
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File: a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier: gbub9qoOdl0t5aqzjgWFheI48df/DBUpvqUBdlZzgSQ=
Subject key identifier: 61:93:2C:94:B6:F2:EA:4C:48:73:78:85:48:B4:F2:23:8F:D9:68:7A
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial: 34EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number: 34CA
Signing time: Fri 24 Jul 2026 15:24:43 +0000
Manifest this update: Fri 24 Jul 2026 15:24:43 +0000
Manifest next update: Fri 31 Jul 2026 15:24:43 +0000
Files and hashes: 1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: jqvdldEd5D/wTxokJQJcyNPCk4HAyaSgq5SyxW6XhEc=)
2: E63D6AB086EC11F19E006003A7EE528E.roa (hash: HA6O4500TdNqLPszScg0UgHEWNLVJDVH5xC0mHNZQLw=)
3: A634576635D511F1A68BE981A0833773.roa (hash: 4ZRG+jBKDkZrZQYJ33ftXyXhm7MnH5udmfkKK13Boew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13551 (0x34ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Validity
Not Before: Jul 24 15:24:43 2026 GMT
Not After : Jul 31 15:24:43 2026 GMT
Subject: CN=6a6383bb-0d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:29:2e:d7:a7:7a:ab:ed:d9:5e:86:ed:b4:
00:93:8d:e1:53:49:27:3e:65:d4:c9:a8:ed:71:0b:
a4:25:bf:07:ac:3b:e7:ef:68:8f:45:5b:24:c1:a8:
04:61:33:5c:57:7a:05:a4:7d:54:a6:b6:1f:b2:ca:
62:f8:09:7b:0f:59:21:a9:5b:e5:09:9c:00:fa:b7:
26:bd:22:93:84:54:7f:ba:0c:93:b2:78:bf:84:1c:
47:e1:81:e0:e8:ee:15:64:bc:1f:d5:13:54:f5:eb:
14:e3:99:42:0e:3b:86:2b:f1:93:62:4e:0c:be:42:
6a:f0:5d:31:74:b7:35:03:05:4f:3e:ec:24:f7:5d:
49:ed:8d:ae:72:fb:29:62:d6:29:20:67:9d:31:43:
62:7b:a0:75:4d:22:d3:d6:41:9b:e1:cd:ae:c2:ab:
26:d2:09:ba:c6:78:7f:5c:0a:81:34:e7:33:55:0c:
79:f4:5f:32:f5:2b:24:e0:17:9e:2d:86:7d:0c:cb:
07:16:74:2b:dc:ec:27:f0:bf:94:df:5f:f4:f3:3c:
26:8c:5b:fa:00:a4:85:de:83:1e:70:bd:27:1e:db:
5e:21:2f:59:85:33:78:df:c1:a5:f6:76:dc:de:a9:
fa:98:b4:8c:64:21:4b:dd:df:33:0f:55:54:14:1a:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:93:2C:94:B6:F2:EA:4C:48:73:78:85:48:B4:F2:23:8F:D9:68:7A
X509v3 Authority Key Identifier:
keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:de:8e:5c:0c:5e:02:71:a6:5c:7d:5b:a4:45:21:ef:dd:9b:
6b:bf:f7:cc:f0:e7:8e:e7:32:f0:77:36:e5:d4:b9:f5:d4:e5:
d0:3e:10:ea:63:68:5d:aa:71:0c:28:a8:cd:aa:67:33:27:0a:
41:a4:03:4f:d2:e2:4a:41:48:58:a9:72:cd:0d:76:61:40:58:
34:cd:a1:1b:81:4b:62:39:c8:11:7b:c3:79:b1:11:a2:43:5a:
02:6e:bf:19:9f:9b:9d:04:8b:25:51:d1:35:cd:10:68:8d:06:
70:ec:8e:8d:fc:a0:ea:59:90:34:51:d6:70:45:1a:2c:0c:81:
32:35:2f:28:52:7c:1b:06:02:b0:69:89:64:05:60:af:93:a1:
8e:e7:4f:33:c6:50:e2:2d:1f:19:a7:bc:43:29:1c:d8:36:e2:
3b:97:2f:b9:ed:48:ba:2d:47:40:81:b3:cc:56:dd:85:55:4b:
18:04:21:51:96:a6:f5:ec:27:15:fa:cb:30:dc:fd:74:d7:4e:
ad:1a:df:24:9c:38:bc:84:b0:5f:52:02:6b:fb:b4:32:1f:56:
d4:ec:c8:7c:26:35:7f:fa:1b:74:83:c1:5e:81:88:cf:ef:98:
2f:89:c1:a5:ca:bb:8c:6f:54:ca:ac:19:43:07:55:d4:8a:f7:
b4:4b:7c:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz
QzQ5MzExREIwHhcNMjYwNzI0MTUyNDQzWhcNMjYwNzMxMTUyNDQzWjAYMRYwFAYD
VQQDEw02YTYzODNiYi0wZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsm8pLteneqvt2V6G7bQAk43hU0knPmXUyajtcQukJb8HrDvn72iPRVskwagE
YTNcV3oFpH1UprYfsspi+Al7D1khqVvlCZwA+rcmvSKThFR/ugyTsni/hBxH4YHg
6O4VZLwf1RNU9esU45lCDjuGK/GTYk4MvkJq8F0xdLc1AwVPPuwk911J7Y2ucvsp
YtYpIGedMUNie6B1TSLT1kGb4c2uwqsm0gm6xnh/XAqBNOczVQx59F8y9Ssk4Bee
LYZ9DMsHFnQr3Own8L+U31/08zwmjFv6AKSF3oMecL0nHtteIS9ZhTN438Gl9nbc
3qn6mLSMZCFL3d8zD1VUFBod5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGTLJS2
8upMSHN4hUi08iOP2Wh6MB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy
RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4
dE1HZWJmY3lPMUE4U1RFZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj96OXAxeAnGmXH1bpEUh792ba7/3zPDnjucy8Hc25dS59dTl0D4Q6mNoXapx
DCiozapnMycKQaQDT9LiSkFIWKlyzQ12YUBYNM2hG4FLYjnIEXvDebERokNaAm6/
GZ+bnQSLJVHRNc0QaI0GcOyOjfyg6lmQNFHWcEUaLAyBMjUvKFJ8GwYCsGmJZAVg
r5OhjudPM8ZQ4i0fGae8Qykc2DbiO5cvue1Iui1HQIGzzFbdhVVLGAQhUZam9ewn
FfrLMNz9dNdOrRrfJJw4vISwX1ICa/u0Mh9W1OzIfCY1f/obdIPBXoGIz++YL4nB
pcq7jG9UyqwZQwdV1Ir3tEt8ew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:13:30 2026 by rpki-client