
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json)
Hash identifier: 20e3FKbzxwrVZgdkctRQLASwGtrvMbALlEUsXytbN7Y=
Subject key identifier: 43:61:1E:D3:9C:96:39:3D:F5:C6:7E:0F:8F:AC:2B:44:B7:5B:20:80
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial: 112B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
Manifest number: 1107
Signing time: Fri 04 Sep 2026 17:15:03 +0000
Manifest this update: Fri 04 Sep 2026 17:15:02 +0000
Manifest next update: Fri 11 Sep 2026 17:15:02 +0000
Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: yGqhKE3O1CcqSFmXQWwgNzN9pT263WRkHIKcp/qxY6g=)
2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=)
3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=)
4: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=)
5: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Validity
Not Before: Sep 4 17:15:02 2026 GMT
Not After : Sep 11 17:15:02 2026 GMT
Subject: CN=6a9afc97-ff60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:4a:e7:45:3d:15:f8:e2:a2:5f:63:c0:21:
f6:30:12:0f:b3:61:70:d7:f5:79:76:50:77:2a:76:
6e:76:93:e9:84:f8:6c:30:7e:bd:c6:b9:e3:c3:0e:
ad:75:8b:26:27:92:55:eb:38:cd:a4:d1:5a:b7:05:
52:ab:cc:90:a3:3b:6f:f1:90:d3:f6:6e:8e:9c:e6:
aa:48:e1:f5:b6:69:65:48:e5:20:94:6c:7a:33:ed:
9f:45:e2:22:c3:aa:a5:0f:b7:b1:e7:06:74:93:ca:
a2:77:71:30:ca:f8:c2:0d:94:b1:cb:fe:05:cc:88:
16:2a:0f:27:00:69:cd:4a:7d:1e:b6:af:43:c4:7c:
f1:4c:c6:86:c1:f1:a0:90:a4:c1:32:4e:79:ce:18:
3f:94:fd:67:7f:9a:e2:f5:71:02:33:48:b1:80:a7:
b8:73:cf:67:e7:0e:a2:d9:95:65:36:41:0e:58:7a:
e2:fb:22:49:2f:a0:66:09:a7:82:e8:4c:67:e9:d7:
08:38:1e:cd:e1:14:98:9e:00:27:c7:51:ce:c6:7f:
18:ca:da:ff:7e:f8:75:9d:13:3c:36:2b:cb:81:a6:
9e:57:3d:a1:25:5d:8d:4b:50:27:7a:f8:cf:be:77:
48:97:7d:f7:14:3e:ba:ec:8a:91:b6:5a:97:bb:e0:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:1E:D3:9C:96:39:3D:F5:C6:7E:0F:8F:AC:2B:44:B7:5B:20:80
X509v3 Authority Key Identifier:
keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f1:05:e0:5e:1f:ec:da:fa:c4:f7:0c:09:16:c0:92:2e:81:
5d:34:a2:a9:8e:96:5b:19:9c:3c:79:f5:09:fb:09:12:5c:b4:
7a:61:2a:7c:90:e2:0e:ca:9a:ad:32:09:7b:a5:fb:8f:65:2a:
e5:d7:ec:99:69:c1:fb:b6:0b:bf:0b:16:8b:63:47:ad:2c:41:
81:17:2f:76:76:fd:44:f3:94:c9:1f:43:1f:f5:95:d0:17:df:
b8:06:e5:5d:85:fa:03:1b:3c:2f:0b:0f:d6:de:05:a4:b7:9a:
5c:60:c8:87:ba:33:39:94:c0:d3:3f:00:8c:2f:e8:bb:0c:e0:
f1:b5:47:1c:12:40:49:ce:d0:8f:15:0b:a7:97:51:7e:ac:9f:
01:10:15:da:f2:40:6e:7c:75:90:73:b9:55:bb:a3:3e:cf:46:
e9:6c:e2:4b:c4:2e:b3:9f:8a:b8:ca:ea:e4:37:7e:76:25:f8:
91:04:23:89:07:3b:82:95:16:9e:17:9c:4f:d4:c4:15:a5:70:
3a:9b:e7:33:8a:5e:ce:79:c2:47:5a:02:b4:d9:f3:8c:4c:f8:
fe:a8:b5:7f:80:b5:8c:77:95:99:71:2e:b6:8f:8e:36:94:0f:
01:80:cc:04:5a:e5:49:0e:fe:51:89:a8:01:05:2d:b4:b3:93:
80:09:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:04:49 2026 by rpki-client