
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
File: QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft (raw, json)
Hash identifier: iDvXMmbspFkDBX1p3+m1NhavWJIrodLNQY6mUbuCrpg=
Subject key identifier: DB:E8:AB:89:69:6B:74:CF:84:55:1F:80:30:62:17:15:56:A0:14:45
Authority key identifier: 43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A
Certificate issuer: /CN=A91FFA9E/serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
Manifest number: 76
Signing time: Thu 23 Jul 2026 09:45:18 +0000
Manifest this update: Thu 23 Jul 2026 09:45:17 +0000
Manifest next update: Thu 30 Jul 2026 09:45:17 +0000
Files and hashes: 1: QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl (hash: GZvKPM82OjUroPG5TQt9Rj6BwOxEpjIUgGiCDeFpdt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl
rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFA9E, serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A
Validity
Not Before: Jul 23 09:45:17 2026 GMT
Not After : Jul 30 09:45:17 2026 GMT
Subject: CN=6a61e2ad-7712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:1d:50:8a:25:a6:e1:c9:2d:ee:85:1e:6c:
0d:96:f8:80:7f:f2:95:e8:6d:f3:55:60:cd:c5:57:
02:db:8f:97:05:45:7f:b7:aa:90:3e:3e:df:ec:fb:
c9:b8:82:d7:1c:e7:96:74:6d:8e:e7:4d:1c:c0:ca:
f8:06:6b:26:f2:fb:a0:53:59:af:af:51:54:ea:23:
da:8b:d6:ff:1c:d4:1f:43:5a:4a:ac:47:7f:ac:f4:
10:94:f0:ad:dd:40:7d:90:be:7b:ff:14:ae:23:e3:
bf:a7:a2:f6:7a:ac:e7:05:4d:a0:3a:ad:d7:15:84:
62:2d:ea:96:7e:c6:4d:06:5a:0c:24:90:a6:d6:00:
af:66:c9:e8:3b:3e:11:84:0e:bc:2d:1a:10:e6:04:
f3:bb:2c:d3:f6:8f:03:f0:5a:31:92:3f:3f:3b:34:
23:58:27:c8:58:18:3b:51:e1:0c:29:1f:13:b3:43:
b7:5f:89:ad:50:45:20:7d:f2:c3:8e:df:22:fe:db:
17:00:32:27:fc:5b:27:72:d9:ff:b3:53:95:59:63:
ae:85:5e:61:bc:59:32:df:c0:46:c1:db:36:f1:93:
55:aa:e2:30:e5:32:33:89:b5:85:4c:6a:72:f4:9a:
f2:03:59:e9:fa:b5:9d:e9:bd:4a:91:ea:35:9d:e2:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:AB:89:69:6B:74:CF:84:55:1F:80:30:62:17:15:56:A0:14:45
X509v3 Authority Key Identifier:
keyid:43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f5:9f:a0:43:32:8f:45:7a:a5:5b:e3:8a:f4:e3:3f:4c:c4:
26:e2:99:53:0c:b2:1f:b7:1e:82:c1:da:e1:e5:80:5e:84:6b:
ac:86:40:41:30:76:f8:a1:81:1b:1c:79:5b:d5:a8:df:95:26:
e6:bc:2d:2a:89:ce:ce:fb:14:ba:5b:81:3f:8c:fb:15:b3:c4:
e5:e7:55:39:43:98:ff:df:e7:e2:b2:a6:3a:2c:53:7a:42:5a:
7f:10:f4:17:db:fa:5a:2f:03:c9:be:e0:09:7e:0e:d0:6e:cc:
28:96:ff:d4:6c:34:b2:fb:c3:5c:ac:43:f2:c1:f6:8c:f2:23:
d9:00:07:7c:0e:34:3a:1a:97:79:2d:fe:38:83:40:2f:5c:17:
40:e2:6a:a2:86:34:98:52:c3:c3:dc:bb:bc:b1:23:4b:32:cd:
c0:59:09:f5:2b:be:e5:1c:6e:18:ee:71:ff:09:71:8e:09:ed:
6e:41:f7:44:56:15:2d:48:cf:66:d0:28:58:25:20:67:cf:6d:
a4:51:2d:45:ac:74:ab:f6:bf:4b:91:52:2b:c7:86:15:9b:b3:
0c:87:b6:2b:6d:13:8c:ca:1b:86:04:e4:76:ea:99:1f:7f:8e:
4a:54:dd:48:d1:73:c1:ba:e7:2a:4b:c5:ec:57:84:3d:ca:be:
b0:b4:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:45 2026 by rpki-client