
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier: 3viLzk1bfKJTBZ3BgID9LdEfHmJAEI/cTz/YI1k/dO4=
Subject key identifier: 0C:DD:0F:A1:BD:3B:A9:DD:E4:DB:E8:86:35:5F:11:AE:6E:FF:05:5D
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number: 01C7
Signing time: Thu 23 Jul 2026 05:13:48 +0000
Manifest this update: Thu 23 Jul 2026 05:13:47 +0000
Manifest next update: Thu 30 Jul 2026 05:13:47 +0000
Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: JvQZ7D61ZKOIcyEEhIneIXq06RP85uUkcPbHX2ZCQAA=)
2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: FMQ4cQsw3VD3QYGrAPTdPSBgnIKTRxDIrjgjXzARTlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: Jul 23 05:13:47 2026 GMT
Not After : Jul 30 05:13:47 2026 GMT
Subject: CN=6a61a30c-34c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:cf:84:ab:ae:ed:f3:d7:ce:39:04:75:f2:
63:a5:71:ec:af:71:2b:20:9b:b1:57:01:0c:89:72:
0d:e8:44:46:c0:25:b6:f9:9c:fb:34:f2:48:66:0f:
b6:f6:8a:cf:51:b3:1d:74:c9:23:e5:e3:5e:54:7d:
c5:53:6b:96:35:04:1b:b8:8c:13:1b:1e:e8:50:cb:
e3:8a:14:ad:9d:54:cb:3e:62:06:0d:8f:dc:7e:cb:
08:79:8f:11:46:db:61:3c:c2:fb:05:51:2a:f8:d4:
7c:5a:85:ca:5d:6b:ac:de:c8:61:19:60:10:74:52:
3f:2a:a2:0a:a5:e6:13:44:dc:10:71:57:c8:34:4d:
ae:32:56:6d:94:e1:bd:52:10:7d:d1:cb:0f:cc:9e:
bc:f2:d0:30:8b:7c:f8:82:42:6b:f2:f8:84:16:f7:
67:b3:d5:26:05:73:29:fb:c6:1b:35:4d:76:df:a5:
d6:10:3b:8a:5b:b8:86:ba:d4:a1:e0:9f:31:c8:3f:
74:a2:08:1b:fc:50:62:e1:84:ba:b6:bb:48:99:91:
97:d7:6e:1f:94:25:2a:5c:81:70:15:a2:90:e8:eb:
7d:93:68:98:75:e4:1a:76:96:79:8b:92:d5:95:35:
f5:ad:42:58:0e:1f:85:b9:6b:18:ea:83:1c:18:0a:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:0F:A1:BD:3B:A9:DD:E4:DB:E8:86:35:5F:11:AE:6E:FF:05:5D
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:e0:0f:dc:6b:18:f0:cd:fd:24:70:cf:6b:61:76:7d:94:
28:a8:f6:d9:e3:6d:7b:21:5e:c8:ae:92:e1:2a:7f:cb:de:b8:
93:90:ee:d1:2f:fa:8b:73:e2:d6:1a:91:0e:46:66:66:0b:3b:
4d:7d:a3:09:96:47:25:79:ae:13:a6:a9:89:05:df:01:64:5e:
f1:61:e0:75:5c:99:60:90:a9:92:8d:31:ba:e5:72:45:c5:a5:
ad:89:ed:f4:1c:ef:28:9d:17:7e:ff:88:69:84:e4:fd:40:c5:
ec:f8:b5:a8:29:45:cd:78:4b:74:d5:6d:f7:97:9c:24:5d:da:
9a:a4:8e:82:fc:5f:23:0a:e1:2e:d7:bc:33:f4:c6:c7:e1:69:
20:31:c5:01:90:f0:aa:54:4d:58:69:f0:d8:5f:64:fe:65:6c:
29:a3:1c:b8:6b:ad:ac:6b:06:7e:6d:27:5e:c1:64:25:37:ca:
0e:0b:f3:8d:a7:8e:90:ac:13:2f:73:6e:e5:4b:f5:32:e0:20:
3d:b4:4b:3c:7f:07:e7:f1:5c:e6:70:d9:f6:39:37:91:73:72:
03:dd:4a:8c:02:d0:aa:af:bf:92:6f:eb:df:89:5a:1f:ff:03:
fc:4c:d6:33:db:aa:35:f9:15:6e:19:5a:45:d8:24:c7:5a:ef:
53:cf:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:03 2026 by rpki-client