
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier: 5yTZ3SXrKUXw0sXwcheGRYF4V1TI5eEftkCYbXViYyw=
Subject key identifier: 6B:42:93:FE:CE:00:41:FF:0B:9C:5B:A9:13:08:D4:F0:65:B0:5A:B4
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial: 0514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number: 04FE
Signing time: Thu 23 Jul 2026 00:32:57 +0000
Manifest this update: Thu 23 Jul 2026 00:32:56 +0000
Manifest next update: Thu 30 Jul 2026 00:32:56 +0000
Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: WA342hF9gLgpGYvXyAOGZyoVgy7+Sa+tw8uPaVuWldI=)
2: 65798E8A1F7D11F18F98CA06223D8C67.roa (hash: RZFsnQn6HA9v12vUgYh/78hGLqlY8AmjxFGu89yIv54=)
3: F3B1927A1E0511F1841549681E3D8C67.roa (hash: KFJazkmvnPBoQlHt7NJ9M2Eg3tsyR0kZTa+OC7vwIGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Validity
Not Before: Jul 23 00:32:56 2026 GMT
Not After : Jul 30 00:32:56 2026 GMT
Subject: CN=6a616138-c23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:c0:69:37:86:c1:ca:20:ad:27:fb:ec:69:
a1:ea:b7:39:7f:33:9b:e8:25:44:59:2b:a9:f2:96:
a5:9c:ef:49:0e:8b:1d:e8:1f:75:d1:8d:cc:72:6a:
49:d8:2d:f1:2d:4d:72:95:5b:0b:cc:7f:96:dc:0b:
91:f4:af:38:e0:17:aa:b4:f2:9e:b4:49:28:79:0c:
a5:af:ae:96:b6:79:e3:b7:a7:03:48:5c:84:71:b2:
e8:dd:ca:85:a2:32:61:31:a5:0b:c3:2a:50:83:30:
6b:fd:76:33:5b:a5:dc:47:9d:f9:7d:50:c4:78:1c:
fc:1c:08:ca:bb:7c:6f:d6:ce:70:15:1c:58:cc:7e:
cf:e7:31:69:c2:b1:be:14:3f:75:7c:c0:01:00:bc:
1c:45:cb:22:45:b5:19:0d:4f:eb:71:11:fb:c5:bf:
9c:d7:31:d8:a7:2b:c6:da:4d:75:ae:d6:02:3e:22:
81:0e:d4:b9:5f:1f:5b:f9:d1:9b:4c:37:9f:96:a7:
85:f2:b5:7a:60:78:e2:b9:6f:c5:31:d0:88:52:0d:
4f:3c:c8:a9:d3:61:05:eb:0f:48:24:f3:01:f9:10:
19:f2:e7:de:f3:83:37:41:f8:f7:76:04:9a:60:d1:
26:9e:25:a7:99:a3:d6:62:c8:d8:63:99:fb:9a:aa:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:42:93:FE:CE:00:41:FF:0B:9C:5B:A9:13:08:D4:F0:65:B0:5A:B4
X509v3 Authority Key Identifier:
keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:16:b2:f0:12:b8:00:41:92:51:51:ed:cc:58:2a:0e:81:
06:b2:35:f4:10:73:d2:53:7b:13:67:c3:4c:3f:c8:dd:6c:1e:
90:76:b5:cf:91:51:3e:8c:4f:0e:14:c3:8a:eb:d7:0c:ec:82:
54:11:73:c8:26:3b:c6:eb:0a:62:0f:60:aa:7a:56:73:7b:2b:
e1:13:e9:38:ef:1e:1a:65:6f:5f:a9:f6:0d:37:5a:90:ff:49:
3f:2a:48:d8:5c:df:3d:24:ee:4b:a5:57:f5:cd:c1:a6:73:84:
b0:0d:f6:90:75:28:e7:8b:9d:36:80:08:36:87:d0:dd:28:29:
99:18:80:58:06:fa:67:9e:22:7a:57:9f:a1:5e:22:2d:f5:50:
69:02:18:86:11:f5:4f:4f:74:90:98:5c:1d:3f:5c:23:8b:ef:
e5:fe:c6:0d:f1:c4:34:92:82:26:46:56:b7:83:97:37:01:c5:
2c:3e:36:90:b5:f5:98:2d:ce:53:c9:ba:45:86:d5:17:61:02:
c7:6d:8d:68:07:e6:d3:35:5d:06:51:a1:da:5e:f1:39:c5:3a:
b9:b8:96:ae:45:43:6c:25:3c:d5:81:a9:af:84:b2:71:ad:73:
9c:18:de:a7:80:a8:13:35:ff:15:a4:65:af:06:66:f1:a1:4e:
0b:ac:53:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD
RDFBNTYyN0YwHhcNMjYwNzIzMDAzMjU2WhcNMjYwNzMwMDAzMjU2WjAYMRYwFAYD
VQQDEw02YTYxNjEzOC1jMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3tLAaTeGwcogrSf77Gmh6rc5fzOb6CVEWSup8palnO9JDosd6B910Y3McmpJ
2C3xLU1ylVsLzH+W3AuR9K844BeqtPKetEkoeQylr66Wtnnjt6cDSFyEcbLo3cqF
ojJhMaULwypQgzBr/XYzW6XcR535fVDEeBz8HAjKu3xv1s5wFRxYzH7P5zFpwrG+
FD91fMABALwcRcsiRbUZDU/rcRH7xb+c1zHYpyvG2k11rtYCPiKBDtS5Xx9b+dGb
TDeflqeF8rV6YHjiuW/FMdCIUg1PPMip02EF6w9IJPMB+RAZ8ufe84M3Qfj3dgSa
YNEmniWnmaPWYsjYY5n7mqqu0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtCk/7O
AEH/C5xbqRMI1PBlsFq0MB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4
QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXph
bTVjalVRSVZCNjNOR2xZbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXPkWsvASuABBklFR7cxYKg6BBrI19BBz0lN7E2fDTD/I3WwekHa1z5FRPoxP
DhTDiuvXDOyCVBFzyCY7xusKYg9gqnpWc3sr4RPpOO8eGmVvX6n2DTdakP9JPypI
2FzfPSTuS6VX9c3BpnOEsA32kHUo54udNoAINofQ3SgpmRiAWAb6Z54ielefoV4i
LfVQaQIYhhH1T090kJhcHT9cI4vv5f7GDfHENJKCJkZWt4OXNwHFLD42kLX1mC3O
U8m6RYbVF2ECx22NaAfm0zVdBlGh2l7xOcU6ubiWrkVDbCU81YGpr4Syca1znBje
p4CoEzX/FaRlrwZm8aFOC6xTgg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:56 2026 by rpki-client