
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json)
Hash identifier: ghm80yOj6TJss+63VZH/AAwR7+3qfxlUtDV8kUET7yI=
Subject key identifier: 00:1E:6F:DD:2D:FB:A7:B6:6D:09:0B:17:78:C7:47:13:01:6F:E6:3E
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial: 1350
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
Manifest number: 1334
Signing time: Sat 12 Sep 2026 16:57:51 +0000
Manifest this update: Sat 12 Sep 2026 16:57:50 +0000
Manifest next update: Sat 19 Sep 2026 16:57:50 +0000
Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: PxS/JOKUXbhLLfhbiXTXmcHCobC0xnhE+Halu7qF3+E=)
2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: m5xuNZTplMCUcjHyNtIG3B2SyKlaJh5IOTk259XuenA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 16:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4944 (0x1350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Validity
Not Before: Sep 12 16:57:50 2026 GMT
Not After : Sep 19 16:57:50 2026 GMT
Subject: CN=6aa5848f-d2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:13:92:2b:91:f0:f2:ab:74:67:40:a5:91:
47:bb:a0:e3:f0:4e:4c:0d:26:65:1d:88:93:8a:26:
54:48:e2:08:b8:db:ed:75:96:e2:da:2b:28:fa:53:
6c:9e:67:68:3c:d4:2f:c8:d1:38:7d:5d:1c:3f:cf:
53:9d:9e:0b:b0:ca:e7:16:c0:dd:c9:70:3a:e8:40:
e1:02:6b:8c:26:7d:e6:f8:3f:a8:73:a0:93:bf:2c:
63:93:37:f5:1e:3d:6a:7e:68:bd:19:95:fa:23:49:
68:6c:f5:3d:32:84:23:89:26:4c:25:17:62:4e:cd:
df:e1:10:78:23:3a:58:63:08:da:7c:dd:ad:ed:ca:
fa:23:89:69:c2:5b:73:5b:72:03:df:84:dc:82:68:
1b:08:83:39:19:d0:a8:a5:75:10:64:92:db:44:48:
38:ae:9c:92:41:a7:71:48:7b:c0:38:86:40:67:c9:
47:c4:4e:75:40:d1:b0:1e:23:95:74:31:f8:54:d5:
ed:5e:76:4a:c4:5c:41:99:c0:3f:0e:de:19:fd:57:
2a:c1:04:ab:4f:a9:fd:c0:28:10:ee:c5:7c:f8:56:
37:be:8a:28:da:4a:a0:a9:9b:39:aa:b2:cc:88:b5:
e1:c1:7b:95:b8:3e:22:46:da:c9:7e:60:a6:7f:ee:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:6F:DD:2D:FB:A7:B6:6D:09:0B:17:78:C7:47:13:01:6F:E6:3E
X509v3 Authority Key Identifier:
keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f7:a7:30:20:98:86:ea:3b:81:f9:53:44:56:23:d4:33:23:
66:09:3f:fd:da:53:e6:3b:7d:6a:07:17:c6:e1:c5:34:0e:7b:
83:3c:c4:14:f3:85:04:71:f9:00:c3:7d:70:8e:d7:3a:18:d1:
dc:b7:a9:ff:c3:92:3c:eb:e9:87:77:a3:27:26:be:30:ba:a9:
b7:3e:17:77:05:05:4c:ba:4c:31:18:29:fe:21:c6:e2:ad:50:
c2:7e:0b:c4:95:97:61:79:d8:a6:59:15:32:c2:cc:e1:40:e4:
12:36:8e:88:d6:c3:4d:a6:89:99:ef:eb:d7:ae:74:69:2f:52:
6c:56:50:cd:05:2f:7b:45:7c:fd:1f:f9:95:e6:cc:3a:67:1f:
e9:87:73:92:c6:71:6f:a9:65:d8:6f:1f:58:0a:95:0f:3f:66:
75:3b:1d:02:72:5e:0a:de:1b:f7:f4:7d:a2:5a:4e:36:a2:b5:
1b:8f:e9:ba:43:d6:9f:da:0b:ce:40:85:65:30:89:54:01:1c:
4e:e4:c3:36:7d:86:f6:d0:93:f8:05:6c:d3:5d:d9:1c:27:fa:
bf:a4:b8:c1:73:e8:78:9b:17:aa:8b:84:a6:e8:fd:ca:ad:c4:
f4:01:20:99:5a:49:0f:c8:86:0e:82:d9:93:3e:64:c0:da:b4:
af:93:fc:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE
NzZCOEU5RDkwHhcNMjYwOTEyMTY1NzUwWhcNMjYwOTE5MTY1NzUwWjAYMRYwFAYD
VQQDEw02YWE1ODQ4Zi1kMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVoTkiuR8PKrdGdApZFHu6Dj8E5MDSZlHYiTiiZUSOIIuNvtdZbi2iso+lNs
nmdoPNQvyNE4fV0cP89TnZ4LsMrnFsDdyXA66EDhAmuMJn3m+D+oc6CTvyxjkzf1
Hj1qfmi9GZX6I0lobPU9MoQjiSZMJRdiTs3f4RB4IzpYYwjafN2t7cr6I4lpwltz
W3ID34TcgmgbCIM5GdCopXUQZJLbREg4rpySQadxSHvAOIZAZ8lHxE51QNGwHiOV
dDH4VNXtXnZKxFxBmcA/Dt4Z/VcqwQSrT6n9wCgQ7sV8+FY3vooo2kqgqZs5qrLM
iLXhwXuVuD4iRtrJfmCmf+5YlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAeb90t
+6e2bQkLF3jHRxMBb+Y+MB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE
RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2
Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATfenMCCYhuo7gflTRFYj1DMjZgk//dpT5jt9agcXxuHFNA57gzzEFPOFBHH5
AMN9cI7XOhjR3Lep/8OSPOvph3ejJya+MLqptz4XdwUFTLpMMRgp/iHG4q1Qwn4L
xJWXYXnYplkVMsLM4UDkEjaOiNbDTaaJme/r1650aS9SbFZQzQUve0V8/R/5lebM
Omcf6YdzksZxb6ll2G8fWAqVDz9mdTsdAnJeCt4b9/R9olpONqK1G4/pukPWn9oL
zkCFZTCJVAEcTuTDNn2G9tCT+AVs013ZHCf6v6S4wXPoeJsXqouEpuj9yq3E9AEg
mVpJD8iGDoLZkz5kwNq0r5P8dw==
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:36:22 2026 by rpki-client