
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
File: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft (raw, json)
Hash identifier: 2JMphM4r7W5kT1jIdYkHbcMjpb+XAJ4RrQ2s1u4tgcc=
Subject key identifier: 64:87:55:40:AE:47:35:34:3B:A3:CE:32:F5:3E:4E:99:A9:A9:76:65
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Certificate issuer: /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
Manifest number: F5
Signing time: Mon 05 Oct 2026 06:53:48 +0000
Manifest this update: Mon 05 Oct 2026 06:53:48 +0000
Manifest next update: Mon 12 Oct 2026 06:53:48 +0000
Files and hashes: 1: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl (hash: Hh8CMMfnbN0c5N2MO/k7MwoiZesQWnaiSaJ6/yxsz1Y=)
2: 63401AAAB35011F19B6C7AEB3511F970.roa (hash: Zlckh2z2Au/JfrnsWj+x1Nz6rXBQuPRcjSGFmuHl57U=)
3: 3FEAB8ACB35111F18D4FB8773611F970.roa (hash: G4O4Fr9KFAy9JCGG9vy1DQtNadHCEy2A/xHTLkXWzvU=)
4: 63CD8020B35011F19B6C7AEB3511F970.roa (hash: Wa4FWT9aOHEZOJNnNK1xjxJYRVenPgzimIo1B1clEH0=)
5: AE811872614711F0B811645EC4F9AE02.roa (hash: CEPtXkuVKx6QKp3MVtGTrXzO5plriy+U5ciLSfemG7A=)
6: 6295DC5CB35011F19B6C7AEB3511F970.roa (hash: miISMTG3epzi577iGHU3qUsy/CRXBGTdzRzmdu9GUHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Validity
Not Before: Oct 5 06:53:48 2026 GMT
Not After : Oct 12 06:53:48 2026 GMT
Subject: CN=6ac3497c-bb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:ef:6b:9c:a7:0c:a1:b3:54:80:27:a3:91:
65:4b:e2:14:2d:0d:fb:22:50:19:ff:40:14:e5:08:
e1:76:80:01:c1:d1:77:03:b5:a3:00:9a:24:66:76:
fc:2a:68:11:a2:72:50:cb:2d:b0:69:d6:b8:3d:16:
9d:12:e2:05:14:fe:3b:28:29:aa:e9:b4:ee:74:c0:
94:98:d4:33:59:a9:c7:f7:c2:da:26:26:f9:5a:66:
f7:05:66:b0:4b:23:51:23:70:a6:6b:99:59:90:94:
8d:07:fb:15:e2:d0:0f:1b:2a:64:38:96:cc:e1:d3:
f5:59:8a:8b:0f:61:6f:e9:df:a8:4c:7c:74:58:67:
0a:00:5e:1f:45:b0:86:3f:02:92:3b:28:6d:27:8d:
e9:9d:81:37:67:6e:2f:c0:7a:24:55:0f:c9:f8:21:
bd:e1:be:60:50:a6:ae:d6:81:24:99:0e:4a:5a:70:
2c:e6:61:cd:5a:6c:e8:f3:32:f2:6b:6d:c9:c8:13:
22:16:38:55:66:d0:a6:32:7a:b8:d4:c8:ab:72:9f:
2e:7d:40:b5:98:f9:54:14:b0:6a:92:a3:d0:a1:9b:
32:12:6c:18:f9:1a:bf:cb:54:a5:b4:25:02:d8:aa:
c3:d4:23:6c:fe:91:13:d8:0b:e5:4d:30:73:ab:5e:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:55:40:AE:47:35:34:3B:A3:CE:32:F5:3E:4E:99:A9:A9:76:65
X509v3 Authority Key Identifier:
keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:ef:48:f9:45:f4:01:d5:4d:48:73:83:08:48:ac:46:48:47:
44:6f:f2:78:08:c5:41:cf:cb:5e:cf:4a:f8:ea:29:d8:ea:8c:
e8:09:a0:f8:c9:c4:57:e8:41:c5:29:68:8a:ee:9b:d3:39:f2:
a4:2a:db:5a:f5:e3:b0:d5:84:91:2f:d2:f3:0c:f7:1e:87:f3:
2d:59:e3:f2:de:b8:5a:66:0d:f0:cd:85:1f:7d:33:b7:f6:45:
63:76:69:55:c1:b8:f5:82:b9:fc:a6:3c:01:12:09:fa:2e:b8:
53:7b:b7:b5:49:0c:19:81:48:3e:aa:54:a9:3a:3b:6c:02:ee:
de:dd:2a:dc:e0:87:b2:d4:e1:3c:28:7d:f9:cb:29:09:7d:11:
19:4f:be:55:4f:8e:a5:80:bc:a0:a6:79:2d:78:eb:90:c4:ed:
28:27:28:6f:b3:9e:49:30:4a:20:c7:2a:e8:73:bc:21:ae:e9:
6c:82:18:9f:db:01:49:39:97:a8:33:92:4b:e1:a7:61:ad:a5:
18:70:b5:0b:d9:39:88:5e:ea:1c:2a:a9:8f:10:6b:a0:64:29:
f9:1b:0e:63:92:25:9e:58:17:4e:39:af:27:7b:88:64:7d:95:
ee:1f:50:70:b9:28:e2:6c:88:93:ca:d9:7f:22:7d:9a:8c:51:
b8:02:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:55:47 2026 by rpki-client