
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184F31/F9FC783A953C11F1B390147D5D11F970/qJyItGQWCOoGs-LZUcB3WXxsFjU.mft
File: qJyItGQWCOoGs-LZUcB3WXxsFjU.mft (raw, json)
Hash identifier: IPiO/TlAdcrsHxE8DWdIe9jgG3EDHhuCR5WXeAxEZf8=
Subject key identifier: 98:B9:A5:DA:9D:3F:A6:E6:09:52:4A:59:F0:1A:8F:77:C3:DA:93:EC
Authority key identifier: A8:9C:88:B4:64:16:08:EA:06:B3:E2:D9:51:C0:77:59:7C:6C:16:35
Certificate issuer: /CN=A9184F31/serialNumber=A89C88B4641608EA06B3E2D951C077597C6C1635
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJyItGQWCOoGs-LZUcB3WXxsFjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184F31/F9FC783A953C11F1B390147D5D11F970/qJyItGQWCOoGs-LZUcB3WXxsFjU.mft
Manifest number: 21
Signing time: Fri 09 Oct 2026 09:41:01 +0000
Manifest this update: Fri 09 Oct 2026 09:41:00 +0000
Manifest next update: Fri 16 Oct 2026 09:41:00 +0000
Files and hashes: 1: qJyItGQWCOoGs-LZUcB3WXxsFjU.crl (hash: XKDlq/AjIFymp4fdf57QyVAbp5D/RRkAa0pm+n4Cbyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184F31/F9FC783A953C11F1B390147D5D11F970/qJyItGQWCOoGs-LZUcB3WXxsFjU.crl
rsync://rpki.apnic.net/member_repository/A9184F31/F9FC783A953C11F1B390147D5D11F970/qJyItGQWCOoGs-LZUcB3WXxsFjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJyItGQWCOoGs-LZUcB3WXxsFjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184F31, serialNumber=A89C88B4641608EA06B3E2D951C077597C6C1635
Validity
Not Before: Oct 9 09:41:00 2026 GMT
Not After : Oct 16 09:41:00 2026 GMT
Subject: CN=6ac8b6ad-3c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:28:cc:12:5b:f9:d3:bf:de:d4:42:aa:aa:
1d:07:31:aa:d3:8a:00:10:c3:d1:79:e6:67:45:8d:
57:36:4b:27:45:b8:98:98:44:f0:52:3b:5e:aa:0b:
fc:9d:8e:cd:c4:2f:24:21:8c:9d:ae:14:57:78:41:
ce:df:4b:8c:9e:10:e6:54:1d:f2:4c:35:d3:02:bd:
c5:36:63:50:30:b8:d7:72:fc:0b:d5:e8:28:66:f6:
de:ff:1d:1d:6b:4b:2b:5f:81:e5:81:a9:91:52:07:
24:b4:b2:9d:11:ce:be:62:9b:af:da:57:6e:02:a1:
03:58:f4:63:19:f8:ff:1e:9d:43:5d:ca:f6:23:1e:
fd:76:d7:2e:64:a2:93:8b:a1:bc:0b:a5:0b:42:05:
9b:b4:ed:bf:86:24:35:52:8b:14:6e:56:30:ed:f1:
ca:10:27:6a:18:6b:68:f7:7a:e5:b5:4f:05:d6:10:
96:28:e9:21:cd:3e:15:21:53:7d:de:06:8f:be:c6:
97:7c:6c:ac:5f:ce:19:bd:ec:b4:ca:ad:c7:93:b7:
9b:7b:8b:82:c8:1a:ba:b4:8f:5b:86:85:70:5e:f7:
1b:37:4a:38:b3:eb:73:1d:3c:b9:2d:c5:f5:14:6a:
3a:81:4d:62:bc:6c:0c:79:f3:f7:50:c0:c9:16:2c:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B9:A5:DA:9D:3F:A6:E6:09:52:4A:59:F0:1A:8F:77:C3:DA:93:EC
X509v3 Authority Key Identifier:
keyid:A8:9C:88:B4:64:16:08:EA:06:B3:E2:D9:51:C0:77:59:7C:6C:16:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184F31/F9FC783A953C11F1B390147D5D11F970/qJyItGQWCOoGs-LZUcB3WXxsFjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJyItGQWCOoGs-LZUcB3WXxsFjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F31/F9FC783A953C11F1B390147D5D11F970/qJyItGQWCOoGs-LZUcB3WXxsFjU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:90:95:e0:78:e5:e5:bb:05:98:d2:0d:1d:ec:d9:a1:3d:73:
73:e7:6a:e5:c3:0c:30:31:58:32:78:51:fd:68:15:91:e1:28:
d3:0f:9d:f8:5c:dc:24:a7:a0:a0:95:ad:0c:3b:76:83:61:ea:
b6:46:63:0d:fc:f5:ca:a1:d0:ad:b7:5a:22:52:a4:97:ae:b2:
12:d3:79:49:a7:e1:be:5a:10:ac:04:e1:b0:1b:47:c3:a8:3f:
4a:2b:ae:00:45:37:78:ee:5b:08:4d:b8:fc:5b:9f:cd:58:60:
b9:d0:c5:20:3e:0c:60:2d:bf:dd:42:7b:16:32:f7:b6:58:0f:
86:82:88:b4:25:9a:2a:4f:b1:e4:4e:fd:57:52:4f:8d:a6:51:
08:d5:86:fe:51:30:2d:9d:e4:de:49:64:3e:77:66:7c:7d:5a:
b3:a1:34:f9:31:38:ca:e3:48:31:32:93:98:44:69:52:5a:65:
59:f3:8c:e2:31:88:9a:c2:f3:dd:30:7a:51:bf:c2:2a:66:d8:
0a:f7:11:d0:c9:7c:54:79:f8:5d:fe:20:ad:86:0d:85:45:bf:
4a:2f:a6:6e:12:50:f6:33:19:dd:08:39:ca:6d:71:3a:ea:cf:
16:09:95:ff:23:05:75:b6:7e:ce:b7:96:08:5e:4b:e6:de:4e:
74:67:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:04:27 2026 by rpki-client