
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier: Rseei2cL3pZNNq5m6sRTwbfxLTw51Tn2uSlOkYnGYeE=
Subject key identifier: 7B:E1:03:25:79:ED:3F:EA:35:2C:70:FA:F0:0C:31:33:1F:21:A5:A4
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number: 022E
Signing time: Mon 11 May 2026 02:39:12 +0000
Manifest this update: Mon 11 May 2026 02:39:11 +0000
Manifest next update: Mon 18 May 2026 02:39:11 +0000
Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: gDDHL3QF2MotfWpC0tHjWYmmST0fFGntJoLx5O1Z1zk=)
2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: Z6+FwOSORTO5IhxDQLbyy7addHO+Ye/7DWvOrUrjW0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Validity
Not Before: May 11 02:39:11 2026 GMT
Not After : May 18 02:39:11 2026 GMT
Subject: CN=6a014150-c851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:13:cb:f5:b6:af:f2:ff:38:a2:2a:9d:39:
c6:c6:a5:67:0f:09:84:f7:34:8c:5e:4c:7f:83:31:
9f:aa:0e:47:d3:86:57:82:88:77:41:42:09:f9:29:
24:4a:9a:f7:85:be:6d:c3:c9:9a:07:bf:75:25:bb:
3b:4c:df:f9:67:a9:d3:39:b5:68:a3:42:e3:eb:d0:
cd:8a:77:f3:c3:a0:c9:67:8a:d3:02:3e:fa:65:32:
ed:49:b1:5e:96:80:ed:d0:75:18:4d:81:54:9e:6e:
84:3a:e5:13:5a:86:d9:01:f3:5f:b3:58:38:09:9d:
55:ef:e9:91:fa:f6:b3:36:b5:33:05:e1:2a:ee:3b:
94:10:fd:37:b5:17:88:08:75:46:48:46:24:28:f8:
a2:66:df:73:bc:82:54:23:70:f8:eb:20:42:9b:e6:
29:ef:f8:fc:6b:05:fe:8c:fb:f0:d0:ba:e6:e0:ee:
08:ad:72:db:dd:91:57:70:3a:24:dd:51:f3:0b:50:
24:49:38:05:ca:ce:99:7f:9f:e1:0d:b5:76:f0:78:
8f:3a:e9:53:9d:74:38:89:0e:29:98:20:7f:7c:38:
a0:3a:b6:9f:c6:68:42:05:5c:0d:fb:7f:8f:10:97:
ea:a9:ca:c8:b3:97:ed:a9:1d:47:49:06:2d:e4:93:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:03:25:79:ED:3F:EA:35:2C:70:FA:F0:0C:31:33:1F:21:A5:A4
X509v3 Authority Key Identifier:
keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:51:d8:89:22:9b:e6:ae:94:0e:f0:62:ee:38:c3:e5:d1:
af:89:e4:af:83:3d:c6:f5:3f:2b:16:6e:a9:3c:69:c4:f5:b8:
2b:9a:86:d1:41:6d:78:f7:a7:53:b0:c0:23:6e:fa:46:41:82:
95:93:fc:30:dc:d4:76:a9:02:5f:9c:4e:1f:7b:84:b3:cd:ef:
5f:f9:e3:e2:a6:5d:5e:19:bb:27:21:34:a7:8c:53:c5:3b:09:
80:38:ea:99:d9:e8:31:23:e6:bc:6e:ca:9c:c8:9d:74:e6:08:
25:33:b3:5e:eb:dc:74:37:d8:6e:83:01:13:13:c4:29:ab:13:
6e:ef:bc:e2:e6:45:a4:1b:81:1b:81:b2:f0:cf:72:d8:f5:21:
fa:73:67:a2:cd:36:f4:f1:7c:55:5b:d6:19:4b:eb:c9:87:26:
82:67:c2:dc:4c:bd:8e:da:f2:b0:b5:6d:d3:fb:28:b0:bf:7e:
84:62:ce:9b:16:d0:00:17:6b:34:d3:d4:94:18:d4:49:bb:df:
32:7b:a8:f2:bd:cc:a8:86:35:2a:e7:4a:78:e7:2f:d8:44:08:
6e:a7:5d:01:b7:ee:d0:ae:f3:49:16:35:d5:e3:b2:83:8f:83:
38:1f:c4:ce:db:4c:ee:ef:49:b1:77:10:02:ae:89:8f:61:04:
2e:ff:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:37 2026 by rpki-client