
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier: KWZCery9Dm9OcxQlN/cA9vvAcIlTJG9kWD+PMCcQGjk=
Subject key identifier: AA:6B:C5:9D:30:3F:BD:97:A1:2F:43:99:96:20:21:39:F9:EB:B4:B4
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial: 0715
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number: 0715
Signing time: Fri 16 Oct 2026 22:19:37 +0000
Manifest this update: Fri 16 Oct 2026 22:19:37 +0000
Manifest next update: Fri 23 Oct 2026 22:19:37 +0000
Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: OwYA94ib+RX2aDpo0n8DFdtaMX4DX38aUglC9TFMtxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 22:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Validity
Not Before: Oct 16 22:19:37 2026 GMT
Not After : Oct 23 22:19:37 2026 GMT
Subject: CN=6ad2a2f9-6669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:28:e3:f4:d3:7c:2a:11:a1:6c:02:f9:5d:
55:63:77:5e:64:92:a1:f2:7d:cf:24:22:06:f3:6b:
19:f1:92:52:6d:d2:86:48:25:06:93:53:c2:b3:9a:
2c:0b:e3:47:8f:bd:dd:43:24:2e:a1:4d:40:3e:d3:
60:f1:4f:d2:63:c1:d7:f8:d1:93:6f:34:94:8a:f8:
ca:7c:5d:fb:fb:10:fe:d7:3d:6f:50:a5:52:b7:b9:
01:e8:38:bb:f7:8c:f5:43:11:f4:9f:64:c0:8e:ca:
d9:45:47:74:18:ef:12:a1:76:ba:bb:86:61:fc:75:
23:15:25:61:99:36:72:e1:6d:7a:d8:1a:14:c5:55:
b0:4a:a5:01:0c:b7:51:03:30:20:08:94:c3:98:d3:
04:9d:be:3e:02:59:d5:f4:03:f1:61:f3:7a:36:bb:
7a:16:c9:6a:aa:c9:ff:39:f1:9e:d1:b8:bd:01:92:
29:f0:92:e5:17:4e:45:da:96:08:c7:93:09:e9:5a:
fd:22:a7:05:96:83:a7:ff:0b:89:83:82:86:ab:a0:
99:35:f9:1c:0d:c5:3a:c6:d7:8e:7b:ab:03:04:bf:
07:d3:99:18:44:32:da:59:dd:89:69:0e:9a:7f:b2:
f7:68:b2:a9:a1:bb:78:d2:4c:87:42:f9:40:f8:b2:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6B:C5:9D:30:3F:BD:97:A1:2F:43:99:96:20:21:39:F9:EB:B4:B4
X509v3 Authority Key Identifier:
keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c2:e5:17:29:cf:43:cf:f5:f8:a4:17:82:cb:1b:e0:07:c0:
37:80:6b:c8:25:4f:6f:3c:49:cf:8c:2b:ba:1c:e7:de:4d:42:
19:0f:54:64:25:5c:ac:ae:37:3c:ce:c5:4f:a7:de:95:35:8b:
bb:7b:00:c0:c9:6a:14:9c:d6:16:e5:6d:ee:89:38:b4:10:a4:
9f:7d:01:51:91:87:d5:ad:df:23:eb:5d:a8:22:8b:3c:20:c2:
e7:1b:52:3d:0a:e4:01:0b:01:b2:77:86:76:3e:f8:c6:fe:d6:
15:54:18:cc:b5:9c:5a:21:50:3d:53:4e:26:b2:b8:26:85:8a:
0f:43:f3:0b:f3:92:be:e9:07:58:9c:73:6d:fb:6b:f3:7b:eb:
0d:13:f1:52:27:76:34:20:8c:67:39:6a:51:f1:e9:8b:8b:a6:
72:47:03:86:f1:17:c1:24:f5:26:5f:3b:01:89:fe:93:0e:15:
4c:36:b7:03:fe:17:b2:35:7b:d0:47:e5:94:44:f6:f9:f3:5e:
e2:b1:04:01:09:e0:f4:be:ed:1c:43:d7:0d:f0:27:ba:bd:d6:
7a:d2:5e:30:cc:7f:53:4c:ab:5f:3e:39:5f:07:4e:3e:79:88:
25:bd:0d:d0:76:32:fb:c2:e0:22:e7:1e:e4:36:03:e0:e5:0e:
0f:24:84:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 22:47:49 2026 by rpki-client