
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
File: qG2L-RW00uHRHYfsP2pwVPETKeg.mft (raw, json)
Hash identifier: BzsNVYgDS5bWuG4IGS//6S2FSpHU4f2qy56BK557nXY=
Subject key identifier: EA:F9:59:4F:2D:E8:B6:F2:9E:A3:23:96:AA:9F:64:27:84:52:AC:94
Authority key identifier: A8:6D:8B:F9:15:B4:D2:E1:D1:1D:87:EC:3F:6A:70:54:F1:13:29:E8
Certificate issuer: /CN=A918C553/serialNumber=A86D8BF915B4D2E1D11D87EC3F6A7054F11329E8
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
Manifest number: 4A
Signing time: Sat 03 Oct 2026 09:07:10 +0000
Manifest this update: Sat 03 Oct 2026 09:07:09 +0000
Manifest next update: Sat 10 Oct 2026 09:07:09 +0000
Files and hashes: 1: qG2L-RW00uHRHYfsP2pwVPETKeg.crl (hash: +bs7zvyv93+dy93PSPikTiwZRt+E5EeJaWG5+7u6rr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.crl
rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C553, serialNumber=A86D8BF915B4D2E1D11D87EC3F6A7054F11329E8
Validity
Not Before: Oct 3 09:07:09 2026 GMT
Not After : Oct 10 09:07:09 2026 GMT
Subject: CN=6ac0c5be-b77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:e8:87:88:f9:55:d0:35:45:cf:21:6c:58:
9f:09:ad:be:05:76:2d:07:9d:c6:51:72:1f:a0:bd:
f2:0c:07:96:9b:7f:31:67:61:7a:c2:21:b0:7d:9e:
a5:f2:63:2c:c4:9b:d0:9c:cf:24:1b:92:9c:98:47:
28:c6:64:33:51:a5:ce:19:06:07:4a:d8:0f:17:93:
c9:f0:45:e9:e7:88:41:92:59:b4:0b:1d:38:1e:1a:
83:62:0e:b5:8e:13:e9:96:c3:13:4c:c4:d9:09:77:
e5:84:eb:00:02:87:22:2c:19:94:88:aa:2b:7e:61:
a5:e0:b9:69:4b:df:cc:fd:09:19:db:0c:81:d4:0d:
85:be:07:84:d4:94:3f:39:65:04:97:6b:3c:b6:3c:
83:84:8b:2c:a8:d8:d1:c8:48:21:4e:c1:bd:8d:f4:
1a:75:85:70:a6:27:88:00:56:00:28:aa:27:2a:36:
fd:e1:c6:46:87:05:93:04:dd:05:fb:b8:ef:da:a9:
cd:b3:55:48:ce:c9:b4:ef:07:9f:bf:e8:df:2a:0c:
6a:9c:e4:c4:b1:dd:ec:87:55:fa:e9:85:e1:c5:a0:
99:06:c5:89:32:e4:6e:13:f5:23:12:d0:7d:e6:be:
b6:ea:cf:03:d9:f2:85:a8:91:bf:14:04:bf:aa:96:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:59:4F:2D:E8:B6:F2:9E:A3:23:96:AA:9F:64:27:84:52:AC:94
X509v3 Authority Key Identifier:
keyid:A8:6D:8B:F9:15:B4:D2:E1:D1:1D:87:EC:3F:6A:70:54:F1:13:29:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7f:c3:07:de:01:78:8f:8d:5d:e6:e5:ae:73:9d:7b:cb:9b:
2c:20:c4:2f:77:be:f6:e4:e6:d1:40:b9:88:41:0a:cc:75:68:
