
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
File: QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json)
Hash identifier: 9j1kiKcX4D8y4Vq9wKx39jx/jsLoVn+ew2LAqjsZaL8=
Subject key identifier: 26:48:42:27:F0:F8:8B:42:4D:25:31:6A:64:78:8A:27:12:0B:50:BF
Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Certificate serial: 10C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
Manifest number: 27CA
Signing time: Fri 04 Sep 2026 16:35:16 +0000
Manifest this update: Fri 04 Sep 2026 16:35:15 +0000
Manifest next update: Fri 11 Sep 2026 16:35:15 +0000
Files and hashes: 1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: BTKdkuGwFgh16bYxr1sdFRp4aBwCtEnr4bMRklqBHfg=)
2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: 9GKBxAqwPTAO+hWMiV5oav3VDxVKz2FMAbeDwl8q3ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl
rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4291 (0x10c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Validity
Not Before: Sep 4 16:35:15 2026 GMT
Not After : Sep 11 16:35:15 2026 GMT
Subject: CN=6a9af343-00cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:54:cf:59:16:2a:db:53:29:98:56:43:01:
ec:81:b5:35:46:19:51:2b:79:85:b3:7b:6a:0c:fa:
ed:62:c7:6b:03:94:95:ea:89:f6:9f:ea:9c:9a:d8:
76:fd:34:20:77:04:94:fb:86:bb:15:a9:f5:93:d7:
a6:8b:0f:c9:7b:7b:47:3f:e2:94:ca:ea:91:22:ff:
2b:ae:33:d5:95:e7:c3:7a:80:59:37:b2:c8:a8:2e:
30:a5:ec:b9:2e:5f:89:93:65:5b:50:d7:dd:dc:29:
7f:51:81:76:77:4f:40:53:3d:a9:84:d7:ca:39:15:
41:a7:93:8c:e3:9b:49:78:24:9d:8d:07:7f:eb:69:
50:ce:25:cf:79:8f:0b:63:78:7e:22:80:62:9e:8d:
18:34:aa:80:e5:64:3d:ea:11:b2:e8:23:7f:43:70:
80:67:c4:37:ec:2c:d8:d0:60:e4:0e:a7:4b:24:72:
c7:23:2f:bf:98:be:99:ec:20:e4:55:50:47:48:06:
0f:75:ad:a1:ab:ab:86:9b:4f:88:ca:0b:57:c1:aa:
d8:c2:35:f2:f8:da:8c:7f:5c:1b:56:18:c7:ba:bb:
24:a8:e8:f4:ee:71:94:65:f3:dc:91:67:44:a8:e1:
05:4d:c1:18:e6:4c:5c:4d:90:da:d6:14:4e:16:95:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:48:42:27:F0:F8:8B:42:4D:25:31:6A:64:78:8A:27:12:0B:50:BF
X509v3 Authority Key Identifier:
keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:60:df:af:03:e4:67:96:31:b8:a3:64:84:c1:e4:c8:54:b6:
d2:7e:c7:b9:e7:2a:9c:ad:76:d7:1b:4e:3e:90:cf:66:d5:9a:
28:dc:24:03:61:0d:80:a8:b8:e6:8a:29:4f:f3:4a:44:2e:e0:
e0:b4:ff:5e:e5:b2:8c:06:c4:d9:2b:85:56:d4:69:1e:e7:28:
ec:66:12:03:03:d2:56:64:05:fd:25:5c:fe:23:cf:95:e1:8f:
6f:0d:3a:06:f1:d7:e4:e6:65:e0:2e:f8:e3:dd:f1:7b:65:83:
4a:2c:8d:33:0f:b9:bd:3b:eb:a8:f6:77:f9:26:8a:51:5b:b0:
b0:e1:5e:f9:f0:38:ea:c7:15:51:69:21:9e:a6:39:70:9f:a1:
17:9c:5a:24:5a:52:8f:c9:a0:34:90:e9:cf:ac:77:f1:ac:06:
36:04:ab:f8:bc:1f:ea:27:db:97:ab:fc:0f:4f:20:0c:71:6e:
c1:20:01:e7:8d:44:bc:2e:49:4e:f8:54:81:45:72:ec:92:ae:
35:48:b4:54:c7:80:20:23:6d:cb:45:f3:02:0f:c7:f1:53:cf:
58:ab:be:74:2e:18:e7:b7:c1:e5:dd:e4:bd:77:95:c4:73:c2:
b8:51:9b:75:14:b1:7a:2a:a2:7f:46:20:48:eb:f9:da:cb:9a:
77:52:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:17:14 2026 by rpki-client