
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier: suAtNLxd8llPwQBchJuMEEsa0Td/fiPMBrlRS8K/9lY=
Subject key identifier: 9C:D6:EC:FD:3E:A8:B1:23:BD:CB:27:D6:F1:0E:F4:7C:F0:A8:4C:84
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 0482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number: 0474
Signing time: Wed 13 May 2026 00:12:21 +0000
Manifest this update: Wed 13 May 2026 00:12:21 +0000
Manifest next update: Wed 20 May 2026 00:12:21 +0000
Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: +F1SIJz6+L/OJv7BlDUNkaMDY5h4Q3Jc3Gx81cjOwTg=)
2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=)
3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Validity
Not Before: May 13 00:12:21 2026 GMT
Not After : May 20 00:12:21 2026 GMT
Subject: CN=6a03c1e5-f53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:75:6e:35:0d:d1:5f:24:6f:b9:8e:39:61:
1d:c5:a0:e3:06:35:72:17:9e:f3:b1:b5:03:27:14:
2d:b8:51:f5:bb:05:10:9d:b4:28:8b:e1:dd:30:14:
24:ae:6d:de:90:58:97:f1:fd:a5:ca:b9:d4:c1:02:
13:d3:35:eb:d5:a1:0f:c0:8a:73:a6:2a:78:91:1e:
5e:49:ce:3d:11:fa:d9:2a:0b:61:18:76:15:f5:10:
f0:cb:89:07:59:d2:77:b6:60:dd:85:2c:99:6c:b0:
38:3e:17:1d:7b:a7:22:c7:11:47:3c:0a:f8:b3:99:
23:81:a8:b1:66:ec:a4:14:5d:3d:e2:2a:49:ce:fc:
59:c8:38:f4:d9:1a:41:59:63:0e:0d:b5:e0:f5:d3:
b8:1a:d8:b6:dc:11:e7:1e:99:0b:a7:d2:c5:cf:e3:
c9:fa:8e:da:22:ab:44:c8:02:80:4d:e1:06:b1:85:
f3:f4:17:33:b4:62:a2:b8:31:58:2f:4f:95:39:81:
e6:a5:d4:3a:95:75:af:2c:dc:01:e3:79:06:46:85:
1f:54:27:ec:a0:62:3a:83:2b:9c:29:dc:b1:c7:10:
40:ba:f3:27:68:11:61:5f:1e:c5:1f:e4:fd:b9:15:
dd:90:f0:32:95:a4:94:7e:0d:8f:11:ce:42:de:0c:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D6:EC:FD:3E:A8:B1:23:BD:CB:27:D6:F1:0E:F4:7C:F0:A8:4C:84
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:af:c7:cc:56:e5:1e:6c:43:11:aa:21:1e:71:d3:db:23:26:
08:3c:db:68:f8:00:7b:6d:8b:c0:b3:c7:b4:ab:13:f9:87:ab:
be:2c:dc:34:81:20:55:ca:72:c4:be:26:e6:24:d9:9f:bd:7d:
97:c5:61:a5:54:4f:00:0a:a1:c6:1d:42:4d:e0:b8:c3:c8:c4:
42:9c:72:dc:59:b6:32:9b:d6:87:53:64:6d:2e:67:9b:2e:3f:
98:06:cf:af:c5:3b:0d:87:af:c9:e4:bf:b9:bd:0b:4b:04:74:
df:af:7f:c1:03:a9:21:32:cb:50:bb:e7:32:c3:08:ab:75:4c:
d5:7b:a7:3f:a7:aa:17:ff:e9:8a:f5:ad:da:fc:68:97:6b:27:
be:30:05:cb:32:f0:0c:62:dc:a5:be:1d:cc:23:db:89:cb:ff:
b9:8d:0f:21:ed:b4:ea:0f:d2:fa:3f:8b:f5:02:7c:ba:ea:a3:
ad:ae:da:5b:97:22:97:68:6f:ee:ac:21:cc:a7:c4:fb:88:61:
75:1b:9d:0a:f4:ba:fe:70:62:e3:1d:6f:3c:e5:ad:40:cb:89:
eb:f7:83:aa:51:70:a5:4f:0c:aa:20:c8:c5:22:d6:e1:02:40:
91:bf:24:3e:7f:e9:c0:7d:02:fc:fc:bf:74:77:31:a8:12:47:
99:6e:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:27 2026 by rpki-client