
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json)
Hash identifier: 87zuQuF8FF7fNYp2SSiBRw+iBPSW5V9TapBCt8LZheQ=
Subject key identifier: 74:88:6A:5B:4F:8F:34:16:B9:9F:73:9A:9B:EC:A8:A7:45:61:27:58
Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
Certificate issuer: /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
Manifest number: 0121
Signing time: Wed 07 Oct 2026 06:20:02 +0000
Manifest this update: Wed 07 Oct 2026 06:20:01 +0000
Manifest next update: Wed 14 Oct 2026 06:20:01 +0000
Files and hashes: 1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: Vc9zDYXj24VIqRrUVaCruSuN6lD59Guywfms7zTdmuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Validity
Not Before: Oct 7 06:20:01 2026 GMT
Not After : Oct 14 06:20:01 2026 GMT
Subject: CN=6ac5e492-41b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:19:9f:b2:5d:09:dc:9f:29:fe:f8:af:89:83:
d8:36:9c:14:4c:f6:5c:35:b0:55:ae:19:b4:0b:01:
cb:53:6c:12:ac:8c:2b:00:be:ff:32:ad:a7:eb:ab:
eb:00:0b:ae:73:5e:b0:4f:54:b6:d8:7b:d4:fd:c7:
a0:0e:6f:91:95:43:5a:51:83:19:ec:a1:6d:c6:48:
09:99:ab:bd:28:2a:38:6b:7f:d6:ff:8c:5c:07:c0:
1e:e3:b4:34:18:92:4c:b9:60:11:34:9d:e1:50:bc:
8f:e1:52:87:b8:f5:e5:b9:ab:23:01:73:b6:2a:da:
63:40:76:e3:1d:10:94:b2:55:24:a9:4d:bf:5b:51:
de:8e:6e:08:d0:c2:ac:d0:3f:3c:22:26:b8:5d:84:
39:a0:50:dd:df:6b:21:ff:41:e9:62:d5:12:f9:0a:
36:7c:6b:54:f8:b4:a0:04:71:98:27:87:98:8d:9b:
ec:0f:a0:48:30:94:4d:07:08:71:65:5b:74:c9:f0:
f3:b0:88:db:46:b6:a3:7e:cc:91:f1:65:28:fc:de:
5a:2c:e6:0a:de:f2:cc:c4:cc:17:06:28:2d:f5:a9:
88:19:79:41:b0:83:95:13:7e:d4:28:70:bb:31:a6:
d5:23:2a:ee:ac:61:0c:ba:26:e0:0a:04:a5:7f:70:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:88:6A:5B:4F:8F:34:16:B9:9F:73:9A:9B:EC:A8:A7:45:61:27:58
X509v3 Authority Key Identifier:
keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:b8:1b:cc:5c:1c:83:65:e3:57:19:94:5a:8d:c4:29:b0:d2:
5c:07:ec:05:34:bc:c9:48:2c:4c:ff:75:03:5f:78:c2:98:3c:
b2:02:d9:c3:78:7d:d0:47:28:d9:98:be:14:08:9b:39:2c:4e:
3c:a8:c7:e9:c2:c0:1f:a6:8f:c3:fb:20:a9:d5:e0:80:cb:cd:
8a:80:b3:32:f3:0b:1e:07:ab:e9:b4:1e:23:9f:f1:1e:72:a6:
ad:36:b9:ae:b8:8c:5e:96:2d:d8:35:b2:00:1e:16:e0:6f:68:
6d:c2:bd:57:93:99:36:88:c2:aa:be:61:45:3c:54:30:9c:4f:
fd:b7:40:21:f2:a8:5d:58:d5:4c:9e:d7:7d:7b:2d:0d:76:ff:
77:78:c8:9b:85:31:fb:ce:91:53:13:c5:f1:9b:bd:c1:b2:46:
f9:21:c7:2a:bf:e7:9a:4a:5b:b0:2e:b4:48:df:eb:dd:30:69:
e3:39:b8:b5:f7:f9:eb:93:ec:45:93:b4:b9:7c:1d:9d:9d:30:
b1:cf:ab:d8:5d:2c:b0:ca:8c:be:41:4a:9e:7e:58:8b:47:f9:
aa:e6:3f:aa:aa:32:b0:3d:33:9a:6e:5f:40:3e:6e:c7:ff:af:
70:8c:1c:14:ff:41:d4:14:b1:db:f7:7b:0b:ef:24:28:34:2e:
06:80:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:13:03 2026 by rpki-client