa:2a:52:
33:a8:fb:66:db:8e:ce:19:33:d2:a5:0f:4e:25:09:e2:6c:3c:
3a:8d:77:93:a2:87:6d:b0:50:65:ec:02:71:d4:93:63:c1:07:
da:33:3a:e9:88:f6:ef:d5:3c:95:5f:43:d5:fb:22:f2:19:a9:
4a:e7:03:67:b8:2a:b0:19:03:45:87:f9:a1:4e:5b:4b:43:c5:
87:df:38:84:39:ed:9c:bc:2d:61:d7:5d:bc:2a:44:6a:32:a4:
3f:2f:8c:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0
ODFBMzcxOUUwHhcNMjYwNTEzMDEzMTA5WhcNMjYwNTIwMDEzMTA5WjAYMRYwFAYD
VQQDEw02YTAzZDQ1ZS0wZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwcla4J+O0bG/FEabfM+DNzE4m0jXf6KTNkHal8uAaoMu5TpcSsqw2yFwbvN8
vtC/e8yPp4ft8y8KBxKOpWOROG2HWm4xlvq0q5EMjlSYbb2N0LiAa7ezVbvAnkXw
YFLHog2+ozQmMpTx16aGdmmTrsKRgiH7JVmuPpHGa8u58v4bTWsQ0iR/NoVYhViw
snzmkpjotP/8L63S6V+9+Nx9I1V11U06u5Di1Y7Q98FKqQm0LTGfxCsiI34DG97g
VNKZfsXqrxBDANg6VVwJXDtJv8A1/BvJWntUnbUTiMOcAiqhA63+vPWx8tdpFI23
N6FoeZMjOFwHhu1NrmwzywJD8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZXWkoU
ndpkrwxw/6aBaWy+NY8LMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1
NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj
WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p
UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjDc7LP5XLK3KAsDJMKxf9tdOjx2o3im8IeSHAqRLWaOmcyPG7b/7N/aho2MO
oJI0jpF8Pt4pfqNu3zjWo45Rincm0eL1J3VQ3iBj38qaM2Nxhuc1GrOge+UfomfB
njLd6xOHeTboLd6IUY3NlNNfJBdTGV0pfZGXZptFlt4QivPKZuZMKoqaXl9krRL4
6bVQnzipgLrtLt4CgzITOE6h+ipSM6j7ZtuOzhkz0qUPTiUJ4mw8Oo13k6KHbbBQ
ZewCcdSTY8EH2jM66Yj279U8lV9D1fsi8hmpSucDZ7gqsBkDRYf5oU5bS0PFh984
hDntnLwtYdddvCpEajKkPy+MkA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:41:24 2026 by rpki-client