
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier: /eyaVNnr5pWNZXk7dXZIBzn3GKYRhnMG9yYAJgs2TQk=
Subject key identifier: A7:97:72:C4:74:91:0B:CC:7F:AF:D6:F5:0C:75:A9:5F:9F:64:35:9E
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 35B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number: 357C
Signing time: Tue 12 May 2026 14:46:54 +0000
Manifest this update: Tue 12 May 2026 14:46:53 +0000
Manifest next update: Tue 19 May 2026 14:46:53 +0000
Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: 0rRqiQxsyvxaxbCp4VvkHDsDbGp0bC+lUcrJ1AdgKjM=)
2: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: lYpkRD/vPCqBa7Vd4N6W0BGqOH9jxtp9EJocrqn7xs0=)
3: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=)
4: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 0iMCnY3705MLKSQeDX6iv1qsWDcFTiwdaLS+CFP3lvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13751 (0x35b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: May 12 14:46:53 2026 GMT
Not After : May 19 14:46:53 2026 GMT
Subject: CN=6a033d5e-d830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:1b:b3:f2:f2:8d:ad:dc:e9:21:17:6c:04:
60:73:3f:b8:ad:8e:89:df:ca:24:a8:39:ae:02:d2:
f6:b4:6a:03:3b:de:b6:fe:fd:cb:fb:05:f7:5c:9e:
21:ab:33:ad:ea:7a:ae:a6:6e:14:bd:86:de:af:b3:
eb:37:da:a5:7f:28:c5:51:05:ce:f2:2b:04:0c:c3:
64:1c:9d:b5:35:0e:51:62:a4:0d:7f:08:72:39:73:
33:11:e5:25:04:8a:f3:3f:db:46:3e:97:91:39:1e:
f9:0d:56:da:07:b2:82:41:ba:a5:e6:eb:0c:6f:8b:
61:f0:01:29:75:55:56:a8:46:fc:db:a7:e9:a0:7f:
77:b0:79:be:ee:5b:34:ea:9f:56:55:a5:28:35:4b:
79:78:d7:b8:36:57:70:47:47:1d:ed:fd:78:cc:bb:
ed:60:16:7f:aa:68:5e:e3:88:96:10:e5:c0:7c:76:
83:a9:4b:5e:bc:5b:50:7f:e3:22:94:1f:fd:fb:ac:
89:03:d0:52:66:51:4e:f7:3a:7d:87:59:5f:71:86:
ad:81:85:60:24:7e:22:86:3f:52:1d:67:48:ea:35:
37:18:bd:d2:3a:1e:21:66:97:95:33:49:28:fa:ff:
ff:b0:39:97:67:71:4c:fc:78:14:cd:bd:5d:86:b2:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:72:C4:74:91:0B:CC:7F:AF:D6:F5:0C:75:A9:5F:9F:64:35:9E
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:06:e4:1b:62:e1:7a:76:d4:b0:0e:6a:2f:1b:2b:c5:25:72:
5a:a1:6d:8a:ba:1f:f2:04:e7:af:ea:ed:d7:b7:d7:93:15:d9:
1e:18:46:51:a5:b0:74:e7:8e:34:91:2f:ce:43:c7:7b:4c:2e:
e6:b6:d2:59:13:6d:cd:cc:8c:24:7b:6a:93:0a:50:0a:28:35:
82:1e:ad:2e:5a:58:06:6d:9a:0f:06:08:81:45:fb:c1:35:75:
e8:f4:74:bc:36:61:5b:1a:fd:7c:c7:8d:46:eb:58:2f:65:db:
20:82:7b:80:ce:b8:c3:f1:0f:51:19:83:5b:63:97:a1:6c:b0:
30:91:75:62:c1:aa:a0:dd:44:de:63:b7:25:03:26:0d:9f:e0:
2f:fb:47:0f:24:fc:ae:32:11:e4:5a:16:a2:42:b9:47:d1:14:
b7:4f:b8:5b:c1:92:4d:89:4e:d6:03:84:ea:0d:84:72:ea:0e:
91:9e:bc:04:ea:68:79:20:61:86:e3:d6:03:9b:09:52:02:af:
72:61:6e:b4:5b:a1:2d:42:4d:5d:13:8b:26:41:f7:65:8e:88:
1e:38:04:1f:ad:1c:38:1e:c4:37:56:83:2e:61:c4:16:2d:57:
15:a7:8c:22:e5:dd:e2:5d:f4:02:6e:8b:9c:07:65:04:e0:d7:
29:6a:bc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:32 2026 by rpki-client