
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json)
Hash identifier: Pky5NFRqUdW/7nC17cLVfuVfEpYBdytazxCqFU3TFQg=
Subject key identifier: C8:60:AC:07:FB:FA:62:71:21:F4:68:DF:6A:55:4B:4B:1F:A7:4A:C3
Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Certificate serial: 02B2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
Manifest number: 02AD
Signing time: Wed 28 Oct 2026 15:54:26 +0000
Manifest this update: Wed 28 Oct 2026 15:54:25 +0000
Manifest next update: Wed 04 Nov 2026 15:54:25 +0000
Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: FaQQKZaio09XbSm4+eNhEnpRKvPbkLi6D7DBlubzcEI=)
2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: JNyU8R5c8QL0IEETvSkoNrLyRGc2x887+ZYrTw2mI3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 15:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Validity
Not Before: Oct 28 15:54:25 2026 GMT
Not After : Nov 4 15:54:25 2026 GMT
Subject: CN=6ae21ab2-ef48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:75:9b:d3:b4:9e:75:85:39:48:d5:f9:35:
ed:13:47:78:84:27:41:49:34:c8:6a:9d:df:ef:9e:
c3:e5:28:39:1e:40:00:f7:71:84:2b:5c:01:31:92:
5f:ba:e8:ed:0d:72:ea:85:80:bc:76:5e:11:d4:40:
48:cb:a9:c7:5a:f2:78:c9:09:81:c9:6c:db:ee:88:
34:af:9b:c1:b5:69:d5:84:0f:1b:58:a0:a4:d3:c2:
c7:d8:43:f0:a3:28:8b:94:a0:38:a9:90:a0:af:55:
0c:e0:67:3c:2c:9f:79:d6:5b:49:b3:ef:c7:78:83:
77:0b:0a:73:1d:e7:df:18:a3:6d:ff:90:f6:4e:ba:
bb:1b:6f:ce:da:b3:49:fc:da:51:0c:6f:5c:93:6e:
70:3c:88:15:4c:6f:81:b8:30:b1:45:8f:f0:cf:2f:
f9:14:e6:c0:09:a1:9f:39:ad:e3:ea:db:11:34:fe:
e3:aa:7e:a1:6e:84:35:e3:15:47:40:aa:37:4f:ef:
29:49:45:f3:31:43:4d:7b:c1:5b:8e:3d:7d:06:e8:
bd:65:7a:b6:5b:1b:1e:6c:f8:63:c2:84:e1:f1:85:
54:4c:9f:ea:ef:f9:08:b8:82:24:f6:ef:20:5c:7a:
66:e5:69:f2:f4:43:9b:6a:91:df:92:28:af:e7:b0:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:AC:07:FB:FA:62:71:21:F4:68:DF:6A:55:4B:4B:1F:A7:4A:C3
X509v3 Authority Key Identifier:
keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:94:9a:d1:22:64:e8:cc:c6:bf:a0:cd:b6:fa:67:3f:b6:b9:
49:45:1f:31:6e:29:43:59:7d:ef:5a:6e:6f:a0:3c:5d:f3:15:
26:89:60:08:0e:84:3a:b8:70:a0:7d:fb:39:6c:b4:ed:8e:c5:
51:29:65:cc:5b:8c:f5:9a:72:c4:49:95:72:a3:84:10:eb:22:
e3:da:3b:8b:eb:be:a5:ab:b1:2f:fb:5e:53:d6:d2:71:f3:55:
ab:3c:2a:41:5a:c9:5b:b1:4c:5f:3d:46:fe:b4:97:cc:03:a8:
03:fe:a8:c4:a8:c4:cb:6c:99:b7:c5:0c:0a:39:e7:40:df:46:
90:17:3c:06:4d:97:b8:4b:2b:97:74:ab:5a:78:dc:72:9f:4c:
fa:1a:0f:0d:fe:05:7b:53:46:bd:02:0b:2c:08:be:2c:16:89:
4a:30:7a:bf:22:bb:80:02:97:03:62:3f:ba:72:55:de:1b:e1:
6b:1a:61:70:fa:1a:37:be:ec:99:2f:31:65:35:da:29:c3:83:
63:7f:5c:a3:45:c3:54:af:a6:fa:35:03:80:93:96:ff:22:06:
64:48:e9:5a:93:79:82:75:9f:cd:5a:fa:dc:b0:04:06:3b:17:
91:8f:44:03:8b:41:06:54:d9:a2:d1:99:1e:ed:91:6d:8c:b4:
e6:5b:81:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB
MTcxMjlDMTgwHhcNMjYxMDI4MTU1NDI1WhcNMjYxMTA0MTU1NDI1WjAYMRYwFAYD
VQQDEw02YWUyMWFiMi1lZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0WB1m9O0nnWFOUjV+TXtE0d4hCdBSTTIap3f757D5Sg5HkAA93GEK1wBMZJf
uujtDXLqhYC8dl4R1EBIy6nHWvJ4yQmByWzb7og0r5vBtWnVhA8bWKCk08LH2EPw
oyiLlKA4qZCgr1UM4Gc8LJ951ltJs+/HeIN3CwpzHeffGKNt/5D2Trq7G2/O2rNJ
/NpRDG9ck25wPIgVTG+BuDCxRY/wzy/5FObACaGfOa3j6tsRNP7jqn6hboQ14xVH
QKo3T+8pSUXzMUNNe8Fbjj19Bui9ZXq2WxsebPhjwoTh8YVUTJ/q7/kIuIIk9u8g
XHpm5Wny9EObapHfkiiv57AbwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhgrAf7
+mJxIfRo32pVS0sfp0rDMB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy
N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL
bEREN251SmRUYy1oY1NuQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR5Sa0SJk6MzGv6DNtvpnP7a5SUUfMW4pQ1l971pub6A8XfMVJolgCA6EOrhw
oH37OWy07Y7FUSllzFuM9ZpyxEmVcqOEEOsi49o7i+u+pauxL/teU9bScfNVqzwq
QVrJW7FMXz1G/rSXzAOoA/6oxKjEy2yZt8UMCjnnQN9GkBc8Bk2XuEsrl3SrWnjc
cp9M+hoPDf4Fe1NGvQILLAi+LBaJSjB6vyK7gAKXA2I/unJV3hvhaxphcPoaN77s
mS8xZTXaKcODY39co0XDVK+m+jUDgJOW/yIGZEjpWpN5gnWfzVr63LAEBjsXkY9E
A4tBBlTZotGZHu2RbYy05luBQg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 05:17:09 2026 by rpki-client