
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json)
Hash identifier: fNtWFyuj3Toc0uJx5AQ+K7Ztum/QiiTvu9+L/+s7vzA=
Subject key identifier: CF:58:A9:F0:8E:7B:51:33:21:50:4E:61:FA:97:50:BD:77:24:6C:50
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial: 0ED7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
Manifest number: 0EB2
Signing time: Sun 04 Oct 2026 17:46:00 +0000
Manifest this update: Sun 04 Oct 2026 17:45:59 +0000
Manifest next update: Sun 11 Oct 2026 17:45:59 +0000
Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: X4tD5nayC3D8EU0VODNeznE6U6CmQrYpxyWM3txhs8M=)
2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: 86V/8mBMujnitGzukQBEmEQ/DrfaHm0b2pCNAHNSv7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3799 (0xed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Validity
Not Before: Oct 4 17:45:59 2026 GMT
Not After : Oct 11 17:45:59 2026 GMT
Subject: CN=6ac290d7-b5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:4e:9e:7e:4f:3d:d5:99:cb:43:00:3d:fc:
4f:95:bd:ac:00:97:c7:63:b6:0b:d8:56:a0:83:6b:
74:ec:59:72:f1:31:79:39:d5:91:4b:91:79:73:e8:
7d:d0:65:67:bd:07:7a:f7:d8:30:e5:a7:10:67:ad:
2f:dd:84:84:93:78:a7:7c:11:01:56:39:5c:8e:5e:
9b:fa:11:f9:25:f6:d9:bc:de:b9:8c:7a:69:7f:aa:
0c:36:ab:09:bc:a0:01:4b:41:76:68:43:03:47:28:
69:f1:5a:06:22:fa:e3:20:01:ef:39:49:00:4c:ce:
11:ff:15:61:f2:72:14:b8:bd:8d:b1:88:a4:0b:dd:
5a:ac:49:29:cd:76:dc:db:c7:f5:12:69:71:71:92:
97:95:1a:36:1f:52:6d:9f:a8:57:cd:ff:58:5c:1b:
64:f2:d7:5d:36:16:f8:64:7c:13:83:6e:91:30:5f:
0d:de:a4:e3:4a:ec:64:9d:96:61:d8:b0:af:56:f9:
12:39:6b:c3:6b:9b:38:36:64:f1:38:dc:03:50:97:
3d:4f:4e:5d:6d:41:85:50:e6:71:a9:5d:87:35:33:
96:57:cb:60:7b:82:ca:ed:ce:25:d4:15:88:39:ea:
70:32:7b:33:31:a0:53:68:e1:52:37:85:f7:58:14:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:A9:F0:8E:7B:51:33:21:50:4E:61:FA:97:50:BD:77:24:6C:50
X509v3 Authority Key Identifier:
keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:e1:1b:71:e8:69:ba:a0:8b:96:23:8c:f8:e7:69:4a:27:99:
95:66:0c:2b:e1:7d:97:4e:85:ba:19:fe:b1:cf:7b:02:5f:4c:
8e:30:42:22:18:df:4a:75:e2:27:37:16:43:ca:17:2f:04:3f:
d9:0e:17:29:84:73:dd:bf:30:30:6f:44:2d:8a:db:41:9d:2a:
ea:47:df:6e:ee:88:56:6a:bf:72:e3:a4:de:1b:68:f2:8a:8a:
61:08:f2:6d:2c:97:c5:cb:6e:54:0d:27:37:f9:67:0a:51:55:
94:e3:55:6c:46:a9:ce:1f:eb:bd:a8:5c:f6:6c:a1:1a:a2:5e:
53:3f:6d:de:f3:29:83:05:42:cb:a7:aa:bd:e7:55:06:1c:c6:
c9:30:bc:a0:d6:5b:94:c2:64:e6:3d:d4:1c:d8:33:4a:a5:94:
3f:60:c0:84:c9:fe:55:bc:a5:69:09:98:ab:b1:de:43:01:d2:
85:47:18:83:a4:6f:59:27:3f:d2:6e:99:2a:1e:87:e2:ad:e1:
e5:e2:d9:d6:20:53:c6:f4:2d:69:9a:29:81:d9:54:6d:88:dd:
cc:4c:2b:10:29:b1:3d:04:a1:52:f8:ce:d7:ad:85:0b:5e:8d:
47:26:8e:49:82:46:f3:bb:95:74:ae:42:68:66:c1:6d:a3:18:
e5:57:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:41 2026 by rpki-client