
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File: QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier: H2aj1jtRI25sOivMZt19MnZwE2oye6+Z0/Kc5dUwwYo=
Subject key identifier: 08:B8:4B:39:A3:D0:A2:3D:B4:30:4B:13:2A:CB:AE:B3:94:0B:C1:2F
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer: /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number: 0150
Signing time: Fri 23 Oct 2026 05:48:23 +0000
Manifest this update: Fri 23 Oct 2026 05:48:22 +0000
Manifest next update: Fri 30 Oct 2026 05:48:22 +0000
Files and hashes: 1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: beEcfZXdmBM7wXCQI/xLf6CojmNpSRxxwvviMBHYvCg=)
2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: tykKMCNyhL8YIODSIbVTOG4k2NzgIkvRLrrP9k8uYXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Validity
Not Before: Oct 23 05:48:22 2026 GMT
Not After : Oct 30 05:48:22 2026 GMT
Subject: CN=6adaf527-777e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:b1:9b:e7:a8:3e:e3:7c:e6:2f:51:a0:28:
c7:72:f9:e2:2d:61:13:8a:46:79:54:8c:51:0b:ea:
1c:48:aa:10:f4:aa:8e:b4:7f:c3:16:1c:91:75:32:
54:d0:f5:33:2e:5e:6d:de:5e:7f:7a:9d:a2:7d:26:
52:f2:9a:79:d1:6d:fd:1f:08:76:1e:7e:85:9f:26:
27:82:9e:c1:40:17:97:d8:8c:72:50:50:67:05:d4:
42:ac:6b:78:e5:60:7d:05:3d:c2:98:84:a7:e0:62:
57:97:75:14:19:4f:ea:5f:1f:97:e7:be:e8:41:af:
66:2d:e0:4a:33:2c:df:6f:23:6e:e8:2e:9d:ed:23:
dd:b8:9f:82:68:1c:37:90:96:c9:65:0f:07:04:d9:
8d:40:dc:e9:5d:b9:c4:cb:1b:04:c2:88:01:39:6e:
f0:ab:71:b1:6f:b1:ea:2f:fc:50:32:2f:24:e6:c9:
51:32:32:80:fe:bb:64:73:8c:67:6a:a1:1e:c0:28:
bd:50:94:53:22:7d:42:65:35:fc:2a:d7:d7:5e:3f:
e5:ee:c3:aa:82:51:97:f2:b6:af:94:44:3f:24:63:
d1:ec:86:89:13:df:3c:2a:28:95:c4:24:a1:74:17:
00:d6:1e:64:4e:f7:97:a5:3a:80:d7:c6:13:12:75:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:4B:39:A3:D0:A2:3D:B4:30:4B:13:2A:CB:AE:B3:94:0B:C1:2F
X509v3 Authority Key Identifier:
keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cc:4e:4a:d1:f0:96:9c:66:c8:d1:d6:fd:44:ee:6f:93:01:
0d:0c:b4:a6:f9:92:1e:40:49:7b:88:d2:fb:fe:21:8c:48:82:
79:76:8b:56:dc:dc:48:83:bb:f5:6f:e2:02:36:32:09:70:d8:
5d:3f:23:8a:78:25:4c:c7:ad:5d:7e:6f:07:13:45:04:d7:5a:
db:b1:c9:de:87:86:d9:6c:50:0b:43:67:7d:87:14:63:e9:a0:
39:8a:f3:0b:a0:d8:77:29:5d:89:52:d9:d8:dc:1a:4c:65:66:
0b:38:61:47:16:ec:e0:c5:30:4a:0d:26:fe:29:f2:83:7b:06:
38:2e:24:4f:19:d1:91:dd:84:31:32:03:c7:5a:b0:6f:cf:36:
69:ed:4b:dd:ad:c3:04:d5:d1:06:ce:c9:ac:87:43:32:b1:4d:
d5:b8:15:10:60:0d:b3:e9:03:8f:f0:c0:21:d8:7b:dc:12:df:
db:a6:72:e7:97:8f:32:fa:87:fd:49:65:e8:8d:b1:6a:d1:7c:
92:2f:fc:19:be:a9:8a:90:6c:58:4b:53:b9:fa:b0:7d:da:15:
43:9d:c3:40:07:f1:b3:41:10:83:a5:93:99:65:d5:78:dc:40:
33:73:2a:72:0a:23:0c:8b:b3:ac:69:22:1f:d5:9d:b1:49:1c:
5c:bb:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:42:37 2026 by rpki-client