
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
File: qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json)
Hash identifier: bRccU7yZpgJZS9WVFqYGUCywk1eUeCcYjvnxN7Fcz2M=
Subject key identifier: 36:83:93:EE:11:2E:EF:89:E5:8A:32:CC:CD:53:E6:8B:5E:20:A8:F1
Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
Certificate issuer: /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
Manifest number: 56
Signing time: Sun 25 Oct 2026 08:36:04 +0000
Manifest this update: Sun 25 Oct 2026 08:36:03 +0000
Manifest next update: Sun 01 Nov 2026 08:36:03 +0000
Files and hashes: 1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: Bn0N4U3v+6sWazH6gvO0UX+mgMlRNaifMmXIzhtX+IQ=)
2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Validity
Not Before: Oct 25 08:36:03 2026 GMT
Not After : Nov 1 08:36:03 2026 GMT
Subject: CN=6addbf73-693e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:c5:51:f7:77:0f:bc:7c:16:6e:cf:7d:14:
17:a1:5a:63:cf:9e:e6:b0:55:da:a2:6f:12:af:42:
ef:3c:68:f8:b7:ed:f5:56:ab:03:c7:22:38:51:9f:
66:a2:a5:87:30:71:6c:98:da:86:ff:3e:79:b1:7e:
fc:29:98:3d:f4:4e:18:d2:b2:25:70:90:56:c5:98:
c9:76:e2:8b:10:d8:31:31:0c:61:08:db:be:7a:8e:
a4:1b:6d:72:1d:d5:88:86:b5:d6:6e:85:0e:e3:5a:
b7:10:85:92:92:fb:fc:7d:ae:6b:b8:b4:fa:c4:37:
b5:0e:83:13:2b:0e:ab:fb:c1:58:ce:9d:d9:81:3d:
7c:aa:8c:c6:77:34:9f:09:ad:33:f4:3a:41:fb:d2:
38:4b:04:d2:1b:98:79:7f:f4:d1:57:cf:e4:b9:3c:
93:5d:24:65:9f:7f:fa:b9:cc:43:5a:71:ed:eb:df:
ce:01:80:3f:92:7b:fd:2d:6b:1a:58:5f:58:3c:a1:
cf:a4:6e:6d:72:30:f9:44:24:90:a1:dc:2e:84:92:
54:eb:f1:c8:68:1e:45:ba:5d:49:14:8d:03:9f:c1:
aa:c8:e2:d6:9f:37:85:10:f8:0a:6d:6d:03:8a:a5:
51:84:2f:06:fa:96:70:9c:47:ec:5e:78:58:f7:33:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:83:93:EE:11:2E:EF:89:E5:8A:32:CC:CD:53:E6:8B:5E:20:A8:F1
X509v3 Authority Key Identifier:
keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:87:bc:e7:6a:75:1b:59:6c:ea:02:4c:e8:c2:a1:e6:6a:02:
44:66:59:06:eb:79:6f:9d:92:2c:27:e6:ec:5f:61:04:ba:a6:
c1:83:a2:0d:32:5a:ec:8b:ad:1c:29:ba:44:a8:4c:1d:22:6d:
79:7d:e6:56:77:c3:25:f1:78:38:ef:65:03:40:d0:9c:7d:fd:
05:60:8c:63:08:f5:ef:89:d2:b1:ef:ae:27:1e:d6:4a:f5:2e:
65:6c:05:dc:c4:eb:25:49:a1:c7:c5:0a:a1:d5:f4:20:46:59:
71:53:e4:65:25:1d:48:f7:95:1a:01:ef:0e:b8:61:ca:1f:68:
93:98:3c:1e:f8:f6:b4:d0:f3:53:8d:e3:e4:a5:e9:7e:8e:09:
d8:32:66:19:53:73:1d:85:7a:da:d7:d9:2e:67:45:47:37:4d:
fa:2f:66:2c:d5:c7:45:b7:70:79:27:d2:f6:63:a3:9d:4c:ed:
71:37:a2:7a:07:19:9f:8d:20:07:d3:89:b0:42:ad:72:ee:7c:
6b:e0:87:13:47:6a:99:c7:3f:1f:c1:dd:e9:8b:67:97:0d:03:
ac:a5:5a:a6:72:fb:0c:84:b9:cd:9f:c5:30:90:69:f6:be:b7:
bb:0d:7e:35:c6:6a:f8:6f:50:7e:70:87:f4:68:df:85:fb:e5:
88:23:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:10:05 2026 by rpki-client