
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File: QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier: hSvXRF4Mu72rGCrFioIR39SuSi3nmCylelkivRIj6oA=
Subject key identifier: A1:CB:D2:1B:80:DE:D8:57:8E:8D:ED:8C:1D:44:5F:27:79:1E:03:F3
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial: 023F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number: 022F
Signing time: Fri 09 Oct 2026 03:26:01 +0000
Manifest this update: Fri 09 Oct 2026 03:26:01 +0000
Manifest next update: Fri 16 Oct 2026 03:26:01 +0000
Files and hashes: 1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: f56q4S0+86cQqmmcrUCn8q7ll9VceIRDqe86gLlwwfw=)
2: 24579154B34D11F19494EB3F3511F970.roa (hash: y14mvIb09+eEN3eSsgVA2iSdwPaX6VrqG7CF5oFtwac=)
3: ECE2E908B34C11F1902F4B313511F970.roa (hash: VKdOcR7nd8Uy4p/yEaUCGqVIBZDXHU6mvcAdNqe4W5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 03:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Validity
Not Before: Oct 9 03:26:01 2026 GMT
Not After : Oct 16 03:26:01 2026 GMT
Subject: CN=6ac85ec9-ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:b6:9d:a2:ab:ed:24:68:38:b3:7e:8e:f1:
e8:28:33:16:4f:50:5f:1a:03:06:8d:a5:38:2f:c3:
d4:80:99:39:33:09:3b:ea:90:35:c8:3e:20:5b:2e:
e5:93:1a:89:9c:b1:e1:cf:fd:aa:d0:66:82:8e:68:
af:ea:94:16:dc:83:1e:cb:d3:03:16:ad:b7:aa:30:
4c:93:7e:fd:25:96:55:38:87:a1:65:83:9e:e0:25:
5a:17:7d:15:08:48:b5:41:e6:c5:97:77:df:f5:98:
73:a1:65:1b:f0:5e:c5:b2:d5:a2:17:60:da:ed:54:
15:04:2e:9b:e4:c9:5b:1e:e3:74:d4:14:70:f2:d4:
b5:f8:50:41:87:31:68:a4:4f:58:7b:2f:2d:10:26:
f0:9b:02:b1:06:4a:f0:72:a5:c0:eb:07:49:18:95:
6e:be:27:93:97:34:e2:99:5b:df:4f:a5:68:7e:9e:
9c:71:9b:4e:88:d4:c4:91:23:63:f3:87:56:2c:2d:
93:d3:f1:a3:20:47:31:44:b8:62:bf:22:a8:82:67:
19:48:fd:83:0d:46:8a:d1:a7:99:42:ca:f5:ae:7d:
71:be:57:cb:aa:db:91:2b:4c:ad:e7:d5:57:29:fe:
7b:51:e4:bc:c2:54:50:38:b4:3a:63:e8:d4:30:67:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:D2:1B:80:DE:D8:57:8E:8D:ED:8C:1D:44:5F:27:79:1E:03:F3
X509v3 Authority Key Identifier:
keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dc:d8:15:3c:26:ea:b2:a2:b8:ea:17:30:d9:d0:e2:80:5c:
9b:63:dc:1b:0f:39:68:7a:3d:6d:b9:24:ff:da:08:58:5e:83:
e6:9f:fc:0c:99:f7:b2:04:0d:5a:e0:f0:4d:92:06:72:1a:4e:
0a:a0:79:04:4d:78:f9:23:1d:90:a4:ba:af:6b:7c:2d:2c:c5:
f8:b2:e8:f6:9c:75:4e:b2:02:9c:60:e1:52:ae:a9:ea:f0:0c:
56:f4:15:66:e3:f3:a1:2d:43:18:76:c5:52:80:3a:e7:0a:d5:
81:d7:81:f0:28:6a:0f:6e:81:50:96:71:ac:73:cb:99:bb:b0:
8f:28:cb:52:9b:63:d4:6e:0b:72:70:2b:47:2c:3f:85:63:d6:
13:cb:33:f9:b7:50:7b:fa:b2:ea:e2:67:61:57:60:8e:28:32:
99:d5:fd:35:8b:3b:6d:e0:29:f8:ff:a5:f7:57:53:05:e9:7e:
6d:39:f9:25:6e:7b:81:a3:46:0d:b9:2b:d6:67:da:b1:46:cc:
35:a2:9a:b3:ae:36:82:87:03:f2:f3:64:73:fd:11:0c:8f:46:
0d:84:13:a1:31:8d:06:25:9c:b9:cf:aa:0a:21:2f:12:e4:9b:
b1:d0:3b:94:94:9b:2a:75:26:b6:85:77:eb:d7:73:a3:4d:23:
5a:64:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:41:44 2026 by rpki-client