
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
File: QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json)
Hash identifier: fWe6ouA0RzkgeOMJEtX4QPQN07W+2XdOVmOKMzC0vOI=
Subject key identifier: 3F:62:B1:66:F8:88:54:B0:DE:E7:48:F4:48:52:40:C7:77:AA:5C:44
Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
Manifest number: 0163
Signing time: Mon 05 Oct 2026 05:25:35 +0000
Manifest this update: Mon 05 Oct 2026 05:25:35 +0000
Manifest next update: Mon 12 Oct 2026 05:25:35 +0000
Files and hashes: 1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: PaTuRtA+lnKJP2MY3Z6Ih12jM1W+9zTiqfpx99Cr8pA=)
2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: nWtabR7nOhGufvq+gkx3bXJFQRRyMbogt12nPEsCiOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Validity
Not Before: Oct 5 05:25:35 2026 GMT
Not After : Oct 12 05:25:35 2026 GMT
Subject: CN=6ac334cf-541d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:97:86:80:61:ae:c3:8a:e2:42:ee:75:8f:
55:bf:2f:24:18:b7:7c:77:44:3b:7c:73:b7:f5:7d:
09:8a:63:81:c6:69:70:87:51:48:ba:39:fd:d5:92:
85:1b:c0:b0:8d:81:5b:cb:84:2e:d4:b3:b8:97:ac:
fa:42:35:43:08:32:52:c4:22:27:e8:2e:3a:8e:4c:
1d:ef:d8:8e:7a:be:3f:e1:27:60:37:f7:ee:aa:d0:
a1:01:8d:bb:86:16:9f:63:8a:5a:c6:cc:a1:0c:19:
08:4c:16:af:49:f5:0a:c6:9b:54:11:ef:c0:5a:21:
fa:3c:35:e5:e8:d3:80:10:3a:25:3e:8b:e0:36:3f:
9a:87:18:0c:b1:ec:aa:f5:95:5a:0a:f1:f1:5b:f5:
a4:03:cf:fd:6c:9f:d0:89:a5:86:c0:62:d4:be:d6:
ce:70:11:95:c3:01:c8:30:bb:bb:39:cb:52:a5:00:
cb:dc:e7:00:ca:c6:72:f1:47:3a:c4:95:e9:00:ce:
7f:2a:75:28:56:23:fd:98:a6:ba:8d:9f:3f:e8:5b:
a5:69:c9:2b:02:34:53:f9:dd:99:28:08:d1:33:4b:
b5:1c:aa:e6:ec:62:09:9e:97:bb:14:d4:dd:f2:14:
ae:28:b8:1c:49:7a:11:6b:30:68:1f:26:79:aa:67:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:62:B1:66:F8:88:54:B0:DE:E7:48:F4:48:52:40:C7:77:AA:5C:44
X509v3 Authority Key Identifier:
keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:11:9e:48:76:5a:0d:59:6e:3a:e5:d4:bb:66:ed:6d:55:2b:
cc:25:59:95:4d:ba:27:49:a6:99:12:18:4c:5e:8f:06:d2:2e:
40:42:aa:af:bb:ff:0a:fa:b5:d0:5b:fd:64:71:3f:6e:cf:a5:
81:84:28:1c:07:3a:c0:15:64:b8:7d:f4:05:23:58:ca:e6:26:
b5:f0:06:10:3a:b2:e1:f8:ea:12:e1:de:de:b2:38:8d:dc:11:
fa:24:0d:78:45:e6:06:bc:ae:02:33:89:ef:e1:92:db:72:aa:
80:55:39:f5:db:fd:b5:df:94:bd:a5:0c:64:5a:93:fa:ed:77:
71:02:39:6c:b3:54:cb:0e:21:84:7d:84:42:22:79:88:18:a1:
02:ab:db:11:40:ff:4a:e4:2c:f4:74:69:ee:db:aa:06:f2:3a:
f4:a0:d0:d0:1b:d4:8f:a7:07:ba:f8:1f:1a:d6:50:7c:e7:fd:
2c:c5:43:ec:b0:48:80:b8:c4:2b:a7:c0:10:89:c5:80:20:32:
1e:a2:e2:b8:2f:ec:e2:99:c2:3e:6b:81:ee:35:48:79:cd:8c:
5b:b0:f8:52:ab:56:6f:61:d5:97:a0:e7:17:bb:20:72:d3:ed:
92:2c:0f:50:08:cc:42:0c:ac:bd:f5:b6:f5:c2:65:b6:60:99:
99:cf:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:41:26 2026 by rpki-client