
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json)
Hash identifier: QKYi7IZ3VBPzymFDDns1uxIkufItNcWZ9BEkN99rdes=
Subject key identifier: A9:E3:DA:55:13:F2:69:42:98:42:6C:C6:67:6F:AD:66:E2:E2:F7:72
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial: 136B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
Manifest number: 134F
Signing time: Wed 04 Nov 2026 17:05:14 +0000
Manifest this update: Wed 04 Nov 2026 17:05:13 +0000
Manifest next update: Wed 11 Nov 2026 17:05:13 +0000
Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: oPKx5wm/WI8zLQPy1ky0GwEb7uzo+wagr5hWRLuHlTY=)
2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: m5xuNZTplMCUcjHyNtIG3B2SyKlaJh5IOTk259XuenA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 17:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4971 (0x136b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Validity
Not Before: Nov 4 17:05:13 2026 GMT
Not After : Nov 11 17:05:13 2026 GMT
Subject: CN=6aeb65ca-b689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:42:7c:73:a8:aa:6c:aa:9b:c5:06:7b:07:
71:00:d1:75:eb:53:50:02:77:bc:81:c5:7b:9c:5f:
af:a9:ad:59:9a:a3:24:79:90:49:df:81:02:d6:cb:
fd:be:37:b6:6e:68:0e:43:c4:03:31:a4:7e:71:6a:
d3:fd:68:46:f8:cf:f0:8e:6f:31:d4:5a:6d:c5:52:
47:23:34:2c:09:37:f4:9e:df:ab:07:df:14:79:cd:
2b:3e:7d:83:bd:45:60:1d:a2:f7:13:cb:74:15:90:
4e:c5:95:f4:66:b3:bb:67:4c:99:ba:f6:34:54:56:
4f:6e:59:59:05:bd:b3:35:63:27:a4:77:f1:f2:e4:
54:6e:0c:d1:72:34:f2:d2:40:e0:1e:a6:66:d0:b8:
1f:a4:22:1f:ee:00:06:ad:fd:55:fa:1b:18:c1:58:
5d:e1:9e:6e:98:4e:f5:fc:4b:1c:bb:8f:7d:d3:3f:
8d:cc:33:54:8e:24:4a:e7:10:1a:a3:d0:ff:b5:10:
9f:c8:ff:8b:ed:b5:56:02:6e:15:e5:86:25:4a:3b:
98:cd:1f:fb:13:d5:40:16:ad:01:23:01:58:64:7c:
4f:df:54:1d:16:13:6b:63:21:49:64:50:84:04:8b:
3b:42:d6:f3:e1:11:90:f2:0a:5a:91:c9:1d:07:42:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E3:DA:55:13:F2:69:42:98:42:6C:C6:67:6F:AD:66:E2:E2:F7:72
X509v3 Authority Key Identifier:
keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b0:d4:25:14:5a:43:a0:f0:b1:b6:b0:2b:0a:99:bb:6d:b1:
b4:ed:9c:53:eb:a8:80:b6:d5:85:1b:da:bf:91:2f:f6:19:1b:
87:7f:2f:3b:77:dd:5d:c3:75:9b:97:cd:3d:88:f4:a1:fc:73:
a0:86:0e:3e:bb:03:61:a5:40:a4:78:48:11:18:78:8e:3f:59:
68:05:a0:37:30:84:c3:58:24:f7:38:54:aa:ff:41:bd:68:4f:
11:85:b5:4c:38:66:fd:a0:0b:25:5a:46:2b:4c:76:4f:e2:cf:
5b:8b:f0:db:10:46:b9:42:f2:fe:a2:65:03:e8:84:53:84:a4:
34:72:6b:96:cb:11:17:36:b7:b4:8b:21:5d:ed:c3:f5:10:d9:
a9:89:b0:21:ee:32:cf:e0:96:fb:fd:39:3e:7e:83:6d:cc:11:
cf:7c:d5:66:79:46:37:35:99:4e:16:9d:76:62:fd:6b:08:4b:
d1:ae:ab:0e:78:06:27:0a:e7:65:d4:5e:7b:22:22:6d:14:97:
6a:dc:e6:a3:bb:21:cd:2e:ef:03:95:e3:14:cf:fb:28:36:43:
34:fc:36:75:b5:b5:74:5b:07:ed:b2:fa:0b:5e:eb:02:b6:1b:
26:7e:9d:7e:11:d5:c7:1c:22:62:98:9d:bd:e5:5c:ff:69:ec:
54:c2:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:41:07 2026 by rpki-client