
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File: Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier: 2ksGRNxFBvMEICcGIWKHYfJiJd3JDx7T78jQzvCXoLk=
Subject key identifier: 6E:DA:43:18:8B:96:D2:94:C1:67:65:19:DF:06:52:5E:81:0E:5A:C0
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1D08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number: 1CC8
Signing time: Thu 10 Sep 2026 16:09:57 +0000
Manifest this update: Thu 10 Sep 2026 16:09:56 +0000
Manifest next update: Thu 17 Sep 2026 16:09:56 +0000
Files and hashes: 1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: 0JMu75z7utcwyh615LsX1U2ynvx8605LOJiKD/Z3L3M=)
2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: CUmgiDbzwbQpCrmzIVG8aB3235V6JStS3CWUqJZ04yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7432 (0x1d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: Sep 10 16:09:56 2026 GMT
Not After : Sep 17 16:09:56 2026 GMT
Subject: CN=6aa2d655-e1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:db:f7:db:aa:66:7c:39:3c:c9:43:63:4d:
0b:b7:24:a5:60:6d:cd:0a:f8:dc:4c:e1:36:1b:23:
d7:93:95:4c:c3:21:4b:7a:e5:6c:4d:a2:c4:d0:88:
93:01:62:59:f4:8c:e3:d1:64:39:41:de:d2:d8:1d:
ab:50:4e:5d:71:2a:13:0f:99:94:72:9a:89:f7:38:
4f:69:8c:2c:67:ce:ba:db:e5:9c:99:ae:35:c3:94:
74:95:d1:2c:a7:62:94:15:3d:61:7b:54:06:b1:cb:
3f:c5:c9:a8:38:0d:a9:c0:eb:11:87:01:e9:69:26:
8c:b1:64:db:b8:ec:d4:7f:b3:81:79:1a:58:ad:98:
9b:71:09:37:e4:3e:5f:82:59:90:2c:c7:bb:c2:dc:
5b:16:c7:55:db:7b:bb:6a:8f:8d:0f:b3:0b:48:18:
8c:fd:5e:d9:02:d4:2e:e5:36:1c:37:29:c7:e7:22:
70:0c:ba:24:3c:02:4b:86:f5:bf:61:7c:19:16:5e:
db:fb:5e:8e:ca:75:49:75:77:76:9b:0b:85:7c:77:
42:75:3f:6f:69:e3:96:bf:9f:58:50:89:c2:a4:9b:
0c:48:26:a6:92:72:59:84:fd:25:e6:5d:63:f3:13:
91:92:ee:07:12:67:31:e0:10:6c:a5:43:d0:75:ae:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DA:43:18:8B:96:D2:94:C1:67:65:19:DF:06:52:5E:81:0E:5A:C0
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:eb:68:7f:26:b3:31:c8:7a:e1:f4:21:ab:c6:75:cf:cd:21:
11:bb:55:3a:1c:65:93:45:11:06:79:5d:60:92:ac:ba:e2:4b:
89:22:9d:e6:13:48:cb:6d:6a:c5:f8:7d:cd:6f:b0:3a:d7:46:
d2:a8:04:a2:40:d6:0e:a8:a8:3f:36:cc:32:59:b3:54:6b:7c:
42:90:d1:aa:6c:82:29:4f:f6:4b:81:68:59:0d:73:94:66:93:
8d:1f:62:93:d3:c6:24:3e:69:c8:5a:17:02:ab:dd:8b:d7:26:
7d:ed:97:23:23:11:79:c3:b8:53:ed:29:90:62:59:4c:c3:4e:
d8:b2:42:63:eb:4d:0f:89:df:ae:e8:6a:00:cf:01:65:e7:9a:
15:58:33:3a:17:49:b4:ce:9d:a0:4b:ea:58:a3:c0:79:c7:2f:
18:38:19:b3:22:09:c9:ec:ff:33:f3:80:ef:bd:6d:07:b3:89:
3f:6d:62:6c:de:3a:7c:f0:43:12:58:cc:c4:e8:d0:bd:c7:dc:
05:78:32:b9:2d:b1:2a:90:b1:d6:e2:a4:a1:a7:4c:b0:40:5e:
32:dd:3e:ad:fe:9a:b2:de:82:3d:72:02:f7:61:7b:c3:98:fa:
f3:13:1b:fc:84:28:d7:d5:4e:01:66:c1:d2:66:23:56:80:77:
77:17:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:44 2026 by rpki-client