
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
File: qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json)
Hash identifier: QBE/2l2GNcW56B1Hif2DSTMqE4L04Hm9VP5VHjAhsf4=
Subject key identifier: CE:8F:C4:ED:A2:C1:D9:60:06:E1:F2:56:70:01:46:DC:5D:C1:59:D7
Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52
Certificate issuer: /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052
Certificate serial: 1459
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
Manifest number: 2C43
Signing time: Wed 22 Jul 2026 16:58:41 +0000
Manifest this update: Wed 22 Jul 2026 16:58:40 +0000
Manifest next update: Wed 29 Jul 2026 16:58:40 +0000
Files and hashes: 1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: +quxBnrOjVFp0W1Q2a7LzU7oYPgxFBaBjzNkFr95/4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5209 (0x1459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052
Validity
Not Before: Jul 22 16:58:40 2026 GMT
Not After : Jul 29 16:58:40 2026 GMT
Subject: CN=6a60f6c1-7597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:9a:78:3d:8f:94:8e:1e:44:14:b4:9f:e4:
13:f1:8b:a9:a2:19:54:c6:88:cd:8e:ae:5f:5f:67:
63:7e:ec:e6:d7:4a:ee:27:b8:6d:18:87:16:ba:2a:
38:35:2d:96:43:1c:ad:e8:f1:33:e3:15:3a:3a:89:
db:3b:80:ba:ce:74:79:b4:7f:a0:0b:c7:fd:44:b8:
98:4b:0b:67:5f:05:07:66:db:54:44:4d:3a:75:43:
26:d1:b1:a8:a7:bb:7e:d4:e9:32:a9:55:3c:d4:bd:
37:7a:8e:0b:fc:46:b6:9c:0f:ae:4b:ef:5f:af:50:
5c:51:36:d6:56:17:05:55:6e:56:60:03:4d:9a:7f:
69:1c:72:63:b8:c2:8a:bf:cf:8b:3e:bf:53:1d:52:
0b:b0:8b:7d:6b:eb:3a:dd:2e:58:5a:69:76:e5:d1:
bd:e4:e2:cf:a7:8d:05:64:6a:ea:fe:04:e0:af:3d:
dd:3e:0f:77:c7:e8:d2:bf:25:50:cd:cf:30:4e:b0:
2c:35:a2:42:b6:d9:d3:d6:42:fc:4b:5a:61:e7:a2:
a4:39:9f:57:eb:1f:3e:d0:d8:f5:d7:51:ed:75:15:
ab:d0:7f:1c:6b:30:31:17:67:8b:c8:87:3f:38:4f:
0f:24:4f:71:2a:4e:ee:0b:c5:42:59:32:33:3c:14:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:C4:ED:A2:C1:D9:60:06:E1:F2:56:70:01:46:DC:5D:C1:59:D7
X509v3 Authority Key Identifier:
keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:c4:f1:e5:4d:19:a0:05:e9:4b:33:b3:1e:d7:ec:9b:b3:2a:
2f:a9:df:37:fa:ad:85:6c:34:59:61:4f:f4:d3:65:32:44:74:
0b:77:11:76:08:3e:e8:67:8b:8d:2b:63:81:d8:29:51:cc:b7:
44:b1:93:2f:0e:7f:bb:08:8f:43:89:77:1f:f9:5c:1d:9d:dc:
2b:97:16:6a:26:77:bf:b1:26:d8:30:7a:7e:d8:e2:03:8b:3e:
0a:df:ba:62:d3:52:0e:20:89:15:8a:81:fd:3f:01:3f:06:1f:
e6:00:61:72:aa:25:7a:a3:76:87:6a:55:d3:e9:05:fa:0e:73:
3a:1a:c4:76:ee:64:e7:62:72:14:b6:d2:62:78:44:3f:79:62:
42:54:73:34:2f:ed:1f:1b:77:bb:8b:60:4f:31:ea:a5:e9:9f:
e8:c7:48:7a:cd:b1:c7:06:9d:d7:08:c4:23:a0:40:c2:0d:67:
a9:db:86:6b:0e:7b:4f:53:08:15:9b:19:59:0f:da:e9:08:41:
8a:60:4b:34:d4:41:54:94:d1:31:68:eb:29:09:e0:82:b8:54:
e8:dc:17:da:b7:43:0f:95:d6:9b:da:07:74:27:f4:a0:e4:b3:
32:42:08:a9:0a:18:fc:d2:79:ca:12:0a:04:36:1a:fe:57:ca:
50:e8:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:10:18 2026 by rpki-client