
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier: V8jt4yog9BuAbn4OZX0EEFUhsz2VeGv1h5CwffumOpA=
Subject key identifier: 1C:CF:05:98:87:AC:65:0E:0E:55:57:9D:08:B9:C9:42:7F:2D:FE:0B
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial: 099D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number: 0988
Signing time: Tue 12 May 2026 20:06:08 +0000
Manifest this update: Tue 12 May 2026 20:06:08 +0000
Manifest next update: Tue 19 May 2026 20:06:08 +0000
Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: Q9PKHH2b6BXnWzgNES1dSsGQ4hIOFQm/2J+V4qDzHfk=)
2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: zZu8aFP4Al6GJRPpJKXmBtYypvXABswMl/UMkW8uCT8=)
3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: elXGzOAXv/vOs6kbXOd59T9g8u/dR7mHNS46gVlolLM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2461 (0x99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Validity
Not Before: May 12 20:06:08 2026 GMT
Not After : May 19 20:06:08 2026 GMT
Subject: CN=6a038830-56ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:85:8e:e9:a0:88:fa:4d:45:c1:d0:ec:3f:
57:ef:77:7d:21:64:d0:ba:46:d0:03:7e:da:e4:85:
a7:18:59:48:d0:47:8f:8e:59:82:ac:42:16:ef:5c:
23:52:bb:c8:4d:1e:da:73:7d:27:47:4b:c1:5f:1f:
32:0b:35:08:57:b0:f9:99:ae:b8:eb:5f:ad:3d:3a:
72:07:9e:0e:09:66:59:ff:39:85:d2:44:89:6d:57:
16:f6:31:53:54:9c:ca:4e:a3:b0:af:6f:a2:7a:74:
d5:e2:8c:4d:34:59:ed:d9:21:ff:ac:f8:2b:78:f5:
7b:5a:59:e4:3c:9a:1d:36:cb:ec:39:cb:22:9a:60:
22:91:ff:67:ea:93:4e:43:0d:33:a9:8e:a2:6f:9b:
7f:59:ea:b3:c0:a7:f1:28:03:1b:82:75:df:f5:8e:
79:36:a9:99:c4:9b:3d:7c:33:94:eb:39:5c:a2:05:
e5:d7:e0:e8:a8:4c:af:8c:65:e6:2c:95:da:a4:10:
73:26:9f:52:98:4c:1d:1c:61:dc:a5:14:45:44:51:
d0:3e:18:f6:fc:86:4c:41:e6:2c:c9:72:32:c5:fe:
67:ee:30:bc:42:1d:b0:8d:65:ac:f7:f0:fc:0b:8c:
18:71:05:9f:fd:9e:c0:7b:bf:02:42:0a:f9:06:99:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CF:05:98:87:AC:65:0E:0E:55:57:9D:08:B9:C9:42:7F:2D:FE:0B
X509v3 Authority Key Identifier:
keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:81:24:e9:46:c4:2c:31:5d:bd:e0:0c:d6:9e:8c:1a:8d:3f:
b2:a8:f0:f8:38:34:77:2d:85:09:16:a3:71:46:1e:e9:51:7c:
91:36:9b:cb:60:e9:95:0b:d0:34:33:db:e1:6a:ae:97:53:4d:
9c:5b:9b:88:1c:97:6d:4f:04:26:14:22:95:c4:a6:aa:7d:79:
72:2e:d9:25:42:46:37:89:4a:80:ba:a6:e7:77:17:70:d6:65:
73:af:36:bf:9e:aa:8f:41:47:36:14:cd:f6:39:84:17:76:cc:
33:7d:e9:bf:2a:2d:e2:a2:24:b9:69:2b:a6:41:e3:dd:a1:1b:
99:94:bb:67:c9:2f:c0:57:e1:44:4d:88:eb:21:3b:5a:48:b9:
2c:39:fe:da:7f:d0:f9:f5:d7:ca:ee:ec:82:e3:e4:95:9a:47:
4e:71:43:98:ea:b9:fe:92:ab:d1:8a:9f:4d:a6:52:4b:6b:9b:
60:d6:b3:05:ba:59:67:5b:cc:d8:e2:a8:01:7e:0f:d1:a6:2d:
c6:ba:4d:fb:d6:90:1a:33:9f:1e:02:e9:8c:cf:ed:80:63:4e:
f5:b3:07:ac:fe:b8:0c:df:d5:0a:de:11:c3:32:31:2a:e6:f4:
8d:30:34:c5:ef:08:bd:63:94:bd:1d:5b:36:c3:4f:29:a1:ab:
05:e1:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:08 2026 by rpki-client