
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json)
Hash identifier: BjFu5PrpEXJzejTmp96VFkaHL66vK3+BOABNkX5UITE=
Subject key identifier: 67:DC:D9:05:A0:90:49:FB:4C:99:68:DF:2B:88:94:53:8F:A0:FD:29
Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
Manifest number: F5
Signing time: Fri 09 Oct 2026 07:00:27 +0000
Manifest this update: Fri 09 Oct 2026 07:00:27 +0000
Manifest next update: Fri 16 Oct 2026 07:00:27 +0000
Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: Q2HpzDFH8ChEVNHP7mgcoqIgGjz2la7GB1sKMiYArEE=)
2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: keWoR6Hyq0x5/4XbMYXw5aujAnOEsemIs8ZNPQolFKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Validity
Not Before: Oct 9 07:00:27 2026 GMT
Not After : Oct 16 07:00:27 2026 GMT
Subject: CN=6ac8910b-50aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:83:45:1d:d6:15:24:95:60:48:6d:10:af:
3d:4f:b0:f7:80:5c:3b:9b:2c:90:cc:6e:02:2a:f8:
e0:f4:f8:f8:9b:12:9f:de:c6:7d:fd:67:9b:22:0b:
fa:d3:14:db:7f:43:53:9c:f2:36:1c:68:b6:7a:a9:
c6:a0:00:1a:c9:80:3e:d1:56:d1:3f:6f:7f:7c:fa:
27:03:cd:bf:56:a4:b9:4c:36:b3:d5:52:a6:93:3a:
96:a1:30:97:60:81:b1:c0:d1:3b:af:22:15:2a:81:
80:13:7f:49:0e:60:3b:83:db:63:72:eb:39:23:e6:
1a:32:28:c9:86:6f:48:ed:be:10:ca:3f:33:64:1e:
84:68:fc:d0:bf:7b:89:94:ba:9a:b3:ef:14:24:9f:
8f:a9:db:fe:ca:02:ca:52:36:91:60:f9:60:1e:9c:
39:a9:a6:52:d6:ff:0a:dc:e0:e1:be:77:e4:d4:7a:
e3:0c:81:13:77:23:5f:6e:7a:90:c6:99:ab:06:4c:
a1:7d:6a:19:ab:e6:53:90:df:25:27:9b:70:64:da:
34:d5:81:56:14:8f:d0:e1:f1:db:cb:46:2b:c9:12:
b2:4b:df:f8:c2:79:87:f1:cf:55:12:e1:47:e5:99:
19:cd:50:81:03:98:80:4e:42:f0:d7:a7:5b:09:05:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DC:D9:05:A0:90:49:FB:4C:99:68:DF:2B:88:94:53:8F:A0:FD:29
X509v3 Authority Key Identifier:
keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e1:dd:f4:f4:ef:51:d6:6c:c4:a6:30:46:f7:5f:bc:9c:88:
06:54:2e:e9:bc:ee:18:f4:28:ae:49:50:df:21:6e:c9:7e:49:
09:84:5d:0e:6a:dd:c8:4f:3e:c9:51:ca:b3:7b:90:d9:54:44:
33:00:d1:ab:a5:de:66:ef:09:ee:61:5e:7b:bb:a5:be:a6:25:
8d:62:ce:29:47:89:92:ec:d2:18:64:61:8d:ac:38:45:99:fd:
01:01:2b:05:4c:9c:0a:7a:47:df:af:60:19:cb:14:d3:f4:4a:
3e:71:c0:a8:e5:2c:30:ad:5a:8a:b2:e7:62:a1:e2:51:07:8f:
46:a6:81:81:64:bb:14:bc:f5:70:71:e2:47:93:85:13:4f:83:
8d:ee:32:76:44:ac:de:30:59:fe:ac:b9:5e:e2:b0:be:e0:e9:
bf:a5:4d:c8:52:13:27:a4:3e:5a:fb:c9:16:7e:de:aa:71:28:
15:e9:3d:34:71:6a:96:3b:d9:88:f6:37:a4:ff:44:2f:7a:ed:
17:d6:13:84:6f:b2:f2:c4:63:21:47:e8:d6:b6:25:ac:9f:d9:
fb:55:fb:f0:fc:e1:72:73:f0:e7:80:7b:e5:a4:1a:89:92:e7:
e8:f9:31:de:5f:db:b3:b0:f0:d9:a2:5c:41:47:51:25:1e:12:
44:72:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:02:06 2026 by rpki-client