
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
File: QuOGLXRTXCypqrN6cZW1keruIeU.mft (raw, json)
Hash identifier: /itaFX7lQ5E7gvFSUG+nObhJGj4BnX0IKoy16t3l5jo=
Subject key identifier: 00:9A:C1:8A:F6:83:0B:AD:14:E6:BF:47:BB:E7:37:05:D3:6D:64:55
Authority key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
Certificate issuer: /CN=A91580E4/serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
Manifest number: 012B
Signing time: Wed 07 Oct 2026 06:19:37 +0000
Manifest this update: Wed 07 Oct 2026 06:19:36 +0000
Manifest next update: Wed 14 Oct 2026 06:19:36 +0000
Files and hashes: 1: QuOGLXRTXCypqrN6cZW1keruIeU.crl (hash: ZwWJ906tiCly/EDmRHZJvIt7h549NAcSgvGCLXdNM7A=)
2: A7B08E22B10211F1AB6D7EA23D11F970.roa (hash: fHzJUoEipwxN6pfruVLgh/ZSYoJJi8WC3+rfJqVR+fE=)
3: DE48485AACF611F09C3A4F81C4F9AE02.roa (hash: OmTxVqMGGo+qpYNpnObWsDGVo4+vNAjyV7yA5gsTb0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl
rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Validity
Not Before: Oct 7 06:19:36 2026 GMT
Not After : Oct 14 06:19:36 2026 GMT
Subject: CN=6ac5e478-6cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:f7:1e:00:89:6a:8f:36:3d:16:6d:79:80:
2d:98:1c:a3:fd:be:40:eb:86:0e:5e:dd:fa:a9:a9:
dc:73:e3:a2:d6:2b:cc:b9:78:fe:16:6c:39:8f:c7:
16:bb:da:a6:d3:44:dd:a8:9d:73:a3:40:b2:f9:73:
c7:b6:d0:fa:5c:88:81:c2:76:b8:06:fa:a2:c0:e5:
c0:19:e8:47:91:73:97:80:5c:b0:82:06:62:1b:e0:
90:9f:74:4f:80:7f:f8:74:b8:32:2b:f4:85:e5:13:
19:1b:b4:7b:83:9a:09:60:84:0e:0c:dd:b0:fa:59:
8c:70:91:30:14:87:f1:54:58:6a:6c:d6:6a:01:3e:
96:3c:11:f8:e4:42:49:51:4c:91:71:92:f7:e3:f7:
bd:fa:8c:d3:75:60:50:7c:82:fd:6a:47:c2:cb:ff:
29:7a:24:53:69:ba:c2:50:3b:b4:60:81:77:df:fb:
05:3c:eb:ff:8a:3b:10:48:9c:06:e7:03:7b:31:76:
ea:de:e2:6c:34:f1:ce:cc:5b:35:89:81:f3:7d:00:
0e:47:ee:9a:38:7c:ee:5e:4e:47:11:a9:d5:12:38:
d4:84:01:4d:05:49:98:0b:d4:31:a4:aa:69:91:ba:
73:3a:87:65:80:bb:c0:0d:e5:3b:ad:5b:ca:66:51:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:C1:8A:F6:83:0B:AD:14:E6:BF:47:BB:E7:37:05:D3:6D:64:55
X509v3 Authority Key Identifier:
keyid:42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:69:53:cd:fe:0d:f5:00:fe:1f:b7:59:98:b8:f3:a7:ae:
72:d0:74:99:15:33:24:12:6c:94:50:ec:c2:77:13:e4:e8:27:
b5:ac:bc:ac:8c:2b:2d:a3:ff:f8:2c:e9:dd:83:06:51:61:d7:
82:a2:47:7d:ea:c5:32:af:39:ec:59:64:51:7d:62:3f:8f:f1:
94:0b:7f:7a:25:3f:c1:ff:3c:8e:b1:01:f3:b3:56:31:af:3b:
65:9b:9d:e3:1d:8e:5b:16:c5:8f:38:48:89:66:26:be:95:0f:
45:e3:62:8f:37:4d:41:cf:ec:20:06:ac:13:b7:70:e5:6d:98:
e7:fb:6b:ed:71:94:bd:5b:a3:72:97:9d:e3:19:be:6c:b3:9e:
9f:d5:b5:c5:10:6b:1b:7a:06:85:4b:1d:ac:53:47:f7:0e:25:
e5:14:69:a1:06:60:78:88:4a:fa:73:c1:24:1b:b6:9b:8b:63:
92:ee:4e:fc:7c:2b:a2:b0:b2:b5:6a:97:47:bb:b4:81:bb:50:
17:27:75:ae:9b:8b:2e:b4:f8:85:ac:c0:75:c1:45:0c:70:60:
56:a3:ee:48:7c:e8:70:c3:87:06:61:cd:24:51:02:2f:c4:cc:
5e:45:d2:ca:56:9f:29:68:1b:d2:dd:b6:fe:4f:c4:65:0a:b7:
56:70:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:57 2026 by rpki-client