
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
File: QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json)
Hash identifier: O7bmMPHwUJ+85s1gqfIiSMI25u934B7SZhDyKQDaAu8=
Subject key identifier: E7:D8:5B:71:1C:D2:E2:0D:12:25:71:28:51:9A:4E:83:2F:D7:75:09
Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91
Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
Certificate serial: 02B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
Manifest number: 02A4
Signing time: Fri 09 Oct 2026 02:07:24 +0000
Manifest this update: Fri 09 Oct 2026 02:07:23 +0000
Manifest next update: Fri 16 Oct 2026 02:07:23 +0000
Files and hashes: 1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: GcTO9fdNm4zC7fG28A2YY5C7/8UNNEBWYLryTio+C+I=)
2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: Npd9+EHg9XI4cl1l6D0ZgMpdcY/O0nRsCsXvd0isrHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl
rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
Validity
Not Before: Oct 9 02:07:23 2026 GMT
Not After : Oct 16 02:07:23 2026 GMT
Subject: CN=6ac84c5c-4e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:18:15:82:ca:1b:c5:72:24:1b:bb:91:a2:
e3:0a:02:51:41:d1:f2:06:45:5b:b7:9e:95:25:58:
47:b2:8c:63:0f:47:78:78:b1:50:30:65:a5:4d:6c:
dd:d8:c2:01:9a:f6:61:c8:41:54:23:93:96:8e:cd:
6a:93:83:ca:9d:41:d9:61:8c:23:3b:8b:58:b7:94:
4a:dd:46:20:53:1b:a0:24:ae:07:6e:fc:66:11:7d:
02:40:39:d9:06:89:43:43:5f:62:2c:fa:59:0a:a5:
8a:a3:74:32:72:cd:a5:87:cd:d8:34:7a:49:a1:98:
01:cb:f9:0f:b1:be:5e:68:54:7f:f8:3c:6b:17:1a:
66:67:9a:8f:45:1f:67:e2:d4:07:79:40:95:99:4a:
e7:90:3d:a9:02:47:a8:c4:71:12:22:24:31:cf:a5:
f0:51:49:7d:e2:95:1d:5a:02:e9:ef:3e:37:59:61:
ad:fb:e5:22:a0:21:a1:3d:74:d4:52:39:6d:20:23:
39:d0:c7:0e:20:81:0d:61:21:71:4a:9d:ea:ac:13:
be:fa:31:84:50:1d:07:ef:c3:03:77:44:36:3b:07:
21:26:53:fd:8f:f2:30:97:b1:50:c2:a6:ba:e3:45:
0e:c1:cd:1f:54:77:33:3e:36:51:9c:ea:44:db:40:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:5B:71:1C:D2:E2:0D:12:25:71:28:51:9A:4E:83:2F:D7:75:09
X509v3 Authority Key Identifier:
keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1e:06:23:9c:0c:ba:9c:d8:41:ba:26:e2:2a:77:b9:13:bc:
a8:cb:4e:fb:e7:54:4b:63:65:43:42:76:16:7e:49:59:a8:e8:
9c:ea:6d:1b:de:9a:64:8e:5f:42:a1:00:cc:69:4b:36:c2:61:
c6:ca:00:6f:c6:e3:a4:de:24:ff:84:9f:70:34:53:af:2b:0b:
92:52:e6:af:a2:41:ab:a4:4f:a8:17:a4:48:e0:e6:d1:95:c9:
f1:8a:fb:93:d8:03:09:a9:11:4d:a7:3d:5e:37:21:c6:9c:e2:
4d:4b:24:8f:91:ed:d9:6f:f2:43:f9:9d:d9:ed:3c:d7:5a:9e:
74:fb:4a:3b:2f:fa:db:11:96:91:c9:57:df:b8:30:05:9b:ba:
5d:73:40:02:0a:ae:62:61:11:e7:16:5e:48:01:29:0a:c1:b9:
3f:fd:a8:f7:a1:e8:e1:09:13:5c:2f:52:5f:a1:f1:a2:ae:83:
fb:51:0d:66:e7:08:8e:5c:24:7c:e9:1f:8a:5a:6d:10:fc:65:
cb:5c:48:27:1c:24:19:5b:4e:bf:78:0e:76:e3:2d:66:aa:ae:
ac:a4:3d:73:b7:42:cd:0a:3f:c1:4b:35:24:08:6f:5d:fb:eb:
74:89:ed:23:6c:64:71:cb:34:32:ed:8a:58:14:0e:08:9e:bc:
f3:ad:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:58:48 2026 by rpki-client