
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier: 5S9+ILk1WX2jfGGJuX6yfyyn/FulsawkARFxribKNKg=
Subject key identifier: EE:3A:57:58:FE:24:13:80:D1:D9:AD:12:F3:78:8C:B7:E5:17:3B:55
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number: 02B3
Signing time: Wed 07 Oct 2026 01:50:14 +0000
Manifest this update: Wed 07 Oct 2026 01:50:13 +0000
Manifest next update: Wed 14 Oct 2026 01:50:13 +0000
Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: o0AdkGBdaE7k91QtCftglqoAg5X9CtTnNsBbnblkD38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Validity
Not Before: Oct 7 01:50:13 2026 GMT
Not After : Oct 14 01:50:13 2026 GMT
Subject: CN=6ac5a556-67da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:e4:7b:db:90:f8:3f:d0:b3:da:f4:20:df:
48:cd:33:c5:cf:f6:6b:4a:14:11:61:8c:d1:bf:d5:
fd:c6:64:83:5d:86:99:93:a3:b1:11:b4:f8:8f:03:
96:85:a4:fd:c7:f2:26:64:e0:ac:60:21:8a:00:dc:
84:4c:f1:74:7e:79:f8:8f:9b:17:87:47:1e:0e:8a:
b4:7f:3b:af:db:40:39:f1:63:a0:f0:13:47:7f:81:
c9:7d:7f:20:f8:a7:90:f6:85:9e:77:71:c2:d3:6d:
d6:6c:86:4c:40:99:1a:8a:42:bb:4f:fa:8a:57:71:
34:f4:94:03:d5:1b:71:a8:c6:0b:70:7d:d1:7f:ff:
ed:48:79:94:af:bb:86:cc:67:e7:af:84:7d:a8:a4:
30:09:b6:41:7a:06:ca:ec:77:97:f1:e3:b1:e6:be:
cf:d0:fc:13:bf:b6:33:87:85:cc:05:53:39:f4:c8:
44:cb:2c:d5:55:12:82:92:6d:4a:a0:fb:ee:5d:80:
88:d7:a1:89:0e:d5:24:d4:7e:a1:a9:f4:3f:91:f0:
12:55:88:24:3e:62:0e:e1:6b:03:8a:c5:0b:d4:d1:
f6:74:c1:58:56:26:f9:74:92:1c:55:b9:a9:10:2a:
ec:b2:96:6e:eb:78:e9:db:8a:d6:18:e8:01:71:1c:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:57:58:FE:24:13:80:D1:D9:AD:12:F3:78:8C:B7:E5:17:3B:55
X509v3 Authority Key Identifier:
keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:44:6d:2f:79:7a:bc:d3:7f:42:d7:e1:ee:d4:b8:04:88:a6:
49:65:f9:03:a8:78:c5:2a:36:32:d6:1f:04:07:4c:72:2d:c6:
e1:6a:c9:92:94:16:d1:ee:09:9d:b8:71:97:f9:4e:84:7d:3b:
d1:4c:00:eb:67:4f:11:5b:77:52:eb:30:25:ca:64:2a:c6:fc:
1d:23:4b:ff:e7:16:41:6e:01:52:f5:05:90:86:f1:4d:d8:03:
1d:6f:20:73:c1:0b:20:9e:ae:e7:e3:5f:c4:64:2a:bb:29:f1:
d0:61:b2:2b:e1:f1:f1:1d:5d:4a:a4:38:0c:f4:27:5d:20:cf:
74:64:c9:bf:c4:38:13:79:da:53:8f:07:8c:80:a8:46:67:b3:
1a:51:a9:33:77:e0:54:45:9b:a1:f9:83:6c:a3:01:f3:34:83:
e4:94:d0:10:c1:7f:3e:bd:0a:88:53:97:7e:41:ae:bc:13:74:
6d:cc:03:62:67:37:52:4c:e7:c3:4a:a1:f2:7b:1d:f5:43:cd:
85:fc:90:99:94:e6:28:71:d6:07:a6:18:f5:7c:1d:bd:d0:fb:
72:55:9f:b2:ce:67:aa:45:08:b2:69:20:80:b7:a6:2f:1c:e5:
4f:e8:64:3e:31:35:2a:d0:53:40:f1:ab:28:8b:72:db:a4:36:
11:c2:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:35:02 2026 by rpki-client