
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier: leqPej+A8aZjfvpUNDQTtzEaEcpZ/6MWvcq8XsEhB9U=
Subject key identifier: 2B:77:E0:7A:79:59:E5:02:85:27:B5:65:80:33:D4:01:D9:AE:EB:2B
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 35DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number: 35A0
Signing time: Wed 22 Jul 2026 14:47:55 +0000
Manifest this update: Wed 22 Jul 2026 14:47:55 +0000
Manifest next update: Wed 29 Jul 2026 14:47:55 +0000
Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: uWOdoCiTFeIHkojNN0tOodbn3K+XNbnZe/4jrEN8FGI=)
2: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: lYpkRD/vPCqBa7Vd4N6W0BGqOH9jxtp9EJocrqn7xs0=)
3: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=)
4: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 0iMCnY3705MLKSQeDX6iv1qsWDcFTiwdaLS+CFP3lvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13787 (0x35db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: Jul 22 14:47:55 2026 GMT
Not After : Jul 29 14:47:55 2026 GMT
Subject: CN=6a60d81b-e348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:04:04:79:9d:a7:7f:c8:be:7f:08:52:3c:
43:23:f6:a8:a4:74:82:2b:2a:bc:51:56:7b:de:12:
8c:e9:b9:0d:be:42:4e:6a:bd:19:68:31:4d:36:a9:
a5:0b:dc:0f:6d:85:86:5c:e8:57:a1:10:3e:c1:a9:
cc:2d:10:15:f5:c7:04:c9:c4:d6:b2:41:d4:08:39:
dd:72:02:cd:b5:e5:12:67:23:93:3a:ff:0a:67:cb:
43:29:1f:0b:a6:56:6f:ee:32:93:4e:5f:a2:c4:ac:
ce:b9:d9:22:0a:c0:e2:39:d6:8a:f2:3a:61:b1:32:
3f:b7:fc:37:29:9d:d5:0a:e5:d8:58:80:33:70:6a:
04:a5:b2:6d:eb:d1:6a:92:d1:b2:43:ee:f8:e7:c5:
1e:e7:45:67:8e:b8:2d:9b:19:6a:bb:f8:cc:56:5f:
9a:1d:43:76:db:0e:55:ba:c5:61:a2:70:98:3a:92:
18:a7:f1:54:ac:f4:b7:a0:29:2b:ff:76:54:f4:2d:
19:38:7c:12:2b:53:b1:55:ef:5f:9a:3c:4e:26:63:
c3:2c:d5:77:eb:82:a2:96:e1:f9:d9:0c:93:de:b9:
7c:ad:e3:f0:20:be:b6:5c:ca:fc:80:10:0a:1c:1f:
71:8c:aa:17:48:c6:66:a6:8a:d0:1b:7e:fc:9e:ab:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:E0:7A:79:59:E5:02:85:27:B5:65:80:33:D4:01:D9:AE:EB:2B
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:53:20:94:1f:44:34:c8:13:f5:d7:4a:56:b7:83:e1:d0:22:
5d:98:aa:79:df:93:cf:69:a1:c8:0b:1b:6a:87:a2:e8:2c:c2:
38:10:2f:07:d5:fa:80:f2:17:70:f8:30:5e:90:04:5c:d5:fd:
c2:6f:60:78:0f:66:b3:86:98:18:c4:71:a7:5e:f8:6d:c8:58:
33:77:d4:b0:4c:94:aa:86:ac:2e:40:04:f9:a8:2a:70:15:a9:
76:17:83:73:12:7e:30:7a:96:8a:78:8d:88:e5:81:50:79:4c:
6b:44:07:cb:86:f1:55:cc:87:d9:45:e5:73:e6:e4:bb:e1:ea:
81:a2:18:d3:62:02:04:50:f6:1f:d7:15:82:8a:b3:82:f6:2a:
f1:11:00:1d:90:1f:fe:2c:79:53:b1:02:9d:75:56:20:91:96:
2b:50:c0:ec:c3:3c:6b:0d:e3:27:dd:05:80:27:d9:d6:43:46:
5c:29:74:9f:24:6d:4b:dd:e0:a3:39:bb:36:e6:da:41:f9:f9:
93:68:b9:d7:de:35:57:33:b5:31:bb:3f:a9:2d:15:63:a1:df:
5a:26:89:ef:b3:8e:62:0d:46:22:a7:79:cf:19:fb:f9:b0:68:
fd:02:7c:23:53:f8:fe:fe:c9:d8:96:9a:73:33:ba:e8:d1:db:
d3:f7:3d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:07 2026 by rpki-client