
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
File: q34sraVZrlbMJaH2mPiFCTmIifk.mft (raw, json)
Hash identifier: qRt+kWaajhnsWV6jp1sOp7H3eVF/t5YQfUYPNRXn8Os=
Subject key identifier: CC:05:BF:34:87:7E:C2:33:9E:F9:7B:A8:39:A4:22:F6:21:37:75:9A
Authority key identifier: AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9
Certificate issuer: /CN=A91C3DEA/serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
Manifest number: 5E
Signing time: Thu 23 Jul 2026 10:06:19 +0000
Manifest this update: Thu 23 Jul 2026 10:06:19 +0000
Manifest next update: Thu 30 Jul 2026 10:06:19 +0000
Files and hashes: 1: q34sraVZrlbMJaH2mPiFCTmIifk.crl (hash: IU+JAyqWqChS4VLqVpXDLGyBtd0Dzgm5dlg5kIye6nA=)
2: 18FB6A08FC9E11F09F0AC8105E6F56BC.roa (hash: +t1U6IIjEcIREP8ILzimtngggq+V6zIVth7nVFeYBis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl
rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3DEA, serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9
Validity
Not Before: Jul 23 10:06:19 2026 GMT
Not After : Jul 30 10:06:19 2026 GMT
Subject: CN=6a61e79b-ca79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:64:fe:fe:34:06:9e:aa:8c:fb:da:ea:e0:
5e:1f:f5:53:80:5c:dc:fa:7b:9d:a9:87:39:ec:80:
8c:60:6b:43:9a:e8:c3:de:e8:c6:e0:e1:ba:c1:a9:
5f:06:76:47:bf:fb:9b:d3:60:75:24:6f:ec:74:0c:
cf:b8:99:a2:28:28:1e:b1:af:2c:b2:e9:c7:49:3d:
ec:a2:13:df:5d:da:31:30:c0:99:a1:db:7c:6c:b1:
d7:30:3b:9b:c1:10:b9:f2:7b:fc:20:69:22:8b:98:
1f:45:2f:3f:69:e4:fc:5c:f4:3e:d2:46:46:f2:2a:
99:cd:0b:fe:d8:05:25:df:97:ab:d7:8e:d1:98:56:
42:a7:ac:67:23:0c:69:c8:0b:18:bb:f9:77:a7:2b:
52:53:8c:63:45:59:5b:23:1a:c5:a5:10:c2:2d:0a:
68:d3:46:0a:16:3b:7b:12:a3:de:b5:37:1a:bb:6a:
fb:4f:20:ca:8d:2e:cb:03:77:3e:2c:c7:86:fd:a4:
74:99:fa:95:2c:47:ff:fe:1b:f2:53:2b:a3:ee:b5:
e3:00:df:c3:c4:8f:49:68:94:7d:34:0d:dc:5f:79:
45:aa:ca:1c:83:fd:4d:b6:66:ed:92:c5:76:e8:6c:
cd:3a:54:28:c1:e3:dc:80:28:0b:5b:69:89:32:65:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:05:BF:34:87:7E:C2:33:9E:F9:7B:A8:39:A4:22:F6:21:37:75:9A
X509v3 Authority Key Identifier:
keyid:AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:cb:93:ec:d3:8d:fe:58:13:e0:a7:ef:d4:4d:c9:cf:b9:
65:80:04:ee:01:50:ca:ee:c0:ad:8a:36:4b:e2:ed:35:c8:eb:
3c:e0:f7:f5:60:49:5b:e5:71:e5:56:3d:9c:61:b4:f6:91:c1:
6d:35:20:c6:32:2f:10:c6:83:16:a6:f7:86:9e:81:25:87:3b:
57:ec:2b:88:11:db:fb:cf:57:32:57:c3:3d:c8:ab:4c:66:ab:
54:e6:66:1a:81:d5:86:84:eb:20:6e:f6:58:82:e5:1c:81:a3:
b4:73:a2:7c:6e:97:1d:4b:80:a1:3c:ff:fe:30:3c:31:3b:96:
79:de:42:1c:23:b6:7f:71:a2:8e:f6:0d:69:bb:c9:4d:a5:4a:
1e:2c:fb:e0:db:28:77:c2:0a:6f:11:96:bf:53:85:30:b2:a4:
34:cd:ef:7b:53:72:81:63:ea:4a:78:67:4e:6d:61:00:1a:28:
a6:28:53:b6:fb:35:5e:d8:0f:54:94:e6:dd:aa:c3:ba:36:b6:
1c:da:06:bd:b7:16:3d:79:cf:d8:34:6e:67:47:f0:5f:dd:9d:
16:43:e3:f1:a7:54:c0:1c:99:e8:ed:04:26:e2:69:5b:e2:e1:
15:a5:15:61:af:6f:bc:e8:1c:ed:65:55:4e:d0:84:ba:15:41:
29:a8:bb:04
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
M0RFQTExMC8GA1UEBRMoQUI3RTJDQURBNTU5QUU1NkNDMjVBMUY2OThGODg1MDkz
OTg4ODlGOTAeFw0yNjA3MjMxMDA2MTlaFw0yNjA3MzAxMDA2MTlaMBgxFjAUBgNV
BAMTDTZhNjFlNzliLWNhNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnNGT+/jQGnqqM+9rq4F4f9VOAXNz6e52phznsgIxga0Oa6MPe6Mbg4brBqV8G
dke/+5vTYHUkb+x0DM+4maIoKB6xryyy6cdJPeyiE99d2jEwwJmh23xssdcwO5vB
ELnye/wgaSKLmB9FLz9p5Pxc9D7SRkbyKpnNC/7YBSXfl6vXjtGYVkKnrGcjDGnI
Cxi7+XenK1JTjGNFWVsjGsWlEMItCmjTRgoWO3sSo961Nxq7avtPIMqNLssDdz4s
x4b9pHSZ+pUsR//+G/JTK6PuteMA38PEj0lolH00DdxfeUWqyhyD/U22Zu2SxXbo
bM06VCjB49yAKAtbaYkyZWgzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzAW/NId+
wjOe+XuoOaQi9iE3dZowHwYDVR0jBBgwFoAUq34sraVZrlbMJaH2mPiFCTmIifkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzREVBL0ExRkZBODEwRkM5
RDExRjA5M0U2QjE2OTVENkY1NkJDL3EzNHNyYVZacmxiTUphSDJtUGlGQ1RtSWlm
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcTM0c3JhVlpybGJNSmFIMm1QaUZDVG1JaWZrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz
REVBL0ExRkZBODEwRkM5RDExRjA5M0U2QjE2OTVENkY1NkJDL3EzNHNyYVZacmxi
TUphSDJtUGlGQ1RtSWlmay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCucuT7NON/lgT4Kfv1E3Jz7llgATuAVDK7sCtijZL4u01yOs84Pf1YElb5XHl
Vj2cYbT2kcFtNSDGMi8QxoMWpveGnoElhztX7CuIEdv7z1cyV8M9yKtMZqtU5mYa
gdWGhOsgbvZYguUcgaO0c6J8bpcdS4ChPP/+MDwxO5Z53kIcI7Z/caKO9g1pu8lN
pUoeLPvg2yh3wgpvEZa/U4UwsqQ0ze97U3KBY+pKeGdObWEAGiimKFO2+zVe2A9U
lObdqsO6NrYc2ga9txY9ec/YNG5nR/Bf3Z0WQ+Pxp1TAHJno7QQm4mlb4uEVpRVh
r2+86BztZVVO0IS6FUEpqLsE
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:12 2026 by rpki-client