
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: Vw73Btf4wtn35SF9QVGcGvF028YuzuN+c+zxdN8tp/0=
Subject key identifier: B0:69:57:A2:EA:32:8B:C2:AC:91:54:5E:96:2C:08:BD:C9:0E:39:24
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 0709
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 06E2
Signing time: Sat 10 Oct 2026 22:23:00 +0000
Manifest this update: Sat 10 Oct 2026 22:22:59 +0000
Manifest next update: Sat 17 Oct 2026 22:22:59 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: r/JRdh3+5Mvsc17LNDLoYtjM7Rm8XhXMthkyxZzIuJ8=)
2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: n0xr/j2GP/MNMRFa7lf1tZ5ywaM4ttYHv9arSET9eaI=)
3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: EFEc1hVxBqjFK9K+ebpd9IGqjsMNpFNe4DREx1aJacU=)
4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: rievK77P9KymGMboQx/oO1KggXD+jRQIf3Q9O4SujfY=)
5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: Z+LqzSewpL/vsWqtL6Yo0e38jLGpTvdUpJpiQgt4Cd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1801 (0x709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Oct 10 22:22:59 2026 GMT
Not After : Oct 17 22:22:59 2026 GMT
Subject: CN=6acabac3-dbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:c0:00:c9:80:2c:05:4b:a2:15:95:21:2a:
d7:e7:c1:69:9c:9e:97:97:26:53:f6:8d:e7:7c:ed:
a0:d4:39:05:6c:ac:1a:13:51:4f:9b:72:81:ad:a2:
9d:d1:fb:3c:ab:85:c2:4b:73:08:b7:96:8b:ca:09:
20:b7:14:58:7e:f0:4f:6b:7c:4e:4e:d7:d5:d4:b1:
d1:d2:84:1f:5e:29:c1:30:cc:83:25:b5:96:93:31:
c2:59:23:05:4e:73:72:5c:1d:56:f6:ae:6b:af:6b:
3a:02:1b:8b:df:b2:ee:a5:e8:4f:03:87:95:b7:a2:
fa:ee:fd:3f:07:c7:a9:e6:7f:8c:7c:6e:af:f9:22:
a3:9a:ba:2b:6c:2c:1c:63:b9:7c:05:e3:21:0e:1e:
65:df:9d:4d:28:7b:cc:2f:93:0c:d9:43:3f:ba:50:
f3:dc:2a:a7:73:67:02:c3:da:23:4d:f0:4e:bb:04:
c9:57:0e:ce:19:13:7f:a4:f8:1b:75:b5:22:d8:ba:
60:86:0d:31:f8:ad:83:b7:d5:01:f1:c6:0f:e9:36:
1a:fc:15:72:8b:01:00:0c:61:84:29:21:1b:03:13:
bd:1b:d6:24:db:2c:20:19:9e:4c:a8:f5:87:e1:d9:
0b:35:cb:4f:aa:74:21:18:b6:47:3b:a5:d8:5b:85:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:69:57:A2:EA:32:8B:C2:AC:91:54:5E:96:2C:08:BD:C9:0E:39:24
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:40:8c:c1:3a:40:40:c2:f3:4d:65:c8:c7:93:dc:2f:0a:6d:
23:78:a8:e3:21:a8:4e:86:7f:f0:41:f4:f4:19:f8:6c:19:7d:
90:f4:e1:3f:68:8b:2b:f4:5f:f1:e2:7c:74:a5:57:20:dc:92:
cf:cc:4e:28:6e:07:23:46:2d:24:32:f6:ce:b2:a5:66:fd:55:
b5:da:8d:68:29:8e:ac:48:e4:1c:20:6b:f1:ad:b1:aa:9f:6f:
a9:3a:3d:2a:f0:c2:a5:55:7f:a8:bd:79:21:f8:ed:53:2f:85:
8f:8c:a5:f7:9e:9b:de:48:22:2c:ea:1f:eb:43:f1:ba:94:ef:
ba:6f:e4:af:ca:cf:e0:f2:f3:70:12:0e:28:bc:0c:7c:f6:1f:
94:67:9f:ba:30:93:12:16:30:25:cc:3d:6b:c4:03:ee:1f:33:
e3:5a:57:bc:9b:78:6e:23:fe:a3:d5:ac:f9:2f:22:cc:62:ed:
40:a0:04:41:0d:49:be:58:b2:df:e4:88:0c:f6:b6:ca:8f:9b:
c6:9c:c2:fb:e7:0a:46:19:0b:d6:fb:cb:c3:c2:8b:56:4f:43:
ca:11:07:02:f1:83:89:61:58:30:48:eb:8d:07:0c:1b:b6:87:
32:e9:0c:e5:35:10:a4:51:18:9e:5c:b5:88:4f:08:50:67:27:
73:88:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:37:40 2026 by rpki-client