
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier: Fb5PmZtYtXdJWTEzGBIZrPuzMLDDGOtGbFMxItJGCb8=
Subject key identifier: 22:F9:6A:CA:BE:0E:24:E1:84:7E:80:10:36:9B:E1:A4:2D:A1:78:68
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number: 01E8
Signing time: Wed 13 May 2026 03:33:06 +0000
Manifest this update: Wed 13 May 2026 03:33:06 +0000
Manifest next update: Wed 20 May 2026 03:33:06 +0000
Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: C+qjL1kn0cnsRQjSmbcnt3T+VEqkrqM5kCsOG7GyOg4=)
2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: zB9kpmMH8WDobdsyA5ni46avnvSa15JcHqsSjawBqxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Validity
Not Before: May 13 03:33:06 2026 GMT
Not After : May 20 03:33:06 2026 GMT
Subject: CN=6a03f0f2-4473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:2b:6c:28:70:18:ea:56:b3:34:83:16:46:
ff:04:71:81:9a:1b:bb:55:f9:4a:83:3f:8a:fe:c3:
d4:30:bb:11:4f:ee:74:c1:4b:9b:fb:07:87:04:7e:
27:2d:c7:a0:d0:e0:07:38:dc:ad:98:15:77:5a:12:
49:10:b8:06:78:7f:c1:c0:ef:0f:d1:74:60:f1:2c:
8b:7b:4a:8f:8e:f8:17:d2:6e:a3:75:c4:26:49:8f:
b9:27:25:56:ea:25:80:e2:85:80:45:25:94:25:55:
76:e2:ba:ed:94:57:bc:92:e5:cc:24:8b:76:cb:e5:
6c:eb:33:40:58:f8:b1:97:40:30:cb:e2:f2:dd:4e:
54:07:ab:5f:de:f1:49:e4:f0:fa:59:ca:93:5e:30:
92:a8:59:04:2d:3d:d2:61:a5:a3:6d:fa:35:56:a3:
d7:c4:35:c7:80:9c:64:85:86:32:34:30:c9:f4:65:
43:1d:d5:4b:46:8c:13:46:a5:80:09:19:7c:a7:70:
42:e6:66:fd:0f:d7:67:a8:6a:bf:a6:80:66:d4:d3:
57:aa:12:a1:f4:ac:00:70:1a:88:f1:c1:d3:da:2c:
b4:df:5f:21:41:26:57:cd:be:30:7f:a1:3d:9e:81:
30:0d:05:14:5c:9e:34:0b:62:b8:5d:4d:df:52:93:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:6A:CA:BE:0E:24:E1:84:7E:80:10:36:9B:E1:A4:2D:A1:78:68
X509v3 Authority Key Identifier:
keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bb:95:50:50:87:3c:a4:f1:30:cf:75:75:25:d9:eb:e9:b2:
ba:70:cf:ee:c7:b3:a7:fc:ea:d9:27:d4:fa:80:b0:69:c7:4d:
94:6d:67:27:63:02:96:f3:79:d5:f5:3f:3d:fd:48:fc:98:20:
a4:39:34:47:92:e1:a9:b5:bb:e0:48:db:5c:d8:a5:27:00:64:
32:61:15:71:44:04:dd:f8:5c:39:19:c7:33:5c:f4:9b:92:2b:
35:07:88:fb:2c:b2:06:58:4d:95:9f:67:27:fc:c0:b0:b1:00:
c8:8a:5a:80:3f:cb:64:55:e6:10:67:a4:1d:cc:fd:b3:36:18:
db:c0:f8:46:f0:38:61:9e:f8:e8:a1:cb:a2:b6:d4:b9:64:fb:
15:99:c7:52:f1:77:b6:a9:4b:9f:91:07:b2:25:38:67:5b:d8:
4f:40:3b:ed:3d:97:81:14:d0:08:ee:74:fb:5f:71:45:7f:11:
9e:c9:f7:4a:42:0a:65:9a:66:4a:ad:27:a2:8c:4d:38:f4:a0:
e9:3f:ba:3e:9a:36:3e:9f:6b:50:ca:c6:4d:fa:1f:52:6f:4a:
a2:0d:88:14:3e:8c:76:51:85:fc:bc:16:b7:35:97:0b:33:b5:
09:b0:96:08:cf:a4:02:b1:91:cc:7e:10:d4:92:ee:75:a6:7d:
98:6a:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:22 2026 by rpki-client