
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier: OK0rvfTZ7e97yGtA1klJ8ZUCnpeEWsIUhvnGAAsIIsw=
Subject key identifier: 66:92:2D:99:A9:AB:6B:A1:7B:C4:D3:6F:A8:41:A9:92:9E:F1:90:3E
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial: 1C0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number: 1BF4
Signing time: Wed 22 Jul 2026 16:18:50 +0000
Manifest this update: Wed 22 Jul 2026 16:18:50 +0000
Manifest next update: Wed 29 Jul 2026 16:18:50 +0000
Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: IgKNyGWWbQ1iXmz7DjeHiRA3ipHc9/5sTAJgqjJmBLA=)
2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7182 (0x1c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Validity
Not Before: Jul 22 16:18:50 2026 GMT
Not After : Jul 29 16:18:50 2026 GMT
Subject: CN=6a60ed6a-f3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:14:07:65:85:2c:6d:32:4b:1f:5c:4a:ec:
05:a0:11:a0:cd:f0:8e:9a:e4:05:cc:bd:08:25:d1:
51:9d:9c:6f:a8:90:4c:99:5b:8f:79:d0:d4:29:11:
ca:e8:b1:9c:28:39:05:ae:fd:af:35:05:8b:90:d6:
e5:79:08:cf:29:a3:12:53:5e:b6:fe:85:22:d2:85:
ef:ce:34:a0:9c:5a:05:ee:58:0d:14:57:8b:ce:cf:
9a:58:8b:38:71:39:69:ac:17:ad:ea:26:a9:0c:47:
e5:ce:ab:0c:11:98:ca:de:00:c7:6e:ac:13:ed:e4:
50:b6:14:7a:2c:f5:2d:9d:a1:01:4c:1f:6e:da:ec:
56:38:b6:c0:77:3a:69:f3:13:b5:b4:5b:5f:be:38:
8a:e6:2f:b0:c7:b0:65:48:db:18:e6:5e:7e:bb:1a:
1a:84:22:30:ea:70:34:0f:87:40:d9:a8:51:ef:fd:
9b:d3:d4:7f:1c:b4:5d:a4:99:4f:68:3b:b0:a8:de:
c2:2e:7a:d4:08:aa:48:40:e0:85:1e:d3:82:8a:50:
46:15:c3:01:5c:90:d3:08:57:c2:08:6d:95:fe:77:
ad:db:c4:3a:8a:95:69:41:82:f6:ce:be:7f:ad:fc:
b9:d9:9a:4b:2e:ff:ee:80:50:50:14:ce:c0:7c:db:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:2D:99:A9:AB:6B:A1:7B:C4:D3:6F:A8:41:A9:92:9E:F1:90:3E
X509v3 Authority Key Identifier:
keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:97:ca:31:6f:2b:4d:d4:1f:d1:36:28:df:58:28:81:b8:c8:
0f:37:a6:49:7b:61:62:06:92:3f:7d:28:fd:92:40:4b:e4:b3:
ca:73:44:69:2a:10:4f:a7:ee:76:12:b0:cc:ca:51:92:b0:dd:
49:d0:e6:8d:ba:16:09:a6:07:01:96:97:d0:1a:2f:a6:c3:4c:
b0:b0:0e:48:37:4f:85:3f:9e:1d:1a:c3:84:b6:34:1c:fc:15:
b8:c7:5d:82:5b:82:d8:ae:7a:c8:d8:5f:d5:62:c8:a2:bc:f8:
b9:f5:1a:19:5c:c4:02:f1:08:0e:70:fc:75:f1:3d:81:81:04:
e9:b0:3f:3a:b6:86:bf:21:6b:86:f5:5e:a7:c3:2e:27:87:2d:
50:fe:f9:d1:b2:0f:1f:a8:99:68:07:8d:69:2b:bb:08:be:6d:
fd:e8:ed:20:07:22:15:66:be:86:d3:31:55:6a:c0:55:f5:64:
56:8f:03:a2:44:a8:78:93:fe:ce:db:a4:9d:c8:c2:8a:71:20:
e7:17:ce:bf:8f:32:bf:29:b3:8b:70:5e:76:4d:6e:d5:2e:e1:
87:a3:00:1d:87:7a:5b:21:76:d1:87:97:42:1b:91:6b:b0:7b:
31:43:d8:e2:fe:fc:cd:97:cd:89:84:73:31:b2:74:e9:a3:83:
76:21:e3:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC
NjlERDlDOUIwHhcNMjYwNzIyMTYxODUwWhcNMjYwNzI5MTYxODUwWjAYMRYwFAYD
VQQDEw02YTYwZWQ2YS1mM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3gUUB2WFLG0ySx9cSuwFoBGgzfCOmuQFzL0IJdFRnZxvqJBMmVuPedDUKRHK
6LGcKDkFrv2vNQWLkNbleQjPKaMSU162/oUi0oXvzjSgnFoF7lgNFFeLzs+aWIs4
cTlprBet6iapDEflzqsMEZjK3gDHbqwT7eRQthR6LPUtnaEBTB9u2uxWOLbAdzpp
8xO1tFtfvjiK5i+wx7BlSNsY5l5+uxoahCIw6nA0D4dA2ahR7/2b09R/HLRdpJlP
aDuwqN7CLnrUCKpIQOCFHtOCilBGFcMBXJDTCFfCCG2V/net28Q6ipVpQYL2zr5/
rfy52ZpLLv/ugFBQFM7AfNuVpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaSLZmp
q2uhe8TTb6hBqZKe8ZA+MB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC
OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P
RXNFNm9oSEM3eWEybmRuSnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf5fKMW8rTdQf0TYo31gogbjIDzemSXthYgaSP30o/ZJAS+SzynNEaSoQT6fu
dhKwzMpRkrDdSdDmjboWCaYHAZaX0BovpsNMsLAOSDdPhT+eHRrDhLY0HPwVuMdd
gluC2K56yNhf1WLIorz4ufUaGVzEAvEIDnD8dfE9gYEE6bA/OraGvyFrhvVep8Mu
J4ctUP750bIPH6iZaAeNaSu7CL5t/ejtIAciFWa+htMxVWrAVfVkVo8DokSoeJP+
ztukncjCinEg5xfOv48yvymzi3Bedk1u1S7hh6MAHYd6WyF20YeXQhuRa7B7MUPY
4v78zZfNiYRzMbJ06aODdiHjOw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:10 2026 by rpki-client