
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier: BRsqtftaJkeHJNvz/hTQqf5tQIdFeeiSlcxd4xou6do=
Subject key identifier: 07:40:E0:59:AF:83:5E:85:D8:A6:E2:61:3C:FF:24:DD:FC:F3:18:25
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial: 02DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number: 02DC
Signing time: Sat 03 Oct 2026 01:37:44 +0000
Manifest this update: Sat 03 Oct 2026 01:37:44 +0000
Manifest next update: Sat 10 Oct 2026 01:37:44 +0000
Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: 3K5CJ7rd1F6z6zcCe02F3hzhVaCvntlhbIGg1F6Ebng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Validity
Not Before: Oct 3 01:37:44 2026 GMT
Not After : Oct 10 01:37:44 2026 GMT
Subject: CN=6ac05c68-bd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:07:ad:e4:e4:db:20:50:89:c8:44:86:58:
46:1a:26:2a:56:fc:4c:3d:18:de:0f:f5:30:d1:3d:
e1:9f:35:31:50:d6:b5:b9:e6:2f:f6:08:58:b8:0d:
3a:78:18:98:0f:13:a9:7f:65:64:f2:9a:65:a7:e4:
d6:51:4a:99:e4:21:ab:04:66:d9:26:dd:2f:15:d0:
e2:87:97:45:b8:28:8a:41:86:fd:c4:54:33:7f:c9:
81:32:11:c2:05:a4:a1:20:04:6c:34:2a:a9:c2:ab:
4a:01:a2:f1:a0:7b:84:83:d8:e6:d5:69:3a:c3:44:
f7:05:3e:16:d2:87:ba:e3:ed:bf:25:40:b3:58:42:
d6:54:1a:7f:a7:a6:a6:4c:e5:0b:4c:3d:2d:7a:85:
70:92:ac:73:97:5d:f5:e3:ab:17:60:5b:86:ec:3e:
23:87:1b:fe:f3:27:70:9c:03:06:23:b1:5c:d8:5d:
ee:67:07:f0:a9:4a:5a:e7:8b:29:27:fb:74:67:71:
46:ab:28:d8:d7:b3:94:f2:c1:c4:f2:63:7c:f2:49:
8d:9d:48:f5:53:ef:90:6a:bd:e4:8d:9a:5d:e8:52:
52:07:43:cc:af:b5:84:17:f9:e5:b2:fc:59:ed:00:
57:f0:04:98:85:f2:17:94:41:8f:77:2f:db:16:bf:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:E0:59:AF:83:5E:85:D8:A6:E2:61:3C:FF:24:DD:FC:F3:18:25
X509v3 Authority Key Identifier:
keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8c:ca:11:95:95:17:41:ba:73:01:38:c0:8c:43:6e:ed:44:
87:f7:95:c2:a0:c3:e7:65:55:a8:81:14:f0:ee:ed:85:69:79:
1a:2f:f7:66:a5:c1:53:f3:51:6a:e5:90:f8:0a:77:69:6a:70:
24:c2:48:b9:45:bf:c4:80:a2:26:ff:65:78:22:29:3a:4a:3f:
c1:dc:02:65:cd:c0:2e:b8:8f:05:c4:18:88:25:2d:26:4b:7c:
93:ff:10:82:c4:ef:ba:60:c6:55:da:12:43:59:1f:bb:68:0e:
ad:bc:67:c5:c0:22:d8:a7:e3:80:d0:19:a4:7f:4f:c5:e2:af:
c3:97:06:89:86:18:2e:92:b7:7d:83:0e:77:d6:7d:65:01:c6:
48:01:42:07:6e:2c:e0:01:8e:ae:9f:64:9c:33:c1:73:e8:fa:
b8:7a:90:1c:da:d8:97:a4:79:9f:4b:64:30:78:96:31:35:27:
49:c2:af:4a:17:23:36:bf:29:c2:11:44:15:1a:83:45:7e:0f:
9b:d2:67:d0:b2:88:b9:0e:c9:bc:9a:b8:3e:c7:47:67:1d:51:
a0:89:b4:c4:6a:0a:bc:a1:de:53:66:8c:17:e8:d8:4d:a4:95:
df:42:44:85:e7:3e:c8:60:51:bf:19:b1:38:46:0c:96:e2:25:
f0:87:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:32:25 2026 by rpki-client