
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier: ETA1bXuMPKnFG0pS4rxUhraM8DdJdeC/NZdqnADBsJo=
Subject key identifier: 0C:66:D0:25:7C:7A:D3:57:A8:04:75:BC:31:32:C7:D6:31:78:0D:4D
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 02F4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number: 02E7
Signing time: Fri 04 Sep 2026 21:37:03 +0000
Manifest this update: Fri 04 Sep 2026 21:37:02 +0000
Manifest next update: Fri 11 Sep 2026 21:37:02 +0000
Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: CpZ6t5Q7aAZu87RySyWWZCKYV7Ly+xsoJvBlbaCznnw=)
2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Validity
Not Before: Sep 4 21:37:02 2026 GMT
Not After : Sep 11 21:37:02 2026 GMT
Subject: CN=6a9b39fe-01ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:88:9b:e4:a9:00:42:20:ed:48:cc:c5:ac:
5b:78:9b:54:66:5e:15:0f:02:15:da:db:a1:02:d8:
e0:54:1f:de:87:10:11:da:9e:49:e6:a9:af:fe:de:
6c:2a:1b:d5:c7:b9:07:ac:15:f5:56:a5:ec:8b:c7:
ff:be:c4:b1:2f:82:ce:d2:b6:0f:65:62:16:e7:f3:
63:82:c2:7a:cf:b8:09:34:17:65:60:d1:51:13:2e:
59:6a:64:4a:b2:76:ae:92:39:9e:cd:d6:d1:d2:5b:
86:25:7e:49:7e:33:55:41:33:a2:d5:d4:9a:de:36:
87:9f:8d:ee:f2:7b:1f:6e:fb:93:21:6f:f1:80:46:
93:73:8c:15:ab:eb:49:ad:9a:e3:6e:db:f5:50:47:
4b:88:32:b3:a0:39:a4:52:48:60:1f:b1:98:d0:0c:
3c:cd:e4:0b:20:0d:67:19:74:ee:1c:c0:c0:32:5a:
c7:67:92:fa:07:b0:1c:61:04:2b:37:68:66:1f:81:
a3:3f:d7:08:e8:89:2a:8a:4f:0d:fa:b1:ae:22:4d:
50:c3:bf:2b:8c:a7:91:72:d3:76:a8:f8:41:73:e3:
30:35:29:44:c6:09:0a:51:4f:29:81:84:55:d4:10:
7e:29:6d:81:50:93:b6:ea:1b:fb:76:94:28:0d:1c:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:D0:25:7C:7A:D3:57:A8:04:75:BC:31:32:C7:D6:31:78:0D:4D
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:0f:07:38:3c:b4:35:bd:34:8b:b2:c2:9f:0a:ed:de:6a:
f0:e1:1a:8d:05:89:5e:30:69:8d:96:1f:c2:3a:b8:df:90:da:
8f:0c:cd:c6:2f:4a:74:bc:bf:82:5a:1c:ad:8a:71:86:a9:e2:
7a:18:ea:f5:4d:91:b8:71:b2:d1:ce:7f:98:4b:fa:56:f2:7b:
ae:a0:14:ca:c7:f9:17:85:ad:bb:02:cc:04:93:fb:35:de:f9:
3e:50:1d:23:27:31:5c:c6:f9:8b:40:98:a7:3a:e7:da:92:29:
4f:54:3a:48:33:f7:e2:02:ac:54:33:48:c5:f7:3b:54:45:58:
ee:89:b4:40:23:32:8f:09:c2:71:96:5c:c6:ae:4e:40:93:e9:
d2:e1:6d:8c:d8:85:d3:f8:72:51:be:c9:cf:86:b7:b8:ec:e5:
58:c7:c5:6a:1f:35:d3:52:01:46:3a:85:c1:f1:48:57:1b:0f:
f4:34:cd:8e:94:40:07:70:1a:a7:03:61:22:c0:64:50:c1:96:
38:ed:9f:18:f4:3b:76:f3:f6:5d:3c:41:48:c1:3b:c3:34:be:
f7:fe:d5:03:e4:75:21:d5:52:72:69:f5:e2:e5:06:f9:92:3c:
79:26:9a:ff:f6:3e:95:70:6f:48:07:e1:f8:34:50:ca:d2:30:
5d:1a:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:03 2026 by rpki-client