
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier: zZO2bYviuxBeXUEB9Vl1d8sb0vLxy9mZoLBpb32Jti4=
Subject key identifier: 3B:6C:FA:DC:24:25:54:68:1B:5C:CE:ED:5A:6B:56:B8:33:50:E6:32
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial: 07BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number: 07B6
Signing time: Tue 12 May 2026 21:31:52 +0000
Manifest this update: Tue 12 May 2026 21:31:52 +0000
Manifest next update: Tue 19 May 2026 21:31:52 +0000
Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: JDhlWgfn8Or+qT/iCf727VWOn5NrCpPpSgn1RlNoaU0=)
2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: EF9uieKoaY19hPq/K/Sub8whVe1rvynhE+WooVi1n/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1983 (0x7bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Validity
Not Before: May 12 21:31:52 2026 GMT
Not After : May 19 21:31:52 2026 GMT
Subject: CN=6a039c48-3f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:eb:b3:e2:3a:af:72:45:db:f9:51:9c:16:
48:b1:0f:cb:b9:81:70:fa:ef:69:92:8e:4b:44:0f:
4f:99:94:e5:b3:53:72:b5:3c:9d:25:fb:9c:7e:c5:
6e:d2:06:e8:56:7d:c4:f2:45:29:ef:51:ca:c6:65:
d5:cd:89:d6:cf:9b:37:a6:85:73:bc:a6:06:a1:41:
45:df:77:4d:a7:8c:50:8c:21:7f:61:1a:33:fd:b7:
28:d9:0a:74:db:ee:fa:0e:46:3a:51:ce:ba:56:a1:
e6:90:37:c4:85:14:1d:8f:31:7b:92:ae:57:cc:45:
05:d6:22:8b:ee:b7:3e:ec:55:8d:13:ba:ff:b2:d5:
e5:d5:ea:c1:6b:f6:d1:e8:b1:7c:c7:bb:d8:46:49:
68:58:74:8a:85:56:a1:38:ac:86:d1:b2:5b:90:0c:
9c:2c:d8:6f:cf:eb:ba:9b:bd:c3:9a:dc:38:bb:a1:
74:a5:3f:52:33:76:d3:94:83:63:71:c0:0d:c1:48:
71:06:34:a1:a5:58:e4:5b:c6:ec:8b:d6:57:45:e5:
e4:15:56:b7:40:d7:0f:0e:c1:cf:95:1f:d1:5e:98:
08:8d:82:2f:c0:31:ca:a1:ca:48:3f:1c:fe:a8:8d:
70:75:40:5a:08:8a:19:0e:9a:0a:b7:49:a9:b8:1e:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:FA:DC:24:25:54:68:1B:5C:CE:ED:5A:6B:56:B8:33:50:E6:32
X509v3 Authority Key Identifier:
keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:af:aa:c4:b1:31:a4:cb:e6:cc:b6:6f:c2:46:18:94:a1:77:
00:fa:0e:dd:28:35:46:1e:7e:06:d7:5e:7d:e3:f6:1b:73:85:
b2:5e:43:a3:a2:31:f4:99:18:5d:ce:94:8d:80:7d:df:3f:94:
5f:30:54:11:15:73:84:01:33:7b:b6:21:62:11:fb:f1:89:46:
2c:37:30:57:89:56:a3:20:10:94:48:e7:31:25:08:86:73:a4:
e2:65:c7:8d:24:5e:e4:b1:39:69:c3:6f:41:52:79:3a:10:a2:
88:e3:34:e8:cd:b5:b4:9f:36:c2:9f:3c:7c:52:41:a0:12:bf:
57:ea:a4:4d:5c:fd:25:8d:b8:38:01:52:a7:65:67:5a:ab:79:
a4:38:10:d4:91:31:38:27:f4:10:a7:0c:cd:7d:49:79:e2:37:
ff:2f:1f:6c:13:c4:12:b6:bd:ff:bd:ff:8a:26:ae:03:a9:fb:
1e:11:22:22:1f:b7:49:42:2a:fc:52:dc:86:2f:d6:1f:5a:f7:
ea:f9:95:7e:86:11:c6:2b:6b:a4:75:85:55:9d:00:ad:26:b7:
6c:22:09:ae:a3:40:8a:a2:7c:78:80:e6:81:b5:9c:be:6f:ee:
98:f3:fb:21:63:69:d4:a1:c0:b0:e8:33:15:e5:4e:ed:7b:68:
42:49:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:37 2026 by rpki-client