
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json)
Hash identifier: bzOcJkL3x2yAzHslpGwQExLRllCJWD5xnFV0cnbccz8=
Subject key identifier: 11:C0:80:A1:98:E2:7D:17:78:7E:C8:D6:FB:0D:E6:1A:A0:A4:19:34
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial: 17C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
Manifest number: 17AE
Signing time: Sun 04 Oct 2026 16:35:19 +0000
Manifest this update: Sun 04 Oct 2026 16:35:18 +0000
Manifest next update: Sun 11 Oct 2026 16:35:18 +0000
Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: XF6kuXI1C5zVTtdWTGTMcBQmcIOZlCKSOtPRaAD2Icw=)
2: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: lZtSqEluaQyvKzJzwijqNxqveUY7rB8QQXqYRdPds0g=)
3: BAD2356E153411E892E6D468C4F9AE02.roa (hash: Uh0ufQqszTK1hbj5HShNIOMuiOfZ3FBUNVqfFJVggoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6084 (0x17c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Validity
Not Before: Oct 4 16:35:18 2026 GMT
Not After : Oct 11 16:35:18 2026 GMT
Subject: CN=6ac28047-b8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:0b:1e:ae:71:04:9c:52:ab:a9:02:71:b6:
6d:8b:ee:e1:6d:9f:6e:10:b0:ce:ff:f3:1a:4b:2c:
06:7a:dd:aa:66:8a:31:01:16:bf:5c:ed:aa:d7:bd:
a1:1d:0c:96:a7:70:62:d6:6c:cf:f7:2f:08:f4:02:
ee:a5:60:1a:5a:0e:b9:df:52:b8:fe:3b:1f:9f:6d:
58:22:05:af:89:60:e2:6d:4b:e0:f5:c7:e6:dc:0d:
d9:4c:27:30:22:5f:14:4b:b9:b3:22:3e:6e:12:a7:
07:36:dd:26:b4:31:2c:a2:2d:65:e8:4c:44:d7:56:
e4:20:0d:f4:65:20:67:13:2b:93:da:f0:ff:e2:a2:
e4:79:ab:ec:10:99:29:6b:62:e9:3b:a2:98:fa:35:
b2:62:a8:4a:a1:bf:17:e3:8f:69:04:ae:8f:28:ef:
ed:0b:14:76:c5:29:0f:e6:42:04:0d:cb:44:cd:ef:
d9:3b:00:8b:a5:85:78:34:19:c0:f7:13:9e:4b:96:
3a:39:9b:b6:b3:75:11:6a:23:78:5e:60:82:f6:1f:
d8:55:a5:6f:7a:e0:d3:51:d2:a6:6c:ff:d4:14:61:
62:02:06:8a:de:ce:26:13:b2:b5:49:44:f9:db:9c:
d6:15:b1:b7:04:8a:22:f2:66:60:b0:8b:0d:55:0d:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:80:A1:98:E2:7D:17:78:7E:C8:D6:FB:0D:E6:1A:A0:A4:19:34
X509v3 Authority Key Identifier:
keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c8:e6:d6:d7:ee:48:c1:11:97:aa:b1:9b:cd:f6:40:c4:fa:
4d:6e:f8:22:58:14:77:66:62:78:ca:1b:8c:91:0c:d6:f9:2b:
0d:03:5e:94:07:15:ad:e8:e5:95:6b:ad:1f:d6:e8:5d:f7:9c:
bd:18:c5:39:2c:8d:01:fd:14:d8:66:25:df:21:1f:25:d7:03:
94:2c:ec:d8:ae:13:8b:b1:67:13:a9:40:e5:02:2b:a1:3e:c5:
49:45:4f:f1:e3:88:19:77:f9:55:35:dc:50:59:98:a5:9d:f3:
21:e0:00:4e:06:77:cd:4e:03:8d:9a:9b:d7:96:17:64:ab:c2:
a9:ba:21:ea:71:08:41:7e:5e:67:14:28:30:40:b5:9b:db:63:
4c:07:07:66:cf:43:ca:a3:8a:88:c6:b7:a8:1d:5a:41:64:5f:
dc:9b:26:79:2b:8d:f3:99:a6:21:f2:33:a5:91:6b:b1:37:a5:
d6:85:79:b8:d5:92:5f:d9:ea:87:3d:f3:26:39:f2:8e:0d:36:
25:e6:7b:a6:10:9f:6d:74:f1:99:08:31:5d:6f:29:48:0c:30:
fd:79:34:79:ab:99:61:9c:af:5b:c4:f1:9d:5e:fd:0a:0f:03:
db:0e:9a:1f:1f:88:05:33:12:80:26:69:42:ce:57:98:54:13:
1f:dc:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:21:30 2026 by rpki-client