
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json)
Hash identifier: Au+VeklJpW/JVAstWeki2Lr4obfjaYkfcyvsUevVx5g=
Subject key identifier: 3B:CF:28:98:30:FF:6D:31:9B:1B:1A:4C:C0:9B:55:63:95:02:F9:00
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial: 0347
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
Manifest number: 0331
Signing time: Tue 27 Oct 2026 00:53:33 +0000
Manifest this update: Tue 27 Oct 2026 00:53:33 +0000
Manifest next update: Tue 03 Nov 2026 00:53:33 +0000
Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: coLZDESze6uNCFLFAxkfW+KcpkoH8MX5JkXEzaUg+FU=)
2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: hSxxv7yEYI5INFfNtlzvX7licwypObuutfzfApfV0oE=)
3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: 3v4pwXdAurC2xx0oSrjBitroPrUmO1vjpobLOZgKc4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 839 (0x347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Validity
Not Before: Oct 27 00:53:33 2026 GMT
Not After : Nov 3 00:53:33 2026 GMT
Subject: CN=6adff60d-61ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b1:6b:b3:3f:f4:35:0f:c3:d3:6b:2e:ec:72:
a1:ec:62:ce:23:8c:48:9a:cf:fc:8e:3c:85:8a:9d:
54:57:4c:62:f9:ee:f3:11:5b:92:bd:ee:a8:ef:8b:
6a:9a:4e:6e:5e:16:b3:7f:ef:2a:e7:a4:42:e0:6e:
fe:10:0b:76:b7:3a:4a:ba:c0:65:31:37:6b:68:27:
84:9e:df:b9:3f:07:5b:8c:97:2b:55:b4:56:98:1b:
11:51:47:75:11:be:a7:8e:67:e1:7d:35:bd:5c:77:
5b:66:30:4b:8b:54:34:e3:9b:30:2b:20:fe:79:38:
21:5b:30:a6:2c:02:13:b1:69:ed:3a:92:bf:d0:2a:
a4:01:0e:73:ac:b4:bf:9b:2d:57:35:85:f0:d6:d3:
50:23:6f:2d:5b:4b:38:5f:a1:6a:cf:ac:4d:73:40:
6a:b9:f2:f0:f1:50:ba:f0:b2:9d:2e:77:d0:b1:e8:
78:51:38:1a:7e:12:1b:e6:f3:32:3a:53:75:16:6a:
14:18:87:74:44:73:b6:28:86:e8:33:ae:2a:28:7e:
11:d2:03:f4:a4:01:2f:22:97:21:11:4e:ee:14:59:
96:57:83:ba:cc:e0:1f:7b:f1:55:46:22:67:ff:50:
22:af:4c:6f:87:a1:ef:85:f5:9e:98:45:42:8c:cb:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:28:98:30:FF:6D:31:9B:1B:1A:4C:C0:9B:55:63:95:02:F9:00
X509v3 Authority Key Identifier:
keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:12:45:6d:8b:97:50:44:b3:75:b9:6d:89:36:17:55:60:
fc:8d:7e:33:bd:3e:2e:ae:30:eb:8a:fa:ac:38:17:aa:6b:f1:
75:06:c2:8b:e1:34:5f:db:1f:5b:b7:6d:47:e9:91:a3:20:13:
78:68:f5:b8:e2:74:28:39:1d:19:4f:a9:9b:23:31:4a:e7:90:
b8:ab:f7:ab:cf:e1:2c:c0:be:03:ca:b9:7b:0f:b4:5e:9b:67:
2a:03:18:83:48:a9:8b:f9:c8:10:a1:a5:1b:98:7f:38:6c:54:
65:21:80:c1:e2:9c:0b:86:a3:d0:c2:20:70:24:2a:9d:f1:84:
5a:6d:f9:8e:e2:0d:fe:d7:61:d8:c5:fd:92:cc:ae:f9:ba:16:
26:ea:44:f5:2d:11:11:7e:c4:a9:d2:41:71:2b:ad:ea:8a:32:
59:b5:4f:28:8a:38:cc:31:1b:7d:3a:2c:be:6f:03:76:7c:77:
49:15:a5:2e:e8:0d:4c:6e:9b:88:b4:13:fa:35:fd:21:0f:62:
bf:50:0e:06:e9:9c:26:b7:fb:f0:0f:54:45:69:e5:12:61:33:
94:e7:4a:ea:91:84:c2:d0:33:1c:3c:02:0f:a1:5b:6c:7e:6e:
3e:d4:94:7d:ec:d9:fe:7d:a7:4d:60:d8:a2:64:e6:c4:f1:e6:
ad:2d:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:31 2026 by rpki-client