
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier: lBsf5Isb/E00a10y3TCzejqVQ0uGGHOdlfDdB1dRUW8=
Subject key identifier: A5:C1:F3:47:AF:B2:4E:0B:43:0F:56:E4:53:91:28:ED:DB:FE:6B:AF
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial: 0BD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number: 0BC5
Signing time: Sun 04 Oct 2026 19:06:54 +0000
Manifest this update: Sun 04 Oct 2026 19:06:54 +0000
Manifest next update: Sun 11 Oct 2026 19:06:54 +0000
Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: 80UHwV4YBwtBu70s7RewReMxuobYCHsl8AmQTwq+Ov4=)
2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Validity
Not Before: Oct 4 19:06:54 2026 GMT
Not After : Oct 11 19:06:54 2026 GMT
Subject: CN=6ac2a3ce-a5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:1b:d4:c4:9f:9a:1c:ea:26:87:18:38:cc:
a4:04:8f:89:d4:d3:dc:08:cd:f5:2d:95:6f:82:bb:
16:ea:1a:83:7a:df:6e:fb:8a:c6:5d:91:45:79:da:
a6:23:46:59:a6:4b:3a:54:d8:3f:80:a8:61:ee:2d:
df:85:d1:b4:d4:19:69:b7:49:73:d0:59:c1:38:fc:
69:49:32:a5:36:a6:10:78:0c:d6:03:76:2f:b5:a8:
c8:d6:cd:96:14:ad:b2:df:5c:96:92:ae:da:3e:dd:
76:57:46:bf:38:fd:43:3b:3f:8e:04:c4:35:2c:c8:
d0:a0:94:03:05:c0:5a:09:3f:f3:04:47:1f:27:9c:
7c:75:b4:f3:1c:5b:0b:26:23:b8:c2:e4:63:6d:43:
3c:36:93:81:0f:52:6e:07:14:0a:3c:c0:af:f1:02:
29:a5:6c:bc:ae:e4:c9:6f:6d:ba:b2:29:83:a3:38:
f8:d5:40:5b:29:6a:98:64:5e:f5:b0:c5:86:96:e7:
a3:31:91:d0:b8:be:a5:ef:69:c7:36:cb:3f:15:3f:
ca:ab:0c:01:69:97:6f:05:fe:37:fd:a3:81:1b:fa:
ae:00:97:ff:1f:2f:c0:b4:6d:6d:89:fa:97:fd:65:
0b:ec:37:70:a2:31:77:d1:69:4f:53:15:31:b9:16:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:F3:47:AF:B2:4E:0B:43:0F:56:E4:53:91:28:ED:DB:FE:6B:AF
X509v3 Authority Key Identifier:
keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:e4:3f:4b:f7:40:3a:7f:af:81:68:8d:64:e2:88:81:f4:6a:
f1:4e:c6:74:c3:fb:39:8b:50:d4:3f:d1:84:e9:55:63:75:d5:
8c:1f:eb:08:49:52:e5:fd:2f:e6:96:b2:6b:6d:0d:1a:69:1a:
74:d4:17:ab:b5:74:22:24:6e:9d:69:6a:f7:1d:3f:73:f1:a6:
e4:8d:3f:30:53:58:19:4f:22:aa:96:2c:a9:1b:d5:f8:da:ae:
2d:38:07:d1:83:c5:a7:36:48:75:93:62:24:c1:e3:fd:14:8d:
68:49:c2:b8:30:ae:d3:43:93:4b:21:17:1a:9b:4d:14:43:38:
cd:d6:7a:2b:e5:30:1b:78:b0:54:01:e5:54:a5:98:86:40:10:
45:a3:bb:ce:c9:8a:11:ca:8f:ae:ea:50:d2:b5:d5:0a:c8:6c:
d7:38:e1:fe:09:10:90:bb:4a:e7:18:34:4a:d9:9f:8a:28:65:
f9:f8:9c:6b:ef:4c:3e:94:1b:25:5d:51:3a:e0:ec:4a:68:66:
f6:c3:c8:1a:59:91:13:7c:fd:87:c6:5a:26:ca:90:13:7a:68:
b9:03:5e:2a:07:42:90:f8:3a:05:f8:d8:a8:0a:1e:49:20:5e:
09:9c:87:92:45:7b:3a:9b:ac:9a:88:07:e5:0f:c1:b4:0c:27:
ab:ff:94:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE
Q0E5ODQwOEUwHhcNMjYxMDA0MTkwNjU0WhcNMjYxMDExMTkwNjU0WjAYMRYwFAYD
VQQDEw02YWMyYTNjZS1hNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmJkb1MSfmhzqJocYOMykBI+J1NPcCM31LZVvgrsW6hqDet9u+4rGXZFFedqm
I0ZZpks6VNg/gKhh7i3fhdG01Blpt0lz0FnBOPxpSTKlNqYQeAzWA3YvtajI1s2W
FK2y31yWkq7aPt12V0a/OP1DOz+OBMQ1LMjQoJQDBcBaCT/zBEcfJ5x8dbTzHFsL
JiO4wuRjbUM8NpOBD1JuBxQKPMCv8QIppWy8ruTJb226simDozj41UBbKWqYZF71
sMWGluejMZHQuL6l72nHNss/FT/KqwwBaZdvBf43/aOBG/quAJf/Hy/AtG1tifqX
/WUL7DdwojF30WlPUxUxuRZrYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXB80ev
sk4LQw9W5FORKO3b/muvMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy
REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJG
djFGSWhoVkctal9jcVlRSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASOQ/S/dAOn+vgWiNZOKIgfRq8U7GdMP7OYtQ1D/RhOlVY3XVjB/rCElS5f0v
5paya20NGmkadNQXq7V0IiRunWlq9x0/c/Gm5I0/MFNYGU8iqpYsqRvV+NquLTgH
0YPFpzZIdZNiJMHj/RSNaEnCuDCu00OTSyEXGptNFEM4zdZ6K+UwG3iwVAHlVKWY
hkAQRaO7zsmKEcqPrupQ0rXVCshs1zjh/gkQkLtK5xg0Stmfiihl+fica+9MPpQb
JV1ROuDsSmhm9sPIGlmRE3z9h8ZaJsqQE3pouQNeKgdCkPg6BfjYqAoeSSBeCZyH
kkV7OpusmogH5Q/BtAwnq/+UlA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 09:23:44 2026 by rpki-client