
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json)
Hash identifier: 3TgsAWyTAyLYiG8dohEq759y1UvA0laVUQXHp7vn6iA=
Subject key identifier: 9A:54:85:BF:17:9F:4C:25:4A:9E:CE:5F:48:43:7B:1A:7D:38:0D:F5
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial: 0372
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
Manifest number: 036A
Signing time: Wed 13 May 2026 00:59:15 +0000
Manifest this update: Wed 13 May 2026 00:59:14 +0000
Manifest next update: Wed 20 May 2026 00:59:14 +0000
Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: LAJln0P+rIk+9QWA3S4yJDihLLZC09rZF7jT0FxQ/pY=)
2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: tyV63/6XwWHMEnlVNrZpKRUTH+qgqLOvrBf/JcSlvnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503
Validity
Not Before: May 13 00:59:14 2026 GMT
Not After : May 20 00:59:14 2026 GMT
Subject: CN=6a03cce3-3412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:ec:34:19:c4:0f:10:0a:aa:b9:6e:19:3b:
f7:f9:50:02:96:43:c0:6a:54:86:12:20:c7:d7:86:
63:ce:70:4f:3c:70:8c:51:48:f0:b6:8c:12:bb:c1:
4b:32:d3:b8:2d:58:30:f0:0f:16:43:f5:1b:bc:c7:
d1:b4:f8:c0:48:71:68:fb:ef:3b:8e:cc:2b:87:fd:
d0:d0:24:94:76:82:6a:7c:c8:73:76:5c:1a:4d:e5:
7e:ee:3d:26:e4:f3:25:3d:c3:74:08:45:1e:d7:d5:
2a:58:2b:23:86:53:7e:17:43:bc:98:74:60:57:67:
83:b9:f0:f2:08:ae:2f:63:63:18:00:68:e5:09:94:
62:8f:22:1c:6b:a0:4a:21:f7:24:ff:89:28:ee:7e:
3b:e7:3b:01:81:15:ab:55:55:9e:e1:fd:6d:a9:17:
de:94:b7:bb:ca:54:c1:dd:9c:1a:db:af:89:8b:f3:
77:d2:eb:95:82:28:71:36:68:58:d8:d3:8d:5a:85:
0f:48:0f:7a:ff:30:f9:40:05:75:f3:30:f1:a4:10:
76:30:ce:eb:56:95:55:8a:8d:db:43:be:1f:62:8b:
80:33:9c:6f:1b:61:16:0c:cf:ff:7f:29:f5:79:cb:
0e:cb:6f:56:36:0b:70:ce:5c:19:e1:ef:19:33:63:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:85:BF:17:9F:4C:25:4A:9E:CE:5F:48:43:7B:1A:7D:38:0D:F5
X509v3 Authority Key Identifier:
keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:84:1d:ff:61:5f:d6:7b:8a:9f:3a:cf:83:09:eb:45:a1:
03:23:9d:7d:ad:3b:9c:83:6d:e2:20:63:ab:a2:75:35:5b:24:
6b:9e:bd:82:8b:7c:9b:07:dd:81:47:c4:e2:66:f7:9f:3e:58:
8c:d5:78:c8:47:40:4c:b3:fb:87:d0:54:10:57:d7:80:1a:e7:
1a:63:de:f1:a0:6a:3a:a8:78:2f:98:ec:d6:1f:f0:0e:0b:56:
db:dd:07:9c:78:08:c1:76:ad:80:2a:8c:97:ff:0b:14:6f:ec:
e4:97:36:c7:4e:6a:63:a7:13:a7:1f:64:b1:c6:4e:69:98:cd:
4c:17:9d:03:05:aa:73:fe:90:1c:db:49:24:fb:7f:8a:f2:12:
59:aa:93:09:cb:45:ac:c5:2e:60:f2:4b:79:1b:82:c5:30:da:
ff:ae:66:9f:b9:7d:c8:75:06:1e:95:02:1a:a2:29:63:42:38:
a6:be:e5:bc:f2:44:ff:e8:9d:a6:9f:57:0e:da:9c:df:9c:aa:
19:04:c6:7e:f1:aa:e0:e2:d9:db:88:fe:eb:d1:fe:bf:06:55:
e4:a4:1f:a6:b1:e1:4a:86:81:5a:de:b5:b9:6f:f6:7c:79:3c:
04:b0:c9:9d:10:08:99:19:08:c2:d4:fb:41:69:c4:71:bd:ab:
e8:34:b9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:18 2026 by rpki-client