
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier: gS3Rif4AarVhO02fQD5sVAKPYg0A6JjC7FezvsUJ5oY=
Subject key identifier: C0:FE:0B:40:D5:EF:85:13:3E:30:40:6C:B6:4E:7B:0C:8B:5E:D6:26
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial: 1CA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number: 1C82
Signing time: Tue 06 Oct 2026 16:13:14 +0000
Manifest this update: Tue 06 Oct 2026 16:13:14 +0000
Manifest next update: Tue 13 Oct 2026 16:13:14 +0000
Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: Cg5OEvoYO1k5eCSV8eUx5PPBTKwPAM5IQeLOlYnahyY=)
2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
3: EB6B3FFA86EF11F19E006003A7EE528E.roa (hash: DAeAFcyF/YNOKPuEFYrJ40g8SH0qo3OoC9C6ggkgmKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7328 (0x1ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
Validity
Not Before: Oct 6 16:13:14 2026 GMT
Not After : Oct 13 16:13:14 2026 GMT
Subject: CN=6ac51e1a-441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:e4:ee:8f:c8:e7:08:fa:4d:81:e6:63:bc:
94:de:e2:ef:6f:15:60:f0:73:28:f1:52:5f:5b:b8:
dc:0c:e4:be:f4:a4:1d:8a:4e:2b:76:8b:c3:83:44:
4a:ff:4e:6f:ec:78:89:92:31:59:e2:31:4a:7c:f7:
d3:41:96:32:e6:fa:dd:2d:0a:5c:0f:89:1e:6a:1f:
84:4b:40:0c:f3:a1:9a:7c:cb:1f:32:54:75:0a:47:
54:fa:9f:17:c6:29:35:b3:21:66:6e:e1:50:df:0f:
d0:3d:f6:79:a8:4b:66:64:62:3e:8c:d2:2c:87:84:
d7:96:58:35:db:3c:c8:f6:f9:9b:3f:3e:81:8e:3c:
4a:55:be:4f:d7:11:fa:f5:22:80:07:cb:55:c4:ba:
36:73:f7:1d:4f:d6:af:a2:19:e5:55:e8:ed:ac:3c:
00:96:77:93:bb:63:2b:fe:59:dc:bb:59:7c:6d:fe:
48:d1:84:1f:b7:e4:60:b1:3f:84:5b:7b:c8:d6:06:
4f:4d:84:1b:77:d5:7e:73:0c:66:c3:6b:48:05:a4:
e2:ce:5b:a9:cb:4b:8c:21:35:33:ce:43:03:4b:4c:
be:5b:00:85:77:ef:19:43:67:0f:a9:52:d7:b7:a1:
18:a4:d3:08:39:32:9e:bd:f9:eb:3e:73:8a:4c:b8:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FE:0B:40:D5:EF:85:13:3E:30:40:6C:B6:4E:7B:0C:8B:5E:D6:26
X509v3 Authority Key Identifier:
keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:54:ab:a4:97:c0:dd:d7:47:fb:ea:62:ae:6f:71:f8:48:dc:
18:75:29:9e:fe:79:44:4c:ed:b7:0f:7f:5d:66:df:06:69:27:
ad:85:0b:b1:34:92:c2:50:d1:b4:25:a6:86:bb:67:fd:b9:71:
77:18:54:93:1f:c1:84:49:55:20:a0:cf:19:bc:6d:55:57:a3:
76:37:e4:e1:59:98:5f:2b:59:d9:36:65:03:de:d0:b6:e6:bb:
02:10:dc:93:3b:b3:40:84:1e:2e:58:7e:95:c3:36:8a:5a:7e:
24:c6:9b:79:06:f9:2d:a4:fc:25:c0:02:4c:f2:ea:c7:a4:f1:
f7:16:82:f3:94:f6:5b:66:07:48:a9:a7:bc:54:ef:63:9c:c1:
f1:14:45:3f:7a:39:59:42:63:2f:be:c7:be:f6:21:b5:dd:a9:
c9:6b:0e:02:3b:12:3d:a6:1b:b1:a7:56:86:e8:ab:9b:3a:f2:
36:7d:81:37:26:8f:52:ef:ee:9d:db:55:19:49:9b:20:9e:9a:
82:a4:ba:b2:dd:40:ab:d2:31:a5:a0:66:cf:07:b0:de:ba:ca:
15:01:02:b4:35:7b:18:6b:cf:81:52:a9:fc:6a:e0:9d:0f:03:
ca:ff:65:06:8e:80:75:0e:3f:24:9b:66:8f:7b:3d:38:cb:67:
1a:12:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:15:10 2026 by rpki-client