
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier: aAtecXOIJ/9dAFD3fhusCbq59A+JNO9nHh1qVEjaaps=
Subject key identifier: 5F:23:84:BE:74:B4:ED:75:7C:67:51:40:87:F2:18:93:71:61:A0:C1
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial: 0A92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number: 0A7D
Signing time: Wed 22 Jul 2026 20:01:32 +0000
Manifest this update: Wed 22 Jul 2026 20:01:32 +0000
Manifest next update: Wed 29 Jul 2026 20:01:32 +0000
Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: U3A1v4hQxG6sh64fJNOkhz1Mop8q3qKetthxG2rWtSk=)
2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: BML+CpNfWIhxgmjTMLZ//EdSsz/6Hi/QXJXWPhL7TSQ=)
3: tizrtS3qU9ricaSU5pNSzX87kgs.asa (hash: Incu3TWqBW6SfBEt+b0TNfuW9AAh4IPbRzwBVryYKVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2706 (0xa92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Validity
Not Before: Jul 22 20:01:32 2026 GMT
Not After : Jul 29 20:01:32 2026 GMT
Subject: CN=6a61219c-56a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:03:49:0c:e3:16:7a:43:97:6d:48:44:e3:
52:9f:8a:b6:23:84:ce:bc:5f:41:d1:50:5e:50:d9:
d3:85:a8:cb:ae:33:61:88:bf:ec:6f:f7:59:7b:c4:
39:ab:9e:af:c2:f8:b2:41:61:4a:01:18:ab:1b:1c:
06:ae:da:08:a2:05:8a:91:fb:f9:ad:aa:ca:18:e2:
77:6e:fb:8f:c4:b8:ae:b8:4a:0d:73:b6:1e:41:6f:
ba:27:28:9d:b6:6d:ea:35:cd:00:29:bb:67:c6:29:
62:cf:b4:7b:cf:de:9d:9d:99:33:ac:64:4f:1c:2e:
ee:35:a2:1a:22:1a:bf:63:fb:40:bb:b4:7e:2a:60:
8b:b9:6b:a9:75:d2:a1:9c:58:8f:d4:eb:52:32:8b:
a8:0e:c8:a2:d0:2f:78:4e:66:2c:2d:67:38:fe:b4:
f0:16:74:01:fc:77:88:2d:92:95:b9:11:a8:bb:5a:
c8:3a:a3:51:8c:62:2b:58:2d:67:3a:2f:3f:b5:1c:
44:0c:98:75:94:95:34:a3:9c:b5:2b:8b:8c:bc:93:
70:a7:32:d5:41:a9:dd:f5:c6:77:52:fd:75:a7:42:
8a:ff:ef:83:56:d6:4b:8a:ad:99:ec:1b:15:69:53:
2b:bc:bc:39:33:c2:7c:4b:86:52:5b:ba:40:0b:0f:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:84:BE:74:B4:ED:75:7C:67:51:40:87:F2:18:93:71:61:A0:C1
X509v3 Authority Key Identifier:
keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:17:6b:d7:07:12:97:88:08:3f:d8:72:c6:d4:4e:ce:ea:2e:
10:33:9d:06:be:81:62:6c:d3:15:51:cc:22:17:dc:ec:f0:ad:
b8:59:0d:8b:c5:b0:41:44:1e:4a:e5:4f:b5:ce:3d:90:d4:d5:
58:a1:37:ba:41:0e:72:cc:2b:a9:e9:70:6e:6d:51:32:76:48:
a2:b2:06:51:2c:4c:a7:b1:e7:a0:25:56:de:c6:95:1e:c6:67:
76:6d:97:da:21:57:d5:b3:83:b4:19:a0:2c:d2:3e:16:a6:8a:
3e:ad:b0:68:a1:d1:41:a0:e1:4e:fa:70:bf:ba:5e:22:4c:3e:
98:2c:6f:47:b8:8e:f0:61:32:e5:ad:48:7c:38:01:ad:24:b6:
cd:52:fb:f3:d5:3d:ac:69:56:81:39:ec:b4:08:cd:d5:1b:15:
54:8e:5c:e5:75:27:a8:67:a8:60:c8:8e:81:0b:2c:94:a3:4b:
af:89:2c:3d:16:a4:d2:4f:4d:e7:de:1b:fd:0d:61:e8:99:24:
33:24:6b:65:d9:ae:77:62:ae:1d:42:10:25:d4:37:dd:ca:db:
c0:0d:2a:d4:4c:d9:88:ca:9a:95:91:c6:aa:a9:5a:04:74:4b:
5b:2d:67:7f:66:53:6f:4f:0e:dd:08:7c:c5:26:5c:62:ba:ad:
a7:7e:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:30 2026 by rpki-client