
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier: IOpGZ6m6v+q8zNhiIUd8AgiflBHGjT4gKyyfaRPuF7Q=
Subject key identifier: DB:37:27:99:06:EE:19:59:26:54:C8:BF:46:E1:24:B9:88:3E:66:A4
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number: 0146
Signing time: Mon 05 Oct 2026 05:44:38 +0000
Manifest this update: Mon 05 Oct 2026 05:44:37 +0000
Manifest next update: Mon 12 Oct 2026 05:44:37 +0000
Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: 4J4d2tedUQEb9iCgm/GyiOO6b5VevP4QBeqOQntswmg=)
2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Validity
Not Before: Oct 5 05:44:37 2026 GMT
Not After : Oct 12 05:44:37 2026 GMT
Subject: CN=6ac33945-d7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:aa:52:c3:37:9b:2d:f3:8e:da:b9:1a:b0:
ec:f5:71:bc:a9:eb:01:a5:fa:95:a9:8e:3e:69:d0:
e2:b3:01:c8:3c:04:6d:3c:8c:d7:e8:41:f1:11:38:
92:91:59:1c:61:f5:78:cb:c4:c2:d0:8f:26:d0:56:
e7:71:05:f4:72:2c:4b:87:50:4f:a3:27:b9:0c:dd:
04:06:75:67:96:01:52:25:52:46:76:1b:00:77:a5:
57:9e:ee:e2:95:e9:ba:0e:7e:b0:6e:72:f8:47:f3:
c8:80:25:29:19:b7:82:bf:96:50:49:1e:e5:92:ea:
23:9c:27:ac:c3:50:40:5a:40:97:f0:8a:a7:2c:b0:
a2:14:56:20:ff:6b:06:7d:31:f4:65:22:24:9d:54:
51:dd:1e:0d:2d:65:32:ed:aa:f6:f7:39:cf:aa:6b:
12:62:33:81:7a:ad:a1:00:a7:5d:25:a7:fb:16:de:
5e:47:95:81:76:2c:fe:7c:9a:e4:26:79:18:d2:51:
32:51:09:dc:fd:2d:60:2d:db:b6:95:4f:4a:4d:f5:
e4:93:af:06:d4:12:c1:50:82:c0:f4:92:a3:86:96:
e7:00:59:2a:ac:c6:e2:a3:d4:4d:52:0f:ba:5c:94:
3e:69:c2:e0:da:5b:e1:83:1d:8d:57:3f:40:22:e3:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:27:99:06:EE:19:59:26:54:C8:BF:46:E1:24:B9:88:3E:66:A4
X509v3 Authority Key Identifier:
keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:db:fa:72:d9:83:eb:64:61:a8:74:0d:1b:ec:b7:9f:f3:c2:
8e:30:63:7b:73:06:8d:ec:d3:3c:c8:2d:d4:79:18:79:bf:47:
b1:ed:65:b8:02:fc:03:db:83:62:a1:24:3e:70:2c:c0:0e:0e:
7a:19:96:ac:1e:d5:1b:98:d2:ff:00:b0:7d:c3:3b:6b:cf:4c:
6d:c5:ff:b0:2c:f9:2d:35:b5:d9:e9:1b:ec:dc:81:f3:1f:22:
f2:21:af:13:71:91:02:1c:64:0a:8b:e5:d1:e5:71:53:c1:c8:
b4:bd:3b:0f:c2:71:44:be:57:14:4d:dd:8f:cd:3e:ad:ee:0c:
e8:05:8d:59:a0:2f:22:cd:63:33:d0:8e:71:00:ce:c7:9e:c1:
37:7a:fe:aa:25:3e:35:7c:7f:90:b0:80:eb:74:1a:d4:72:ec:
03:e1:71:3b:22:60:aa:34:a9:3e:6d:1d:e5:4e:e2:78:6f:4b:
2a:bc:28:06:a1:d5:21:e7:14:78:7e:05:bf:71:13:d0:38:f0:
a2:08:d5:cb:0e:e3:46:12:fa:fc:01:c7:5b:96:df:29:23:89:
9a:74:ef:fb:37:84:a9:c1:48:f4:39:97:ca:bc:c2:a1:04:ae:
c4:85:94:70:99:30:f5:e8:f9:e8:1d:79:33:e3:0d:d2:79:a3:
ac:27:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:50:49 2026 by rpki-client