
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json)
Hash identifier: u/3oMuDVvDRHYqDeihz7p/lvIRRL5XAOdPf0Vw5Xruk=
Subject key identifier: 3E:03:35:0F:0A:0A:41:4A:97:C6:7F:1A:DC:81:53:7B:DF:33:1B:9F
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial: 0837
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
Manifest number: 0819
Signing time: Mon 26 Oct 2026 21:14:22 +0000
Manifest this update: Mon 26 Oct 2026 21:14:22 +0000
Manifest next update: Mon 02 Nov 2026 21:14:22 +0000
Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: KHJbrDrUD+kxPSNYp2/UoA2ZMFkb7qsWMOiMNIdlHl8=)
2: 68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa (hash: w5VOo/6r3NeoiKj8fNZOZ/VJngKbDV07+QpgEuw1iFA=)
3: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: 1duLitLlKe5JGX7eQUYs2Azf52gj3DJyaqa7K/tCUk4=)
4: 66667640547B11F1B35F59E4B9833773.roa (hash: xUvcOGfbKcgryK4sqev8kZ+k3b3AHJ+6QuD/2AevDnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103 (0x837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Validity
Not Before: Oct 26 21:14:22 2026 GMT
Not After : Nov 2 21:14:22 2026 GMT
Subject: CN=6adfc2ae-218a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:e4:8e:85:be:eb:7a:5a:fa:13:f8:19:89:
a1:bc:bc:5a:83:25:97:25:26:0d:68:f7:d3:d2:e4:
fa:be:8a:e7:51:55:2d:ea:eb:8f:8d:94:b9:18:08:
3a:27:94:eb:21:b9:85:42:27:2e:bc:d4:25:db:6e:
58:6d:ca:94:ce:4c:f6:e5:89:fe:5b:31:0e:a1:68:
6b:8d:4f:b0:70:97:d8:01:f9:41:13:b2:dc:0c:a9:
91:5f:47:08:42:68:5b:6b:bb:8b:b2:f4:20:65:82:
fb:93:85:1a:ed:a3:2c:c3:e8:da:c0:f7:73:9d:55:
bb:c4:4d:f4:47:fe:1b:9f:a3:0a:a6:23:5c:23:37:
0d:b1:44:84:46:b8:f0:6e:f0:c0:fc:c4:d7:5a:d1:
b9:28:26:5a:b0:2d:f8:e1:4d:dc:9e:18:01:27:ff:
50:aa:b2:ac:a2:90:c0:a7:d5:f3:99:31:1c:46:ab:
75:80:98:90:91:fe:58:d5:b6:cf:41:62:fb:d8:4a:
d6:0e:21:2e:18:2f:b0:e8:5f:26:8b:e8:2d:d0:68:
6f:3c:80:d8:a9:1d:4d:42:87:0a:43:01:52:8c:69:
e5:2d:21:f3:f5:c7:30:16:ff:cb:6b:62:91:68:2e:
8a:c0:e8:02:7b:fb:79:c8:70:b1:b2:bc:97:d7:a9:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:03:35:0F:0A:0A:41:4A:97:C6:7F:1A:DC:81:53:7B:DF:33:1B:9F
X509v3 Authority Key Identifier:
keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:92:26:67:58:1b:8d:33:55:8e:51:39:aa:fa:a3:53:85:c3:
9b:15:2f:c7:30:e3:77:b3:74:99:76:c2:96:f3:f0:74:47:8b:
67:83:ba:81:a8:bf:f6:7e:9f:51:56:d8:d9:2e:cf:c4:34:08:
e3:0e:bc:21:5f:c5:c2:a0:53:93:39:a1:0b:1b:23:6f:6a:68:
7e:52:48:9e:90:72:35:a3:8f:9f:b4:a3:18:0b:33:c0:02:8b:
a8:80:c6:5a:0f:8f:e0:3b:83:e3:51:57:14:85:d6:c5:8c:1a:
bf:3e:36:ac:3c:04:9b:b5:0b:dc:1e:a7:55:40:b6:e8:b6:7a:
73:34:8d:92:88:67:50:49:f2:8a:ab:51:2a:30:3f:00:39:32:
a7:77:00:73:d8:69:12:c5:91:c5:58:19:fc:36:db:01:24:46:
a4:8e:b1:d6:bb:6c:86:80:1f:ae:60:6b:08:7b:23:7a:b7:06:
4f:da:5c:42:a8:94:03:3e:e4:4d:c8:e1:27:60:83:fc:43:85:
4e:34:6a:ed:76:00:e6:90:ee:c4:e6:4e:41:3b:40:35:03:37:
d0:50:35:42:b9:61:fe:80:89:bf:6e:ec:45:f2:67:49:ba:f6:
02:55:be:ad:1d:4e:e8:9a:18:67:f9:22:65:0b:05:b9:ff:30:
36:6a:d5:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG
RTcwRDg5RDcwHhcNMjYxMDI2MjExNDIyWhcNMjYxMTAyMjExNDIyWjAYMRYwFAYD
VQQDEw02YWRmYzJhZS0yMThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9vkjoW+63pa+hP4GYmhvLxagyWXJSYNaPfT0uT6vornUVUt6uuPjZS5GAg6
J5TrIbmFQicuvNQl225YbcqUzkz25Yn+WzEOoWhrjU+wcJfYAflBE7LcDKmRX0cI
Qmhba7uLsvQgZYL7k4Ua7aMsw+jawPdznVW7xE30R/4bn6MKpiNcIzcNsUSERrjw
bvDA/MTXWtG5KCZasC344U3cnhgBJ/9QqrKsopDAp9XzmTEcRqt1gJiQkf5Y1bbP
QWL72ErWDiEuGC+w6F8mi+gt0GhvPIDYqR1NQocKQwFSjGnlLSHz9ccwFv/La2KR
aC6KwOgCe/t5yHCxsryX16klewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4DNQ8K
CkFKl8Z/GtyBU3vfMxufMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1
OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X
Y3EtZzZGaDMxT1AtY05pZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB5ImZ1gbjTNVjlE5qvqjU4XDmxUvxzDjd7N0mXbClvPwdEeLZ4O6gai/9n6f
UVbY2S7PxDQI4w68IV/FwqBTkzmhCxsjb2poflJInpByNaOPn7SjGAszwAKLqIDG
Wg+P4DuD41FXFIXWxYwavz42rDwEm7UL3B6nVUC26LZ6czSNkohnUEnyiqtRKjA/
ADkyp3cAc9hpEsWRxVgZ/DbbASRGpI6x1rtshoAfrmBrCHsjercGT9pcQqiUAz7k
TcjhJ2CD/EOFTjRq7XYA5pDuxOZOQTtANQM30FA1Qrlh/oCJv27sRfJnSbr2AlW+
rR1O6JoYZ/kiZQsFuf8wNmrVRA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:36 2026 by rpki-client