
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
File: qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft (raw, json)
Hash identifier: e1/kNbUOx1tPX6W5tAxKErRPGTRiqKsUvSRWwUPT1Pg=
Subject key identifier: 70:82:31:B1:C2:8E:8A:52:D3:87:B6:95:94:AB:AE:5C:90:97:BB:9C
Authority key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
Certificate issuer: /CN=A91B8833/serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
Manifest number: 71
Signing time: Tue 29 Sep 2026 08:33:56 +0000
Manifest this update: Tue 29 Sep 2026 08:33:56 +0000
Manifest next update: Tue 06 Oct 2026 08:33:56 +0000
Files and hashes: 1: qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl (hash: rHY48bWjbcxu9Iiu3R5CINWjIvEWVjQujuzDDzAapC8=)
2: ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa (hash: 1VgHobz4nzrs5NBqb89qRpxnur9wCmTVYrTP5UDXUqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 08:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Validity
Not Before: Sep 29 08:33:56 2026 GMT
Not After : Oct 6 08:33:56 2026 GMT
Subject: CN=6abb77f4-c4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:87:39:91:73:86:56:f5:cd:c6:1a:85:aa:fe:
2c:6c:24:3f:e6:83:61:a5:57:c2:fb:7b:c7:41:2b:
a4:d2:dc:4f:49:94:6c:a9:14:b1:4b:71:90:8b:c5:
e0:e9:e1:fd:5e:7c:b6:e1:90:54:a1:0c:42:c7:13:
7e:9d:e9:28:ed:b0:42:06:5b:5c:a6:78:23:6d:a1:
de:e5:75:87:d5:49:56:f4:24:f0:ce:fb:94:b0:ea:
4c:39:86:a8:fb:36:7b:9e:7e:9c:1b:e3:00:40:b5:
3a:b8:24:1b:f4:ed:27:12:f4:e9:2f:b0:17:22:c6:
82:36:b8:ef:40:cf:78:c1:85:94:f3:aa:d9:ac:a7:
c9:58:73:63:d8:4b:2a:90:80:cd:71:bc:03:11:73:
b7:00:5f:4b:5e:00:48:a1:04:7e:83:4a:34:93:d7:
b4:47:c7:e1:af:08:be:7c:f6:03:a1:94:70:98:04:
83:2d:04:c6:92:19:53:1b:9b:b1:93:bb:66:28:db:
d0:51:30:96:be:c3:5f:89:41:6c:fb:89:c6:cc:29:
85:95:93:01:83:44:bc:80:ec:21:69:12:9f:12:a5:
ee:c1:4b:7e:c8:24:12:6b:bf:1a:ce:01:0d:37:13:
d4:16:c3:f5:7f:73:76:44:3b:0a:54:fb:66:14:f4:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:31:B1:C2:8E:8A:52:D3:87:B6:95:94:AB:AE:5C:90:97:BB:9C
X509v3 Authority Key Identifier:
keyid:A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:6f:34:6e:39:c9:c5:66:04:55:1c:63:23:33:59:49:d0:03:
4f:94:1d:37:da:2e:1f:b0:4c:5d:ea:71:19:b3:09:42:ff:f6:
15:54:8b:07:25:e1:75:58:33:e0:c7:81:59:fc:c0:f0:60:ea:
89:78:88:78:d1:34:b1:07:1b:dc:0b:07:0d:f6:ce:fa:93:30:
32:e9:9c:3b:55:b9:a2:ea:8c:0c:d7:c7:7a:fc:f4:5c:28:f2:
1d:62:47:75:ac:e8:8c:df:0c:ce:8e:0b:7f:ca:21:5d:49:1b:
e5:8d:3c:40:79:3c:c8:a0:cd:a5:52:94:c9:1b:2d:79:cd:19:
e9:6c:1f:5f:4e:77:61:ae:5b:64:31:a4:3a:58:58:31:58:5d:
64:c3:b3:1c:e7:11:90:b0:43:97:85:83:ab:21:fe:0d:94:92:
a8:76:ee:8e:28:d1:aa:2d:63:a3:8f:51:c9:22:e0:1a:eb:ec:
93:9b:bc:01:50:f4:96:fe:9e:96:f8:71:63:f5:cf:84:97:41:
eb:25:f9:6e:d7:4a:de:a7:7a:c7:04:95:20:e3:44:e3:34:3f:
39:66:c4:3b:aa:dd:da:44:94:d1:b4:19:c0:cd:b8:d2:b3:89:
c8:21:3a:3a:25:17:28:6f:0e:6a:3f:fe:4f:b7:54:3f:24:26:
be:8b:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:29:25 2026 by rpki-client