
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier: vrS11Ei1PM7s22tuZTSZZkRkyjD01MswdlcmEzMwgpM=
Subject key identifier: 7B:C6:5D:24:D7:5E:88:9A:CE:99:71:52:3B:99:06:CC:72:2F:4C:70
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 030B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number: 02FE
Signing time: Tue 20 Oct 2026 21:49:40 +0000
Manifest this update: Tue 20 Oct 2026 21:49:40 +0000
Manifest next update: Tue 27 Oct 2026 21:49:40 +0000
Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: YMEK8re0bRSe+Dl2NosaR/7lHcaAU+lkFA0r13L5dps=)
2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 21:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Validity
Not Before: Oct 20 21:49:40 2026 GMT
Not After : Oct 27 21:49:40 2026 GMT
Subject: CN=6ad7e1f4-1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:3c:ad:c4:6a:14:9f:36:61:e9:69:89:8f:
49:88:d3:94:e3:17:55:93:a2:ae:38:d5:3c:57:5f:
99:9c:28:a2:61:b7:90:af:2e:8b:0c:b2:21:05:4d:
35:a8:08:d2:0d:17:9b:b1:97:6a:8d:0f:24:fc:3f:
8c:23:3a:40:70:bd:6e:11:ee:4b:81:e1:e1:2e:54:
4a:c9:26:32:9d:3a:a7:5c:ff:68:d5:72:67:4b:f3:
44:11:b4:ca:6b:d9:91:b6:33:f7:eb:e7:ea:ef:e1:
15:b3:10:91:4a:37:f2:9d:12:8c:35:95:c4:9a:b7:
78:08:e0:40:4b:66:68:4a:4b:49:7d:79:76:05:25:
6c:d2:5c:dc:df:d3:f6:c1:27:ea:2a:29:52:b8:af:
21:1e:46:19:f8:52:75:84:19:fb:50:43:2b:87:65:
fb:c5:3e:0a:19:b0:64:4b:31:3f:e7:27:b6:eb:3b:
f3:1b:58:bf:d9:81:da:c4:3c:50:7b:2c:9b:f4:56:
da:66:5f:9f:3e:9a:66:46:3b:d1:1a:9b:c9:97:fe:
7b:21:b6:79:78:9a:66:c2:57:20:cf:df:51:7d:b0:
ab:e0:12:d6:0d:36:ca:73:de:1f:f9:e6:02:25:e2:
61:c6:55:4e:f0:7c:4d:0d:18:ae:92:76:59:17:68:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C6:5D:24:D7:5E:88:9A:CE:99:71:52:3B:99:06:CC:72:2F:4C:70
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:71:7e:8b:86:b6:b7:9a:84:77:50:dd:8c:a7:54:2b:f5:c2:
a2:1a:7f:b9:53:b3:e0:f6:fa:de:e4:5a:41:2a:e8:7e:fc:89:
0c:70:6c:3c:9f:7e:bd:82:c5:2f:54:97:85:d2:7a:7e:78:0d:
f7:64:79:f3:6f:0b:b5:5f:fe:f8:98:aa:f1:ee:02:97:f5:8d:
e0:ec:62:03:ad:91:83:24:d2:cf:31:98:95:3a:ed:c6:7a:f4:
ea:db:a3:9d:58:e5:dc:03:eb:87:1e:34:e8:05:6b:39:2d:b2:
31:f9:87:d7:78:3a:27:7d:30:f0:6d:44:cb:31:0a:3d:d1:e4:
33:83:e7:70:5c:9c:1d:e1:8e:a8:60:81:92:d5:9f:c5:06:a2:
fb:3f:01:78:f0:5a:f3:1c:d6:fc:38:c6:aa:96:5a:ce:28:a7:
82:f6:f7:89:9c:77:ec:7b:04:af:35:ac:21:a8:cc:60:53:df:
ce:dd:fc:45:95:82:ec:8b:9a:3f:38:f7:cf:97:d3:e9:e8:ad:
cd:31:b9:e5:16:83:40:84:11:a2:ba:75:23:f3:07:83:3a:6b:
cf:8e:22:c7:90:dd:e3:7e:b4:b6:a6:7b:da:91:a0:26:35:9f:
11:70:da:ea:92:eb:e0:c4:d9:10:d8:55:3a:b2:d5:20:99:c2:
28:8a:24:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5
OTFDQzQwRkIwHhcNMjYxMDIwMjE0OTQwWhcNMjYxMDI3MjE0OTQwWjAYMRYwFAYD
VQQDEw02YWQ3ZTFmNC0xYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+g8rcRqFJ82YelpiY9JiNOU4xdVk6KuONU8V1+ZnCiiYbeQry6LDLIhBU01
qAjSDRebsZdqjQ8k/D+MIzpAcL1uEe5LgeHhLlRKySYynTqnXP9o1XJnS/NEEbTK
a9mRtjP36+fq7+EVsxCRSjfynRKMNZXEmrd4COBAS2ZoSktJfXl2BSVs0lzc39P2
wSfqKilSuK8hHkYZ+FJ1hBn7UEMrh2X7xT4KGbBkSzE/5ye26zvzG1i/2YHaxDxQ
eyyb9FbaZl+fPppmRjvRGpvJl/57IbZ5eJpmwlcgz99RfbCr4BLWDTbKc94f+eYC
JeJhxlVO8HxNDRiuknZZF2hUxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvGXSTX
XoiazplxUjuZBsxyL0xwMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0
NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a
ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg3F+i4a2t5qEd1DdjKdUK/XCohp/uVOz4Pb63uRaQSrofvyJDHBsPJ9+vYLF
L1SXhdJ6fngN92R5828LtV/++Jiq8e4Cl/WN4OxiA62RgyTSzzGYlTrtxnr06tuj
nVjl3APrhx406AVrOS2yMfmH13g6J30w8G1EyzEKPdHkM4PncFycHeGOqGCBktWf
xQai+z8BePBa8xzW/DjGqpZaziingvb3iZx37HsErzWsIajMYFPfzt38RZWC7Iua
Pzj3z5fT6eitzTG55RaDQIQRorp1I/MHgzprz44ix5Dd4360tqZ72pGgJjWfEXDa
6pLr4MTZENhVOrLVIJnCKIokPQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:55:20 2026 by rpki-client