
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier: /dD6j4hnZHOAClpFJ8N5aTspL06ViwmtGHDdtX0ns4I=
Subject key identifier: 54:C3:3E:05:FF:D8:29:7F:E4:FB:5F:76:16:8D:D9:43:B7:18:30:94
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial: 3544
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number: 353D
Signing time: Tue 12 May 2026 15:01:46 +0000
Manifest this update: Tue 12 May 2026 15:01:45 +0000
Manifest next update: Tue 19 May 2026 15:01:45 +0000
Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: 4MId3h418pDhVZ99ty6iDTAgciZFa7UO+Q1BCq0nxl4=)
2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Te4mjLd0tS0Pp8TK/M4FDw7bPNKLJP9S5lFxUos08I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13636 (0x3544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Validity
Not Before: May 12 15:01:45 2026 GMT
Not After : May 19 15:01:45 2026 GMT
Subject: CN=6a0340da-8b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:ee:33:44:01:50:4d:74:9a:a3:b8:80:12:
bf:01:ba:2f:92:c5:e0:0f:b5:89:2d:19:ea:82:56:
03:27:fb:2c:9e:0b:96:94:4a:c7:57:65:d9:1a:61:
79:6c:fc:8c:ef:ca:aa:71:0c:06:44:0a:9e:15:85:
96:eb:6b:6c:0a:78:c1:1a:6e:e8:1e:78:35:f9:a8:
58:16:b1:e6:7b:34:2f:6b:07:ec:a8:6f:0d:a4:37:
a3:e5:e8:fd:71:a4:f7:e5:6f:76:29:74:cf:ac:56:
5c:38:4a:c0:90:7b:16:8a:7c:71:c5:d4:44:56:58:
fc:81:00:7e:ad:5c:51:f9:38:d2:cc:41:90:96:cf:
7f:0c:25:83:2e:6d:12:8d:74:6b:bf:57:06:da:e4:
b0:87:27:55:e3:d7:a6:25:62:3b:63:0c:de:68:be:
5d:74:c5:36:e3:12:9e:1c:aa:f7:a5:85:b8:b2:c9:
e0:97:b7:0f:7a:1a:75:8b:94:7d:c9:76:2a:7a:e7:
cb:e4:18:2f:d2:7d:69:cc:c3:a0:4a:80:2f:7f:94:
61:c8:22:03:65:62:94:0c:ef:31:f9:5e:74:4a:9a:
d9:0a:5a:62:47:ff:2f:2d:4b:3f:ea:f0:cb:d9:59:
55:72:dc:c7:61:65:82:f1:12:c4:93:fb:ee:af:1e:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C3:3E:05:FF:D8:29:7F:E4:FB:5F:76:16:8D:D9:43:B7:18:30:94
X509v3 Authority Key Identifier:
keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:83:b2:9d:3c:ee:f0:5f:74:85:d8:90:90:1d:8e:05:24:4b:
b6:87:20:60:ee:3b:87:d1:4c:1a:ea:bf:e2:7a:c4:27:d6:c4:
6d:6f:c0:79:07:98:70:af:fb:b9:49:3a:6b:52:0d:08:58:18:
a3:03:46:57:26:d7:9c:af:30:1c:26:3a:25:82:65:42:1d:a6:
da:0b:51:c3:51:6e:9d:4c:88:0d:84:d9:57:52:67:61:c9:19:
e3:c7:df:77:d1:3e:1d:fd:be:08:6a:61:09:31:b7:7e:9e:50:
31:1a:1a:99:42:c6:1a:60:c2:7b:03:e8:e1:69:96:fe:99:20:
aa:82:f5:80:fa:59:71:40:53:e1:9e:f8:10:5c:5d:90:57:ec:
44:f6:d0:bb:93:4e:6a:c9:09:35:b3:7b:eb:93:de:03:0f:42:
d9:c5:5d:6a:41:64:7a:d9:0f:44:a5:20:e6:1f:ad:43:4b:bd:
09:37:f4:0b:0f:cf:15:9a:97:02:de:72:35:76:f0:a8:20:2a:
08:36:ae:00:01:9b:5b:af:01:80:0e:d9:3e:af:39:5f:c7:55:
cb:fc:d9:6e:58:76:bb:1b:fc:08:85:d8:58:78:62:26:29:b7:
dc:fa:79:a9:18:07:6c:5e:0f:2b:6b:a6:5e:ef:22:bf:75:3b:
20:a3:c8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:07 2026 by rpki-client