
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json)
Hash identifier: W5r/paZjRBtxtJ3JQiw8foOfpjEJWDoWcpwrhCM6aDQ=
Subject key identifier: 2C:DC:25:9B:54:3B:C2:2A:6F:F3:CC:11:AD:18:48:6B:93:8F:42:2D
Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Certificate serial: 0273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
Manifest number: 026F
Signing time: Wed 07 Oct 2026 02:28:00 +0000
Manifest this update: Wed 07 Oct 2026 02:28:00 +0000
Manifest next update: Wed 14 Oct 2026 02:28:00 +0000
Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: /fMExpI8ozL1t9d8TJdhRdFtOnglO8x/P2TyZWbUL8Q=)
2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: NEAODUTKeBNCWNog3dkgj4g38ALv10sbj1oaLjD2vUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Validity
Not Before: Oct 7 02:28:00 2026 GMT
Not After : Oct 14 02:28:00 2026 GMT
Subject: CN=6ac5ae30-7984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:de:1b:4c:32:4b:31:fa:62:c7:d8:f6:1c:
9a:5b:0a:1d:4f:73:05:42:b8:10:47:5e:88:6e:32:
66:ef:84:67:42:a6:37:82:ef:de:ca:4c:50:39:87:
b7:b9:25:b8:58:79:85:8e:66:33:c0:31:a8:81:fc:
1a:c7:d9:83:5d:68:17:79:4e:f1:a8:7f:99:0e:bf:
1e:6f:81:c9:10:f6:0f:bc:4b:47:9f:e5:97:da:23:
c4:8e:8b:44:f5:99:de:19:99:40:0d:83:da:4a:04:
9e:7a:b7:4b:0d:81:6f:6e:62:ce:d1:f3:65:f0:01:
ff:9d:0e:19:8b:fd:c0:74:5e:99:a6:0c:ff:57:94:
91:7c:45:03:0c:d3:a2:f6:20:3f:42:2f:3e:73:2e:
c2:fc:ec:d7:5d:f4:ac:08:20:c6:c5:f1:02:7b:30:
dc:f3:d4:d0:30:86:cf:09:14:92:ea:8b:2f:89:de:
93:4a:9b:70:02:6c:50:29:d1:4e:5d:c7:47:10:f5:
37:00:2c:5e:db:ea:6c:ac:4e:a4:4d:cf:67:f4:15:
9f:49:51:50:0c:94:8d:0c:2b:32:5b:ad:2b:0a:9b:
77:d1:25:86:61:85:2c:31:03:75:15:aa:16:49:dc:
83:d1:81:5b:12:d6:c6:bd:24:bd:2f:2c:3c:4f:62:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:25:9B:54:3B:C2:2A:6F:F3:CC:11:AD:18:48:6B:93:8F:42:2D
X509v3 Authority Key Identifier:
keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6d:d4:14:f0:6a:74:ef:88:f0:e0:a4:9b:85:dc:3f:07:21:
d5:1f:77:cc:c7:09:e6:1e:ef:1a:22:f8:f7:fa:1e:0b:f5:eb:
e9:d6:d4:7c:e2:fc:9f:c1:fa:aa:b7:4b:eb:57:fd:db:9b:23:
cb:7b:21:70:c8:4b:61:68:3a:72:12:fc:89:50:82:f2:e5:51:
08:59:9c:db:15:06:b4:60:a3:fe:4c:94:fa:23:3e:9c:e0:a9:
94:ee:f7:3a:56:e3:8b:31:ae:aa:c9:8c:8b:79:0d:cd:f7:0c:
e5:11:83:4e:1a:49:26:dd:93:1a:08:71:7b:f1:8c:f9:0d:b3:
38:3d:75:16:59:51:04:4d:e5:34:58:5f:7c:66:f5:af:50:6a:
02:9b:dd:ed:5a:75:ef:69:11:f9:dc:73:3f:94:39:47:86:d5:
0a:f9:2e:d2:46:ca:af:dc:c4:f5:c9:30:23:28:2d:d8:a5:de:
23:d9:c8:53:c7:2b:0b:10:34:10:c5:23:b8:65:9f:c4:46:5b:
c6:81:05:54:af:01:e9:23:74:74:bf:de:7c:8d:9d:2d:7d:d7:
95:a8:68:89:bd:fe:d7:6b:dd:a6:ad:c8:d5:cd:de:c8:fc:6c:
92:19:8b:90:b1:a9:5b:eb:19:5c:a5:88:2c:77:c5:53:1e:b0:
03:6d:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:04:58 2026 by rpki-client