
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier: Ojo6/VBhIPOMZKKnZOM9cKqA21JhvjNfuvwc4LVar5U=
Subject key identifier: 79:45:1B:61:BC:3B:AD:B5:C0:C5:F2:DC:E9:5E:DE:C7:A0:91:59:60
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number: 082E
Signing time: Tue 20 Oct 2026 19:14:13 +0000
Manifest this update: Tue 20 Oct 2026 19:14:13 +0000
Manifest next update: Tue 27 Oct 2026 19:14:13 +0000
Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: xbG7nZ8SkiySqi9eDclw6EjuVvJcX8bHaC5DucPm/CU=)
2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: O/lTB0pDSB8sB0dRmgz1yxjauyhwEgNkjtUoJWKHyCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 19:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Validity
Not Before: Oct 20 19:14:13 2026 GMT
Not After : Oct 27 19:14:13 2026 GMT
Subject: CN=6ad7bd85-e700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:f0:a0:a0:9c:95:a5:8f:b3:5f:77:5b:81:
c1:c6:b5:b5:de:78:e1:48:ef:9a:58:8b:b4:f0:8d:
89:18:de:d0:a6:b0:42:cf:26:45:0e:11:05:82:74:
f6:ec:ac:71:13:3b:ab:61:59:8f:18:0f:4b:32:ba:
fe:dd:69:29:ac:b5:23:eb:ca:52:3d:60:b5:9d:98:
45:e8:70:45:c8:da:e3:f6:29:48:d6:a4:39:5c:9f:
a1:e3:d2:35:7c:9b:e7:b9:95:45:bd:e4:14:5d:74:
57:bc:6f:5a:08:5b:76:60:81:e7:71:6b:68:8a:6a:
1f:7a:e7:a4:93:5a:9a:e9:4e:ee:2b:1b:3e:ec:2b:
b8:8e:46:21:1f:1c:5a:55:23:7d:ad:7e:7a:e2:11:
c7:c4:43:dd:74:75:67:4b:a2:85:37:af:29:7b:08:
e8:a7:37:e3:c4:36:9d:97:a4:1c:7d:90:8b:e6:75:
d4:8b:8c:16:11:de:0b:d6:df:47:f1:3c:30:54:41:
45:ac:7b:d6:cb:78:f6:00:02:a5:22:f6:35:9b:c6:
9f:d9:3b:e0:b5:b4:37:94:f9:c2:95:a5:46:83:d4:
07:ff:f1:f8:f4:a1:0d:62:9f:39:d4:bd:87:dc:32:
f6:66:af:5b:b8:99:e1:92:a8:82:d3:47:7f:6c:28:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:1B:61:BC:3B:AD:B5:C0:C5:F2:DC:E9:5E:DE:C7:A0:91:59:60
X509v3 Authority Key Identifier:
keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c2:a4:9c:2a:70:f6:5c:b0:30:b9:d0:c9:21:a1:18:cb:db:
69:17:25:41:5e:af:74:92:59:d8:c0:44:7d:78:17:63:b4:35:
b1:f7:3f:da:03:24:e1:83:a0:01:96:af:65:ee:5b:56:c4:1a:
0b:b3:9e:b0:16:80:65:b5:2c:69:ac:c0:90:27:6d:bd:43:2e:
00:cc:94:52:70:ae:43:44:26:40:d3:65:ed:45:71:ea:fa:06:
08:62:b7:37:8a:64:51:a9:d9:b0:b1:a1:d3:4c:a8:b0:0d:7d:
5f:a8:20:ca:d8:0d:da:05:4e:6e:9c:e9:bd:15:1f:65:b9:b7:
5e:02:8a:f6:5b:df:ed:67:14:42:71:c6:26:af:20:96:2e:7e:
14:95:a6:df:74:0e:db:ff:6d:20:1a:f6:ef:b7:f1:ae:51:bd:
b9:fd:5a:55:ff:ad:f8:cc:92:1b:32:9b:4d:b9:d3:26:b7:90:
f9:2f:68:0e:a6:15:7e:32:be:6d:06:2b:a8:f6:51:5d:bb:33:
7b:ba:28:80:e7:2c:f2:79:94:7e:35:60:6c:3d:56:e2:79:88:
e0:b7:8b:21:ea:b6:ab:08:7d:10:5e:10:20:4a:2b:01:e9:52:
42:2f:46:da:00:81:a8:50:ca:70:af:d0:c2:5d:66:ce:80:80:
1b:02:17:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx
NUM0QjUyMDkwHhcNMjYxMDIwMTkxNDEzWhcNMjYxMDI3MTkxNDEzWjAYMRYwFAYD
VQQDEw02YWQ3YmQ4NS1lNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlUTwoKCclaWPs193W4HBxrW13njhSO+aWIu08I2JGN7QprBCzyZFDhEFgnT2
7KxxEzurYVmPGA9LMrr+3WkprLUj68pSPWC1nZhF6HBFyNrj9ilI1qQ5XJ+h49I1
fJvnuZVFveQUXXRXvG9aCFt2YIHncWtoimofeuekk1qa6U7uKxs+7Cu4jkYhHxxa
VSN9rX564hHHxEPddHVnS6KFN68pewjopzfjxDadl6QcfZCL5nXUi4wWEd4L1t9H
8TwwVEFFrHvWy3j2AAKlIvY1m8af2TvgtbQ3lPnClaVGg9QH//H49KENYp851L2H
3DL2Zq9buJnhkqiC00d/bCgS/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlFG2G8
O621wMXy3Ole3segkVlgMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF
ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o
OUV0cTh1OC00UmdWeExVZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALMKknCpw9lywMLnQySGhGMvbaRclQV6vdJJZ2MBEfXgXY7Q1sfc/2gMk4YOg
AZavZe5bVsQaC7OesBaAZbUsaazAkCdtvUMuAMyUUnCuQ0QmQNNl7UVx6voGCGK3
N4pkUanZsLGh00yosA19X6ggytgN2gVObpzpvRUfZbm3XgKK9lvf7WcUQnHGJq8g
li5+FJWm33QO2/9tIBr277fxrlG9uf1aVf+t+MySGzKbTbnTJreQ+S9oDqYVfjK+
bQYrqPZRXbsze7oogOcs8nmUfjVgbD1W4nmI4LeLIeq2qwh9EF4QIEorAelSQi9G
2gCBqFDKcK/Qwl1mzoCAGwIXdw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 06:10:35 2026 by rpki-client