
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json)
Hash identifier: 17blgfjjKA9pWqC8xvaFJ4QbCUqcR2LlzWuTKXuRMpQ=
Subject key identifier: 12:C6:0A:42:0A:7B:C9:99:00:C9:BE:B0:39:5F:C8:BB:56:31:C4:0A
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
Manifest number: 0101
Signing time: Fri 09 Oct 2026 06:50:05 +0000
Manifest this update: Fri 09 Oct 2026 06:50:04 +0000
Manifest next update: Fri 16 Oct 2026 06:50:04 +0000
Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: CjJIpAd71sIXQU0Pz2oIMBQfGNzU8LLKTug2fvnnQFc=)
2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: TIY6gyAp3NwOI0omiLD20nrzYuDIOBYf89hc7GdDNuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Validity
Not Before: Oct 9 06:50:04 2026 GMT
Not After : Oct 16 06:50:04 2026 GMT
Subject: CN=6ac88e9d-11c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:9c:bc:a0:89:01:f6:75:5e:e1:d7:56:87:
1d:12:e9:23:9c:0b:f8:dd:05:e3:e9:cc:cc:3b:01:
07:67:58:86:0f:ab:5c:48:bf:2d:25:24:13:77:36:
09:b6:b4:b0:4e:f6:8d:ab:92:6a:81:3b:c1:32:4a:
27:f6:fe:91:f1:91:f1:0a:63:b1:6b:2d:2c:51:09:
6c:4c:cb:2f:06:6d:2b:8d:7e:62:24:67:74:fd:78:
ae:e0:d4:25:fa:4a:8f:4f:b8:ee:bd:2c:20:cc:de:
ff:07:23:50:7f:40:4d:d3:1e:35:47:88:d2:31:b1:
07:90:8c:36:14:89:96:c0:1d:1b:1e:43:4d:f1:7d:
40:07:05:13:14:e0:39:a0:3e:0c:d3:8c:fc:02:87:
b0:b5:f9:ed:1e:2b:6a:66:c1:58:bb:a8:2d:a5:1b:
19:ee:c5:d9:62:0d:60:18:6a:d2:ab:be:2a:78:5d:
64:49:4e:5d:1a:e2:61:d7:29:3d:6c:4d:52:54:92:
e6:c9:08:73:58:29:d6:8d:2a:6c:bb:c0:af:f1:63:
2a:85:4f:52:b9:fb:2e:91:45:ad:ac:f3:fa:99:fd:
0b:31:b3:30:9b:10:ea:da:fc:cc:c4:a3:03:cc:79:
ac:09:b8:7e:04:84:33:90:94:be:37:28:2c:e6:b7:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C6:0A:42:0A:7B:C9:99:00:C9:BE:B0:39:5F:C8:BB:56:31:C4:0A
X509v3 Authority Key Identifier:
keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:fa:1a:be:36:e6:ea:62:0b:f6:4e:9f:6c:a9:61:01:23:
bf:b7:fa:c6:eb:ef:62:d8:ba:4b:16:51:63:8a:f8:c3:8b:ad:
66:2b:58:79:ab:97:80:26:a0:de:45:b0:ec:61:f0:1d:49:55:
77:55:76:59:78:d5:e6:d0:cf:71:d7:40:f1:87:89:ec:94:f2:
6a:a6:06:12:11:36:b8:81:ff:db:45:b1:69:92:f3:b1:26:d4:
a9:39:e4:ec:3f:be:cc:d3:88:02:d9:82:b8:21:cb:dd:3c:fa:
15:78:c2:11:8f:11:59:44:15:1a:42:4f:72:c5:64:77:52:ee:
5e:82:4d:1b:56:c8:d7:57:5c:a0:b8:81:f1:aa:c1:81:17:74:
81:f0:69:dc:ea:4c:e4:88:78:39:89:cf:01:50:87:7d:07:40:
3c:97:c3:0f:64:43:25:45:e7:5c:5d:c0:70:21:f1:48:b6:1a:
31:b2:ae:3b:ec:7e:99:df:d7:41:88:26:76:1b:87:a2:7b:c0:
ca:81:99:33:81:55:ba:d8:0c:df:b1:38:43:c5:f3:9c:55:32:
b0:f4:a5:28:ba:8a:b5:d5:be:11:ac:a0:d2:7a:2a:fa:11:5d:
73:14:82:50:38:ca:d1:9c:71:31:c6:45:ef:b0:30:c3:ab:42:
a1:37:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:16:42 2026 by rpki-client