
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft
File: QGOUHymkcXnuj_UfMB3x6kEfvTg.mft (raw, json)
Hash identifier: gKpp+e0vPQAd0JJKPvtJOdRwwzQ+3lerWJOnFU7zqg8=
Subject key identifier: 91:08:78:31:D4:72:DB:4D:04:F3:D6:17:AB:B9:25:EE:07:F0:8F:55
Authority key identifier: 40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38
Certificate issuer: /CN=A91E4700/serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft
Manifest number: A1
Signing time: Thu 23 Jul 2026 09:23:44 +0000
Manifest this update: Thu 23 Jul 2026 09:23:44 +0000
Manifest next update: Thu 30 Jul 2026 09:23:44 +0000
Files and hashes: 1: QGOUHymkcXnuj_UfMB3x6kEfvTg.crl (hash: YX9Ia9MfpRbkD031jYAh1UiEB66X5mWJhGSyysNio50=)
2: 6A797774BDDF11F0B524BD85C4F9AE02.roa (hash: 8w/0YJBW6UK1DI6hNcDAiSGDGO9AI7vRgBVhPpRorOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl
rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4700, serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38
Validity
Not Before: Jul 23 09:23:44 2026 GMT
Not After : Jul 30 09:23:44 2026 GMT
Subject: CN=6a61dda0-7aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:ac:71:6d:0b:e3:85:4a:1e:ee:7c:eb:8f:
29:57:4e:e3:3e:fb:cb:07:dc:3e:dd:e7:97:02:82:
9b:2a:f6:50:22:ba:18:f1:7b:7f:79:3b:e8:4b:8f:
83:e8:e1:ce:3e:db:09:3b:b5:5e:c3:43:ee:78:ce:
b8:3c:38:2f:fc:59:b3:d8:56:1d:ad:5c:14:7f:7a:
e4:27:0f:96:a2:c3:0d:4d:16:1f:08:2a:c9:8a:c9:
44:18:e5:7d:f3:e9:a6:23:af:b7:64:de:19:15:9f:
48:8d:e8:0a:03:3a:13:05:dd:cb:e1:8c:3e:2a:7c:
23:94:51:b0:06:91:de:e0:42:28:6f:5c:46:69:db:
96:56:df:77:e7:63:71:36:77:74:39:6b:0b:b5:10:
a2:29:2c:f4:4a:af:97:43:ad:d6:91:68:fa:37:d3:
76:3a:9e:3c:08:79:bd:c1:36:34:15:62:06:aa:9b:
7a:ed:06:e8:5e:a1:22:39:bf:65:ef:4b:cc:5b:e6:
9f:94:93:40:b8:c9:d3:6f:ca:b2:bc:f0:13:a3:42:
d1:ca:80:b7:69:bc:b0:d6:a3:c0:22:c5:ca:dc:35:
bd:e5:84:5d:b3:a3:c5:9b:72:a3:86:05:07:31:56:
91:52:7c:5f:65:f0:4a:9d:06:6c:87:62:ed:97:49:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:78:31:D4:72:DB:4D:04:F3:D6:17:AB:B9:25:EE:07:F0:8F:55
X509v3 Authority Key Identifier:
keyid:40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a3:6d:a9:ea:d0:18:be:cf:5e:53:88:40:7c:ce:7f:de:ca:
a9:2e:f7:c3:40:c5:89:6a:ee:02:61:c0:8d:6f:30:a7:4e:fb:
3c:92:7b:3e:58:6d:4f:7b:7d:c5:5f:6f:76:a2:49:87:61:a3:
cc:0d:c7:e1:c4:b8:3f:68:ac:2d:96:d8:86:cb:ba:cb:37:a6:
5b:e2:a2:1c:f0:2f:4a:1e:3d:78:bf:c1:52:fb:40:42:c5:b3:
a7:25:35:88:05:4f:d4:bc:f3:7c:41:91:a1:2b:7f:80:07:10:
77:1e:67:33:c0:da:c4:52:ca:8e:52:7c:01:35:49:d1:88:49:
dc:b4:e0:e0:f0:cd:92:4c:68:16:d6:42:40:4d:a9:41:ff:f0:
44:c6:d5:15:6c:5c:ad:c2:53:b3:64:3e:94:91:e8:74:1e:aa:
5e:f2:85:1f:5a:2d:80:b0:a2:9d:c3:a7:95:0a:f0:2d:f9:d5:
59:81:77:4f:e4:8e:c7:a0:fe:79:41:5a:0a:55:98:1f:9d:0f:
e8:0b:44:fb:fb:0b:19:df:22:d2:65:da:06:c5:c9:18:f3:67:
b4:f4:89:93:7a:1d:ed:49:0f:b0:c2:bb:99:e3:d5:7f:f2:42:
09:53:ec:58:69:bc:2b:14:4d:af:31:7d:05:d1:81:65:dd:8d:
d6:ab:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:51 2026 by rpki-client