
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier: 7b/RQy6r3XB0+bueu8rS5JtTcn/oqzqHXBIM+ZHC0EE=
Subject key identifier: 4B:3F:A7:72:0C:98:E9:60:48:54:B2:42:ED:01:79:CD:17:ED:6A:D7
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number: 01A1
Signing time: Mon 11 May 2026 04:18:37 +0000
Manifest this update: Mon 11 May 2026 04:18:37 +0000
Manifest next update: Mon 18 May 2026 04:18:37 +0000
Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: 7wj9amk0uwx1BZgLHKPblj+okJpgytKsthqHeOdfpmY=)
2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: PAkdiPUOa/hZ21DhoJPT77EObUJ8xzL2z4kBUhn+7Zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: May 11 04:18:37 2026 GMT
Not After : May 18 04:18:37 2026 GMT
Subject: CN=6a01589d-ddb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:9d:e3:ed:69:e7:43:ed:ba:04:9a:38:3e:
e3:38:48:61:03:63:d8:78:0e:67:51:73:82:3f:14:
ac:57:e2:34:f1:31:34:91:7a:2e:78:08:a1:e6:27:
8d:0c:82:c0:09:b6:2f:07:5f:42:80:24:7a:64:5c:
9e:94:52:cb:45:4e:2f:ac:d2:36:d2:94:3e:a4:86:
98:cc:b2:8b:a7:e4:5f:49:14:56:33:4a:3f:2d:ec:
3a:94:3a:38:94:1d:85:7f:e8:1b:bf:bd:b5:07:3a:
14:24:d6:68:7a:34:32:23:37:0d:77:ac:72:ab:5d:
b4:ea:f2:c1:fd:72:f4:13:09:5b:32:58:79:84:3f:
c7:4b:46:1a:79:5e:a2:7e:51:b5:56:98:b5:9c:65:
7e:6a:85:41:4c:21:64:61:f4:8d:77:41:63:2a:63:
21:c1:54:e5:80:92:5a:fa:38:fc:c7:d5:d9:53:78:
63:54:d6:a1:82:11:a8:36:75:7d:cc:09:43:d3:8d:
29:6d:e0:91:31:ed:c4:c1:59:eb:f4:66:98:b3:c9:
51:be:23:4a:bd:86:9a:45:23:8f:ee:ec:5a:c0:c0:
32:f3:2e:d5:37:d6:8d:06:39:16:a0:3b:79:0f:d5:
7e:46:71:af:52:a7:a0:28:f3:af:34:19:57:b3:dd:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:A7:72:0C:98:E9:60:48:54:B2:42:ED:01:79:CD:17:ED:6A:D7
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ca:37:3c:f1:e0:36:cb:fd:a3:42:d3:ea:d3:e6:46:4a:77:
ff:0d:0f:1b:76:b0:86:0e:d1:0e:51:ba:58:37:1b:7d:36:3c:
cb:09:28:38:20:6b:fb:19:a4:a0:c5:e0:a7:e5:cb:4d:4f:0f:
02:aa:ef:71:2a:5f:44:20:8e:0f:a4:68:8a:39:c8:27:28:3a:
40:66:90:1a:da:44:77:a3:8d:64:77:71:75:51:f2:54:1a:de:
68:cc:50:16:2d:ff:ea:66:7a:34:a3:17:86:a7:33:25:fc:77:
4a:be:86:8f:d5:7d:63:71:1a:ac:f6:88:8c:fa:2d:7c:90:ba:
67:7d:97:7f:c5:4d:8b:c7:0b:8b:fb:85:7f:a1:e4:7c:f9:e6:
23:5d:b9:a0:e0:ec:48:cb:f7:6b:83:0e:54:50:ed:08:16:9a:
02:ed:e1:4b:60:52:0e:1e:99:1e:b4:e9:5a:02:77:f8:40:5b:
58:e0:5d:77:a3:8a:a6:cd:ba:99:bc:85:de:f2:b9:de:a6:2b:
69:6e:f5:94:86:1c:da:c1:a3:c6:4a:0a:47:33:ac:0b:ce:e0:
20:ea:e1:46:98:17:42:47:fa:d3:38:ff:de:2d:bc:82:60:ae:
d3:1b:92:53:1d:ba:87:1e:84:73:48:2d:19:49:c6:06:09:95:
3a:52:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:22 2026 by rpki-client