
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File: 0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier: adp22rtjenlWzV8lvZ15E+LUx5aFOHr09zWcE9xqHxo=
Subject key identifier: 6A:E4:43:6F:5C:10:74:21:B2:48:45:E5:8A:54:F0:38:BB:97:21:3F
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number: 0152
Signing time: Thu 23 Jul 2026 06:45:04 +0000
Manifest this update: Thu 23 Jul 2026 06:45:03 +0000
Manifest next update: Thu 30 Jul 2026 06:45:03 +0000
Files and hashes: 1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: s5TPI5CSH3yBjxZ/d+bPkWDYQ1qbMihfoDjMEF0TIuU=)
2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
3: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Validity
Not Before: Jul 23 06:45:03 2026 GMT
Not After : Jul 30 06:45:03 2026 GMT
Subject: CN=6a61b870-2a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:bd:10:a1:dc:29:a1:5d:b2:53:76:75:4a:
da:3b:55:0b:df:62:0a:1f:ba:62:19:d4:42:4b:b6:
07:7c:1d:df:43:18:7f:9e:1e:c5:cd:3f:ec:2e:44:
fd:d9:a3:69:40:f8:d9:de:9f:77:50:c7:4e:b9:80:
8b:31:fc:2f:21:50:d4:f5:44:54:33:74:40:d4:d8:
3e:c5:62:74:05:60:82:56:31:62:63:0d:91:2b:7f:
4d:b0:7f:5b:f3:7a:cc:22:41:ff:09:78:02:e3:93:
4a:56:fe:81:d5:b8:b9:43:d7:f9:cf:8f:9e:d1:0a:
d8:f7:c3:4f:13:3e:85:30:23:b5:9e:ae:da:b8:48:
53:b5:b3:26:da:39:37:3f:4a:07:f3:83:3e:65:38:
2c:7a:68:3f:4d:7e:9f:7a:6b:c5:dc:b5:d6:f1:ee:
5e:af:a4:11:5b:e7:aa:4d:f5:ee:5f:a5:72:69:02:
ec:d4:5f:9c:2b:d1:4f:dc:db:4f:aa:a0:a7:41:14:
73:23:2f:d8:c3:41:33:c0:45:11:71:41:da:de:2f:
23:fc:16:4a:25:14:e2:7f:ea:24:06:7c:0a:e4:d8:
49:c6:d7:cc:3e:cd:fd:04:fe:ac:cf:15:6e:2e:bb:
35:ab:91:59:1e:33:52:13:b1:f8:3d:6a:b9:c0:1d:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:43:6F:5C:10:74:21:B2:48:45:E5:8A:54:F0:38:BB:97:21:3F
X509v3 Authority Key Identifier:
keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:51:41:1a:ec:32:ee:4c:cf:b2:2a:f7:0b:94:b5:c1:e0:67:
63:ff:de:25:94:eb:95:32:b5:2f:19:15:da:6f:8c:c2:45:1c:
80:ab:09:d1:3c:ec:9d:80:72:8c:9f:f8:ec:d0:a6:79:6e:db:
56:6a:7c:0b:72:e1:c4:30:b0:99:49:7c:7f:81:52:a7:f5:67:
b6:5d:e3:54:66:5a:4a:d1:cd:e8:cf:58:34:dd:5a:25:e0:7b:
18:73:a5:13:ec:e4:f1:49:28:3e:91:a9:c0:f2:9e:ab:9d:b4:
d0:e6:3f:31:d8:97:dc:46:22:f1:e6:de:bd:1e:62:68:87:0b:
7a:f9:9f:89:6e:f8:59:cf:93:4f:f2:a5:e6:69:99:28:8f:17:
37:2c:0c:52:5b:43:01:50:6c:4b:5b:98:22:de:cd:21:81:94:
b0:da:4b:bf:c3:f4:3a:c9:be:d4:2b:4c:f4:18:ae:a4:45:b7:
a7:58:64:d0:38:e8:4b:55:4c:23:c7:47:fc:20:49:d2:d9:67:
1d:ed:f4:6a:3d:e7:80:23:09:90:30:ce:e1:09:40:0d:95:ad:
86:2d:bc:00:f0:e6:d6:2f:75:59:30:43:fc:75:a8:7e:59:27:
ce:b1:57:27:6a:bf:f4:9f:c0:a0:74:ca:8e:de:e2:01:d4:eb:
7c:57:33:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY4QUQxMTAvBgNVBAUTKEQxMEMyMDk2RkI1REIzMDRBQkQyRjk5RjQ1QTI5NDg4
MjkyRDM3MjEwHhcNMjYwNzIzMDY0NTAzWhcNMjYwNzMwMDY0NTAzWjAYMRYwFAYD
VQQDEw02YTYxYjg3MC0yYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoZC9EKHcKaFdslN2dUraO1UL32IKH7piGdRCS7YHfB3fQxh/nh7FzT/sLkT9
2aNpQPjZ3p93UMdOuYCLMfwvIVDU9URUM3RA1Ng+xWJ0BWCCVjFiYw2RK39NsH9b
83rMIkH/CXgC45NKVv6B1bi5Q9f5z4+e0QrY98NPEz6FMCO1nq7auEhTtbMm2jk3
P0oH84M+ZTgsemg/TX6femvF3LXW8e5er6QRW+eqTfXuX6VyaQLs1F+cK9FP3NtP
qqCnQRRzIy/Yw0EzwEURcUHa3i8j/BZKJRTif+okBnwK5NhJxtfMPs39BP6szxVu
Lrs1q5FZHjNSE7H4PWq5wB1XJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrkQ29c
EHQhskhF5YpU8Di7lyE/MB8GA1UdIwQYMBaAFNEMIJb7XbMEq9L5n0WilIgpLTch
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC9ERUJBMjM4MDg2
QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3U3Iwdm1mUmFLVWlDa3RO
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBRd2dsdnRkc3dTcjB2bWZSYUtVaUNrdE55RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjhBRC9ERUJBMjM4MDg2QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3
U3Iwdm1mUmFLVWlDa3ROeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV1FBGuwy7kzPsir3C5S1weBnY//eJZTrlTK1LxkV2m+MwkUcgKsJ0TzsnYBy
jJ/47NCmeW7bVmp8C3LhxDCwmUl8f4FSp/Vntl3jVGZaStHN6M9YNN1aJeB7GHOl
E+zk8UkoPpGpwPKeq5200OY/MdiX3EYi8ebevR5iaIcLevmfiW74Wc+TT/Kl5mmZ
KI8XNywMUltDAVBsS1uYIt7NIYGUsNpLv8P0Osm+1CtM9BiupEW3p1hk0DjoS1VM
I8dH/CBJ0tlnHe30aj3ngCMJkDDO4QlADZWthi28APDm1i91WTBD/HWoflknzrFX
J2q/9J/AoHTKjt7iAdTrfFczYQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:21 2026 by rpki-client