
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json)
Hash identifier: h+wJ1zSPLS81idluVHUVX0pw64P4CnxUKoEBNed5c2I=
Subject key identifier: B9:E5:51:01:8D:38:C8:84:75:A4:DC:DB:FB:6E:C4:F9:12:B2:90:F0
Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Certificate serial: 1944
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
Manifest number: 1935
Signing time: Sun 04 Oct 2026 16:27:00 +0000
Manifest this update: Sun 04 Oct 2026 16:27:00 +0000
Manifest next update: Sun 11 Oct 2026 16:27:00 +0000
Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: zRZzpCtsVO0xScLfM2TJq3MmzFC2nKEDOssjYjI0Mhk=)
2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: eXgRHsIVRc9u6kHMAWlAPva+g61Bb19zupw4KQEne+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6468 (0x1944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Validity
Not Before: Oct 4 16:27:00 2026 GMT
Not After : Oct 11 16:27:00 2026 GMT
Subject: CN=6ac27e54-976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:a2:82:1e:a4:47:99:59:39:1a:27:6e:6a:
6d:5d:cb:40:ab:22:e8:fb:fd:4d:10:2b:d9:de:de:
76:ee:6e:82:b8:11:99:cb:75:74:9e:cb:00:2a:21:
aa:92:8e:ba:8d:a4:af:d9:6f:cb:63:07:5a:1f:af:
73:b8:bf:ef:fe:e5:a4:7e:8b:ac:60:79:20:3d:30:
32:33:10:f5:69:c4:c8:f4:8a:a1:4c:64:64:21:9e:
55:a0:01:de:a0:ae:02:bf:e7:03:ca:b7:2e:af:67:
00:b4:e8:4a:73:06:1c:72:ed:17:19:a6:8c:ac:45:
89:e9:d8:0f:6a:1f:c3:67:85:f7:66:ab:6a:57:46:
f2:a3:20:9f:cc:81:a2:74:29:ef:73:d1:a7:ac:38:
8f:9c:a8:05:71:82:99:9c:1d:c3:5f:79:a4:6e:4a:
91:40:82:f6:82:13:7d:da:94:5d:27:19:c7:82:0a:
31:22:de:30:8d:34:9c:d2:5d:7a:fe:0c:cc:c6:4f:
2e:9c:b1:73:61:0c:90:d0:43:ad:8f:12:e7:20:c3:
c3:b4:8d:54:01:c3:e7:1e:f8:0b:45:2c:3f:05:8d:
6a:67:06:71:08:8e:51:39:70:4d:24:62:1c:6c:cf:
c8:df:f8:ff:d4:fe:34:d2:2d:f2:e3:bc:ac:09:be:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:51:01:8D:38:C8:84:75:A4:DC:DB:FB:6E:C4:F9:12:B2:90:F0
X509v3 Authority Key Identifier:
keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:bc:ce:cc:4f:34:8e:cb:60:15:f4:de:fc:fe:96:10:b3:7e:
2a:02:c1:1c:fd:4c:f4:3c:93:0a:43:d4:36:13:ba:fb:a3:a9:
53:9a:69:f0:f8:e2:b4:6e:03:57:75:e2:6d:1d:d7:2e:e8:4c:
c8:a6:0b:81:fa:0e:f3:a7:2b:76:0d:6f:eb:1a:fc:10:01:34:
f4:17:e2:37:b2:26:98:fc:b7:b7:a8:3f:f1:5e:35:98:90:71:
bc:fe:d9:a1:8a:b8:9a:42:66:3f:c7:fe:73:be:65:66:aa:fa:
ec:fd:be:d8:58:43:0b:6c:d1:0b:e0:76:7e:ee:d1:ed:14:60:
c9:2f:50:f2:2b:09:0a:ca:46:48:82:64:10:df:57:98:df:82:
6f:bc:ea:a0:c0:dc:e3:5e:d6:2f:a4:2e:02:2d:7b:43:06:fc:
b7:d7:a5:a0:43:90:00:2f:d4:8c:7b:fc:5f:10:eb:86:da:74:
02:b4:89:14:79:33:d1:0a:f3:e3:fd:57:9e:dc:92:4d:f8:4a:
58:9d:7c:0a:c5:b9:f2:1a:1b:32:76:94:e8:d7:01:f4:2d:94:
fa:2c:19:f9:ca:d4:d2:86:84:8c:fe:d4:9f:dc:a4:34:f3:86:
72:66:d7:de:11:10:dd:77:a7:3e:36:e6:83:b4:65:70:84:9e:
50:35:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:31:15 2026 by rpki-client