
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier: 39o+Fjv09Na3Ln3p2HTS8AQxSQ8jlC5s+dRlkd9JhgA=
Subject key identifier: 2C:6F:E6:42:A7:D9:9A:13:AC:80:66:40:BA:1E:CC:98:94:42:CD:FF
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial: 0B38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number: 0B1C
Signing time: Tue 12 May 2026 19:23:19 +0000
Manifest this update: Tue 12 May 2026 19:23:19 +0000
Manifest next update: Tue 19 May 2026 19:23:19 +0000
Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: mM4HMsssqA+2CmZWlogjoZrmmN5FGSR/1OlQrQLPS10=)
2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: Q7p+Vr+s6fqUfDypnxwb8pNNEvIPoH0DeJoVihgWG1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Validity
Not Before: May 12 19:23:19 2026 GMT
Not After : May 19 19:23:19 2026 GMT
Subject: CN=6a037e27-f25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:b3:c0:92:c4:b0:d6:09:9c:9a:33:1b:31:
a9:2d:b0:a1:6d:fb:31:1a:b2:ac:ca:87:ab:de:b3:
11:4a:d6:f6:9a:a0:85:03:fa:23:96:76:bd:86:84:
2f:b5:3b:66:00:84:0e:8e:9f:8b:fc:2a:0a:ee:b3:
69:70:bf:ea:ac:1c:56:5f:5a:ad:4e:13:50:56:cd:
32:5f:5e:fd:a5:85:c4:a3:cf:3a:72:c2:7e:b7:9a:
3b:bb:09:0b:9f:62:f8:47:82:df:3a:b0:c8:37:e5:
6f:02:71:84:0b:1e:0f:84:ba:1c:98:e9:1d:85:1f:
9c:a0:3d:7b:15:3f:32:cd:26:28:8e:97:1e:08:49:
36:a1:a9:29:af:df:5f:4e:27:9f:3e:21:ba:57:79:
a8:c7:94:aa:83:d9:52:7c:00:6e:70:8c:34:ad:d1:
40:e9:0e:61:0d:88:1b:bc:1c:d0:7d:e8:8e:db:7d:
67:71:98:f4:93:c2:a0:6b:0c:f9:88:06:fa:5a:a6:
14:6b:0f:e4:59:e8:6d:30:af:53:e3:df:f2:56:96:
85:cc:ff:36:b2:dd:39:c7:7f:9e:0f:ee:b8:2b:17:
34:20:4e:d2:fe:a7:74:4f:9b:5e:07:ff:4b:ab:c5:
97:42:7b:34:ca:f8:e9:d4:13:1e:a9:41:07:e0:d1:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:E6:42:A7:D9:9A:13:AC:80:66:40:BA:1E:CC:98:94:42:CD:FF
X509v3 Authority Key Identifier:
keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:4a:c6:13:e3:12:f3:0f:23:f3:6f:78:2f:a8:61:ef:ad:f9:
d6:5b:56:64:9e:b2:2e:89:24:35:c3:ab:0b:46:d8:c1:9a:20:
9e:4b:d1:73:38:ef:68:7c:fa:b4:94:0f:f6:62:70:89:e1:6c:
63:81:30:e8:7b:b8:fc:aa:4c:aa:78:77:ad:e8:3e:46:eb:ad:
81:33:00:b7:e2:7d:e4:ba:f4:f0:97:7f:72:be:06:d2:af:40:
f3:f7:6b:86:07:4d:00:bc:ce:82:bb:34:fb:c8:2a:6a:1b:f6:
02:8a:0a:d7:26:2e:3b:62:73:1b:bb:fb:43:b8:90:3f:ca:42:
fd:2f:d5:dc:71:8f:94:0a:e8:59:13:f2:19:5a:84:56:67:e8:
af:f2:7c:47:94:8a:8b:cc:18:d4:ca:59:27:d4:37:b1:e3:7a:
7f:ef:f0:14:7f:af:7f:7d:1a:fc:da:ef:fa:4d:39:fe:18:fe:
60:16:82:e8:b9:a4:d1:f4:0c:b9:ed:d1:b2:17:06:37:ff:11:
35:1a:d6:c3:e7:92:1e:90:e1:b2:96:f0:c0:25:4d:69:7f:53:
61:54:51:a6:ba:39:9c:df:d0:44:6a:36:02:ad:32:69:9e:ee:
54:bb:de:16:ce:85:c7:77:8e:88:e3:28:92:50:62:a1:f8:a1:
a2:d0:da:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:17 2026 by rpki-client