
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json)
Hash identifier: E28f22CRk3f3BKvi/vgcv6OX1Jyigt67kQCnTMhav54=
Subject key identifier: F4:B0:43:A9:03:DD:58:D4:A4:4B:8C:BF:44:92:45:9C:2F:77:43:EC
Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54
Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
Certificate serial: 0575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
Manifest number: 0564
Signing time: Wed 28 Oct 2026 23:35:38 +0000
Manifest this update: Wed 28 Oct 2026 23:35:38 +0000
Manifest next update: Wed 04 Nov 2026 23:35:38 +0000
Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: dxoY9FbF/WkwlXMb8CyX2+9vUop0Y7oLMFuAVu5sQck=)
2: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: l82fYq1x4u49vmBmNnG130HVCjkEDSzOMLfbwYG7C8U=)
3: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl
rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
Validity
Not Before: Oct 28 23:35:38 2026 GMT
Not After : Nov 4 23:35:38 2026 GMT
Subject: CN=6ae286ca-f890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:65:a2:7f:0e:13:40:61:88:95:03:7a:88:
90:b9:54:fe:b2:79:01:1f:1b:8e:26:c1:a4:ce:42:
f1:fc:68:25:47:94:6e:8f:b0:e1:4e:3e:4c:5d:1e:
b7:52:d9:4a:b8:00:84:07:db:c7:29:02:35:85:ac:
d6:e8:c9:e1:17:36:68:8d:0e:4c:f2:2e:68:34:51:
8f:c3:72:55:7b:aa:48:a2:69:16:8a:8b:a2:2a:1f:
a1:43:e1:c7:7e:44:3e:77:b6:4a:a5:a9:5f:18:31:
8b:df:19:99:8b:6d:79:80:c7:d3:1c:f2:fb:3a:0e:
e0:e0:37:c6:cf:7b:a2:6b:61:d6:ca:67:c7:03:5c:
2f:ab:0f:ec:84:6a:50:26:cd:d5:a1:3e:e7:4a:c5:
7c:c2:4d:00:a3:b0:9c:0c:6a:b4:76:cd:ee:b5:b2:
67:c4:d2:16:1b:15:f0:25:b8:4f:ba:99:b7:cb:87:
f3:3a:dc:ef:b3:19:48:c8:99:3a:0d:ef:6b:69:97:
9e:cd:4a:fc:21:42:94:fc:73:3c:8e:0a:e6:b5:ac:
5c:8f:88:e6:33:d4:48:90:48:3b:a2:a8:72:2c:8c:
de:60:fc:e4:90:5a:89:fc:26:97:e7:5f:46:2b:25:
7a:dd:f6:dd:8a:73:22:6f:2d:f0:80:9e:d1:39:a2:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B0:43:A9:03:DD:58:D4:A4:4B:8C:BF:44:92:45:9C:2F:77:43:EC
X509v3 Authority Key Identifier:
keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:f9:43:f0:54:f6:38:4b:7e:39:e8:a4:7d:4a:10:84:50:ec:
7d:cb:d6:7c:4b:0e:4e:75:cc:3e:42:c3:71:dc:7a:ce:dc:32:
7e:8d:4c:ef:0b:fb:ab:61:16:18:53:86:c0:57:f4:25:a4:ad:
ad:05:24:da:85:e6:b6:0e:5f:33:2d:7a:da:34:95:42:8d:68:
05:d6:e9:0a:5a:ce:82:96:7f:6f:bf:4b:41:3d:3a:10:e9:18:
7c:c3:2f:69:77:5f:ad:92:14:b9:3e:d6:d4:73:7e:85:c6:fd:
f2:09:04:97:0b:91:76:e4:7d:0c:9f:82:cf:5f:57:ca:48:a7:
cb:6e:e4:c7:20:11:79:0c:65:e2:5b:85:22:84:21:55:5b:31:
28:c5:30:71:03:f1:69:9c:9c:20:4d:c1:9a:25:43:54:24:8f:
b6:63:d5:22:51:c4:87:0b:55:e8:78:b3:2f:13:d0:ff:d1:c4:
51:a3:07:e7:9e:90:a3:6d:99:0b:63:c9:44:ec:7a:c4:a1:d8:
d9:ef:a1:1f:ce:89:bf:06:be:25:52:56:de:fe:5d:1b:1c:dc:
94:a1:08:49:c2:57:18:31:24:10:db:e4:50:38:f2:f4:ec:34:
7d:f2:01:8c:8d:ae:e0:86:bf:33:c3:19:26:c4:0d:75:8d:7c:
a6:1c:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:30:08 2026 by rpki-client