91:7d:98:c7:b1:1f:9c:15:b1:30:00:e8:ee:5c:79:95:5b:2f:
53:77:5f:ed:8e:95:1d:12:a8:a2:84:3a:90:52:87:03:0e:8e:
18:16:c2:64:81:84:33:59:86:7f:45:cf:ed:23:e6:68:ca:d0:
9d:3d:8e:04:7e:e2:17:ed:97:0d:d7:c8:42:f0:d9:57:21:bc:
b8:4f:17:e1:40:56:7e:14:8d:4a:c8:79:29:7d:42:e4:a1:25:
a2:c3:68:a0:d2:cc:f5:a8:d9:b6:cd:cb:02:77:96:ad:c3:56:
f9:38:15:63:e6:66:4e:9a:09:cc:d6:6b:b3:6a:9b:06:04:b0:
38:01:5d:73:cb:bb:9d:62:e1:43:5b:cf:65:a8:0a:f9:08:36:
14:65:24:5f:ef:2f:d4:6d:d2:60:1f:ad:d2:14:41:a5:a6:cb:
7a:8e:a9:af:34:77:84:a5:b9:55:9a:0e:d4:a2:48:a6:08:e9:
f1:33:a1:cc:b3:ff:68:a5:1e:75:86:47:0f:bd:01:8c:06:73:
06:be:a2:de:0e:61:bd:92:fd:b6:f5:65:c9:50:76:5f:db:fa:
99:d6:e5:d9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QzU1MzExMC8GA1UEBRMoQTg2RDhCRjkxNUI0RDJFMUQxMUQ4N0VDM0Y2QTcwNTRG
MTEzMjlFODAeFw0yNjEwMDMwOTA3MDlaFw0yNjEwMTAwOTA3MDlaMBgxFjAUBgNV
BAMTDTZhYzBjNWJlLWI3N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEU+iHiPlV0DVFzyFsWJ8Jrb4Fdi0HncZRch+gvfIMB5abfzFnYXrCIbB9nqXy
YyzEm9CczyQbkpyYRyjGZDNRpc4ZBgdK2A8Xk8nwRenniEGSWbQLHTgeGoNiDrWO
E+mWwxNMxNkJd+WE6wAChyIsGZSIqit+YaXguWlL38z9CRnbDIHUDYW+B4TUlD85
ZQSXazy2PIOEiyyo2NHISCFOwb2N9Bp1hXCmJ4gAVgAoqicqNv3hxkaHBZME3QX7
uO/aqc2zVUjOybTvB5+/6N8qDGqc5MSx3eyHVfrpheHFoJkGxYky5G4T9SMS0H3m
vrbqzwPZ8oWokb8UBL+qlsInAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6vlZTy3o
tvKeoyOWqp9kJ4RSrJQwHwYDVR0jBBgwFoAUqG2L+RW00uHRHYfsP2pwVPETKegw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDNTUzLzA5NkM4NTRBNEQ1
QzExRjFBMUNFN0E4ODhGODMzNzczL3FHMkwtUlcwMHVIUkhZZnNQMnB3VlBFVEtl
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcUcyTC1SVzAwdUhSSFlmc1AycHdWUEVUS2VnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD
NTUzLzA5NkM4NTRBNEQ1QzExRjFBMUNFN0E4ODhGODMzNzczL3FHMkwtUlcwMHVI
UkhZZnNQMnB3VlBFVEtlZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCcf8MH3gF4j41d5uWuc517y5ssIMQvd7725ObRQLmIQQrMdWiRfZjHsR+cFbEw
AOjuXHmVWy9Td1/tjpUdEqiihDqQUocDDo4YFsJkgYQzWYZ/Rc/tI+ZoytCdPY4E
fuIX7ZcN18hC8NlXIby4TxfhQFZ+FI1KyHkpfULkoSWiw2ig0sz1qNm2zcsCd5at
w1b5OBVj5mZOmgnM1muzapsGBLA4AV1zy7udYuFDW89lqAr5CDYUZSRf7y/UbdJg
H63SFEGlpst6jqmvNHeEpblVmg7UokimCOnxM6HMs/9opR51hkcPvQGMBnMGvqLe
DmG9kv229WXJUHZf2/qZ1uXZ
-----END CERTIFICATE-----
Generated at Sun Oct 4 05:14:42 2026 by rpki-client