
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json)
Hash identifier: NN+WbgFS81poRP0ck+tgmOD0DdFhYDgxV/gt6Dk9IFE=
Subject key identifier: 0B:84:C8:F4:34:90:0E:85:AE:AE:7E:E3:92:C8:32:8D:01:B3:FE:1B
Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
Manifest number: 01DC
Signing time: Thu 23 Jul 2026 04:51:03 +0000
Manifest this update: Thu 23 Jul 2026 04:51:02 +0000
Manifest next update: Thu 30 Jul 2026 04:51:02 +0000
Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: jmEcOSBO9ZyVQjR26yofu6Y8hfHFmoyCzOWVa3XX3mg=)
2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: A77x6jjPqEqz/VnapKYzVBvxBHWwqdh+Pq5JdZT0OUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Validity
Not Before: Jul 23 04:51:02 2026 GMT
Not After : Jul 30 04:51:02 2026 GMT
Subject: CN=6a619db6-c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:6a:1d:83:c6:ab:e9:50:13:8e:51:3d:ff:
19:d3:d1:85:60:f5:8f:e8:b2:b7:fd:0d:25:7d:ce:
99:ce:45:cd:31:50:fa:aa:3f:ce:e4:4b:19:52:27:
d8:2f:ab:2a:cb:82:7a:e4:98:65:fe:3b:c4:3c:c3:
15:00:ea:51:25:3a:77:d1:a3:72:1c:79:cb:c2:42:
6b:9d:74:4c:16:40:37:be:0c:dd:7e:41:9d:2f:53:
b2:a5:87:6d:6b:67:38:01:18:a7:53:07:02:c5:f3:
7f:b5:df:64:9a:74:b7:a5:5a:78:ee:51:1e:24:5d:
0b:25:f8:74:e5:bc:e0:8b:3f:40:03:6e:40:f9:2d:
01:4c:40:28:8d:c5:a5:bf:74:9d:e9:87:c6:41:cf:
72:80:92:23:88:a8:6d:8e:9d:79:f7:d6:2b:c1:f9:
2f:f2:fb:4a:f1:80:44:54:4a:28:1d:dd:3e:03:7d:
94:d6:60:51:d7:ee:16:92:55:e7:de:e7:a2:6c:25:
40:6f:3e:4c:4d:c1:87:9b:03:e8:98:20:d2:de:a3:
ae:c9:7a:33:29:3e:82:b8:43:2c:e3:b0:06:ea:df:
aa:6b:6e:5d:d3:e0:56:8e:b9:d3:56:56:a4:4e:ca:
c5:be:51:e6:ef:c4:65:d7:12:d2:53:34:44:96:ef:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:84:C8:F4:34:90:0E:85:AE:AE:7E:E3:92:C8:32:8D:01:B3:FE:1B
X509v3 Authority Key Identifier:
keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:18:37:e6:6a:d5:9e:b6:a4:30:4b:71:da:b9:36:1c:65:15:
a2:5e:3c:2f:56:0b:dd:11:de:19:ce:89:0a:e5:5d:35:58:da:
f7:4d:8e:0f:a0:15:09:15:6d:89:a8:9b:00:23:05:27:76:98:
77:1d:3f:1f:7d:b3:8e:1f:85:92:e5:97:d1:55:44:86:32:ab:
e2:34:88:31:c6:21:e6:51:35:33:f1:05:e3:ae:f0:d3:b9:92:
5b:3a:53:a2:33:0a:7c:23:87:c8:cb:af:b6:34:b6:c7:92:fb:
07:90:3f:57:04:b1:af:4b:a9:8e:18:c4:54:2e:5a:ce:70:90:
cc:0d:e6:4f:d4:61:8b:08:f9:35:a3:d8:39:80:2d:99:f5:26:
28:69:ef:13:83:e5:09:05:33:2d:b4:98:b7:19:a3:1c:98:0a:
26:cd:d7:db:d9:9d:78:b7:97:53:ca:92:d4:11:e0:3a:8f:75:
0b:28:41:68:59:e1:62:c6:9d:37:3c:c5:f1:d5:69:f4:90:65:
e4:ad:2a:52:0d:cf:ff:f6:c9:c1:23:51:c3:b1:5b:d6:b1:8d:
9f:74:2c:b0:a5:f7:ec:36:77:23:21:f3:ce:e9:cb:46:c0:9d:
b1:85:bf:f7:54:e6:66:d9:0c:eb:e1:28:71:47:d2:52:a8:1f:
7a:a2:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:24:02 2026 by rpki-client