
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier: 9uMy7wr2DWb+2N0wExUTsnFRAEXK6kAUgidqrIJvb7g=
Subject key identifier: 96:AA:FC:E5:20:15:1F:E6:A7:DC:24:C7:75:4C:1A:A4:25:5F:67:C3
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number: 020B
Signing time: Thu 23 Jul 2026 04:24:06 +0000
Manifest this update: Thu 23 Jul 2026 04:24:05 +0000
Manifest next update: Thu 30 Jul 2026 04:24:05 +0000
Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: /V7ansTdX3H83TBfjSJXDDLbpbSy/aMrjkjgVL4DDtg=)
2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: zB9kpmMH8WDobdsyA5ni46avnvSa15JcHqsSjawBqxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Validity
Not Before: Jul 23 04:24:05 2026 GMT
Not After : Jul 30 04:24:05 2026 GMT
Subject: CN=6a619765-5de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:63:ed:4d:ec:c1:88:02:5f:fe:a6:d6:03:
ba:96:1f:df:98:ab:80:74:85:88:95:8f:7d:7d:00:
b5:10:25:45:d0:13:60:d6:1b:19:e8:d1:f9:72:3e:
b7:e1:b4:3b:b3:37:76:ae:4d:68:7c:ab:bb:a7:a0:
0e:6b:56:d8:e9:78:34:2e:c5:28:51:85:b8:b6:e7:
5c:c6:16:04:35:30:10:65:db:dc:98:21:7e:90:b6:
c2:41:ec:47:e8:f0:65:9b:3d:3d:ba:06:22:23:ae:
98:b4:f5:60:00:91:6b:5c:de:33:16:3b:e3:d4:ad:
9f:9c:bb:fb:d4:c7:61:64:cb:d6:07:f1:87:b5:e8:
69:7b:a3:4b:c5:1a:7a:b0:29:70:ef:87:cd:61:88:
41:5a:13:23:c9:c7:e7:3b:d9:24:89:9c:8d:c2:4e:
ab:c7:f4:4b:c3:98:d0:a3:7b:5a:6f:ac:34:25:d7:
3d:6e:a4:ca:66:e5:6d:f5:ce:ea:4c:d9:d2:8d:14:
d9:af:2c:2e:a8:f1:43:8b:9b:78:08:a0:a3:b8:a8:
b5:0c:74:54:88:4e:80:a1:1d:ab:8d:6a:75:c8:b3:
2b:6e:54:a0:06:23:25:e7:1e:fb:32:e0:f6:ce:46:
4f:c8:89:79:8d:96:0f:e6:c0:67:b5:b2:13:48:b8:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AA:FC:E5:20:15:1F:E6:A7:DC:24:C7:75:4C:1A:A4:25:5F:67:C3
X509v3 Authority Key Identifier:
keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:c8:6f:73:22:7f:01:9f:39:11:99:a0:d8:4c:da:ad:dc:f9:
40:0b:90:32:12:b9:bd:44:c6:65:c6:7f:cc:29:ca:9c:10:ab:
40:d1:df:32:e5:e0:79:96:ac:87:f8:69:9f:2b:76:68:91:12:
6c:b6:79:16:87:42:16:ce:52:b6:08:00:29:f8:a1:15:31:7c:
81:6c:66:de:10:44:cd:c9:b3:5e:8a:43:9f:57:d6:f8:d3:ad:
32:f5:7c:b4:8e:47:81:64:06:01:9d:a5:62:ba:fe:82:69:63:
49:7c:82:bc:bc:c4:1a:c9:9f:c4:5d:e5:f3:9a:40:c8:53:92:
ef:29:10:f3:5c:53:75:f0:e1:5e:00:74:06:b6:81:14:38:23:
e4:a5:ec:1c:db:c8:5e:ee:c4:95:6b:c1:11:c6:49:80:95:ef:
c1:01:56:6f:39:a2:f7:13:3a:02:8c:e8:6d:ce:62:c9:1e:0e:
66:be:b0:c9:a8:b0:5b:50:22:0a:08:1f:a3:89:81:eb:e0:b5:
05:48:41:00:62:39:a4:00:0b:a2:58:27:20:ff:95:89:0b:82:
75:13:a9:23:31:15:e1:a3:5a:8a:17:3e:87:7e:ea:ad:10:6c:
31:32:7f:ff:2d:fc:34:9e:10:2e:b4:83:21:f2:80:d0:5c:8c:
c1:04:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:52 2026 by rpki-client