
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
File: QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft (raw, json)
Hash identifier: dlh/TkPe16NZs91a8vBUpxVlQm0rul8G9gpr5RGK/hw=
Subject key identifier: BD:7C:64:98:AF:43:77:34:41:53:BD:8F:F2:0D:30:A7:C2:8A:04:59
Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
Certificate issuer: /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
Manifest number: E9
Signing time: Sat 03 Oct 2026 07:10:16 +0000
Manifest this update: Sat 03 Oct 2026 07:10:16 +0000
Manifest next update: Sat 10 Oct 2026 07:10:16 +0000
Files and hashes: 1: QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl (hash: 43MGtYQeBXBEL22/PhpktYlY2gPyk/Pzcq8P1eX3eLY=)
2: C5B717905EDA11F0A5EAB579C4F9AE02.roa (hash: QMKJuZ7u5H3meG/M2oUJBI1bKAy18Acbebk2aAAz4oI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Validity
Not Before: Oct 3 07:10:16 2026 GMT
Not After : Oct 10 07:10:16 2026 GMT
Subject: CN=6ac0aa58-e8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:7a:a8:f9:8e:c1:c7:33:40:3d:31:9d:f2:
43:11:9a:ed:bf:f7:40:a3:7c:5a:8d:3a:33:fc:67:
65:4a:73:76:dd:a7:5b:01:74:4c:bd:50:c2:08:f9:
88:9a:43:c2:6d:71:14:bf:47:5e:e8:d9:ef:77:a2:
d1:c4:9b:da:af:1b:93:a9:31:17:4c:a0:a1:f3:a4:
b7:20:83:ac:3e:91:80:1c:ff:3c:54:78:5d:6b:98:
b0:57:30:6a:f1:13:a0:f3:2d:ea:a7:77:29:46:ca:
9a:c3:01:02:ff:2c:95:e3:94:9a:91:00:94:0f:70:
02:f0:24:fe:46:90:27:a2:28:74:75:0a:b1:52:4e:
53:d0:6c:60:75:02:c2:08:b6:76:bc:bf:cf:56:45:
9c:7c:33:17:d4:60:9d:d8:90:e9:6d:c9:de:c5:89:
4b:d0:69:ac:2f:d0:0b:33:9d:50:8e:1b:39:2c:44:
7a:2a:c8:b6:12:0a:79:19:0e:69:91:e1:ac:0b:53:
32:8e:18:b2:fa:ae:a9:3e:4f:c5:45:ba:5d:31:90:
47:c2:97:6e:3a:d5:3a:ee:3b:12:cb:4d:a7:74:aa:
6a:6b:a3:5f:a8:fa:64:91:5b:1e:08:96:b3:f5:98:
dc:f6:85:a5:88:f2:e8:8d:59:8e:7d:91:f6:24:f2:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:64:98:AF:43:77:34:41:53:BD:8F:F2:0D:30:A7:C2:8A:04:59
X509v3 Authority Key Identifier:
keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a1:66:b1:79:d5:0c:1f:89:61:86:4f:77:2d:0e:08:f7:95:
68:3e:64:92:fb:d8:23:91:3d:e7:b2:6e:7a:05:4a:16:49:bf:
c3:f5:4c:18:15:e7:e8:4e:ec:f9:5c:a8:e4:7d:ad:6d:64:c5:
11:72:b8:73:3a:b0:da:dd:f3:9c:fa:ca:1f:b7:a2:86:08:6b:
94:27:99:89:78:1f:c3:f9:66:fa:46:d4:11:5b:02:b7:00:ae:
06:81:ef:4a:4f:b4:1d:2c:6f:c8:dc:4a:32:28:8a:e9:16:80:
55:ab:28:b9:9f:44:b2:91:06:84:49:f5:60:7b:73:05:28:c6:
5c:3f:10:df:dd:c4:0d:15:1f:f8:20:11:01:17:16:ae:9b:d4:
b0:b3:63:67:91:8f:d9:eb:7e:eb:80:7c:54:c3:d4:4c:79:df:
a0:a9:62:f1:74:02:f6:9f:26:d2:26:38:3f:aa:48:81:bf:4b:
05:c2:30:bd:66:03:9d:46:a5:10:c3:7e:1e:05:c0:86:e4:88:
a1:41:64:b6:d4:00:df:01:d8:9c:55:2e:06:25:6f:de:6f:19:
f5:b4:3e:32:c2:d9:ef:bc:46:8a:72:67:21:8a:01:58:9a:1f:
2f:ac:7d:fa:4b:d8:e1:38:54:9e:37:0a:da:c8:bd:ef:dd:34:
73:c3:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:06 2026 by rpki-client