
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
File: QidVkJNLMeOdgd28nAmFa39OWIQ.mft (raw, json)
Hash identifier: hOs5G4S+bmo6knyvpFbTcaqmqrx6+BD8tcY5qNYUyEM=
Subject key identifier: 9F:31:B5:7B:B1:CD:C7:17:67:90:16:DD:96:13:E6:30:B6:57:1B:DF
Authority key identifier: 42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
Certificate issuer: /CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
Manifest number: 02A0
Signing time: Wed 13 May 2026 01:36:47 +0000
Manifest this update: Wed 13 May 2026 01:36:47 +0000
Manifest next update: Wed 20 May 2026 01:36:47 +0000
Files and hashes: 1: QidVkJNLMeOdgd28nAmFa39OWIQ.crl (hash: jXKUDV8yiSizwUZG/QRYjWW0m3TXZiVPk5/vKUOolQg=)
2: 754A1888490D11ED95C7C86EC4F9AE02.roa (hash: Qahj6ijZlV0ENHSi7W3OwZGiJhU6W6dxMtqWIMdxIl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC009, serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Validity
Not Before: May 13 01:36:47 2026 GMT
Not After : May 20 01:36:47 2026 GMT
Subject: CN=6a03d5af-76cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:53:5e:29:59:97:be:f8:6a:3b:2b:8d:08:
b0:90:fa:b6:87:04:7e:50:64:20:f9:e1:c5:72:ce:
83:6f:53:d1:dd:c7:cd:a7:c8:4f:46:46:27:49:64:
da:71:42:bd:a4:bc:b9:a8:e5:10:47:de:06:6a:c6:
76:7a:62:e7:e5:02:ac:10:97:bd:6d:fd:df:4f:38:
18:48:f5:93:66:de:1a:9a:15:6d:87:0e:70:a3:ff:
ed:f2:4d:52:8e:3a:f0:a2:5e:4a:a0:bc:a9:1c:09:
e0:03:dc:2b:a4:bd:92:1c:ce:81:f8:43:37:b3:a0:
2f:0a:c8:ed:77:c2:22:cd:5d:e6:e6:71:d0:17:b9:
c1:56:29:78:5e:d0:a8:e6:60:2f:2e:c6:d7:b3:82:
dd:95:bb:87:98:d8:19:5d:7e:8d:11:f3:0c:76:02:
0b:63:cb:81:a7:15:dc:4b:b9:02:28:77:1a:77:24:
48:9c:8e:c9:a7:d4:08:e8:b9:2b:83:db:7b:9b:5c:
c4:7f:f0:b8:a7:8a:ed:cb:a1:90:c6:8c:1b:7d:48:
3f:8c:36:b2:4d:26:26:41:ec:d7:01:36:9d:27:ac:
a9:e6:5c:b2:ab:52:20:be:cc:ec:34:7b:2d:1a:47:
28:28:df:3b:f8:dd:27:e4:4e:b8:ba:47:23:97:10:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:B5:7B:B1:CD:C7:17:67:90:16:DD:96:13:E6:30:B6:57:1B:DF
X509v3 Authority Key Identifier:
keyid:42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:7a:85:3d:10:bd:2e:d2:17:be:9e:51:b0:76:cf:52:b1:bd:
0c:e8:1d:eb:3d:d9:00:fe:93:3b:bd:04:88:4b:a2:96:24:52:
a5:7d:cf:6a:5a:dc:80:85:86:cd:ca:b0:f5:48:24:c9:e2:f2:
21:09:13:12:2c:d1:5f:8b:67:3f:bd:4e:9e:aa:63:10:ba:76:
38:ef:93:64:01:36:3b:60:82:14:40:43:f3:e8:49:4e:69:25:
b3:55:d8:31:00:4c:22:38:d7:bf:74:27:17:c1:4d:e1:9b:3b:
84:80:21:96:5f:7e:84:6a:4e:ec:88:7d:74:cc:68:98:f1:20:
c6:67:9d:c9:c7:f6:04:16:fc:d8:83:c3:36:67:af:e4:53:da:
cd:22:80:e8:be:d6:0f:9f:19:eb:b0:d9:82:ab:69:13:73:ec:
05:eb:aa:22:b6:a3:de:b3:3d:d1:a9:0b:7d:c0:14:d2:f8:2c:
bf:f1:03:0a:d8:36:3c:4d:32:bf:a4:56:fb:13:b3:48:c0:30:
25:a5:63:77:af:57:40:19:e1:a8:08:06:cb:d7:5f:68:6c:2e:
44:4b:e6:75:d9:d1:4a:8f:41:d7:01:1e:40:d9:f5:51:c8:3f:
6f:50:11:34:83:f2:d9:f3:f9:68:b0:3e:81:e6:ce:be:1d:57:
c0:82:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:21 2026 by rpki-client