
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
File: Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft (raw, json)
Hash identifier: ukA3ccqWR5E3BEeGOfJB1/vnC2joIhm+zNeTEM1dRaA=
Subject key identifier: 34:42:A1:19:F5:CA:40:A9:CC:33:4C:1E:FB:FE:24:B2:BE:EE:15:B3
Authority key identifier: 42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
Certificate issuer: /CN=A91D7818/serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
Manifest number: 1B
Signing time: Tue 27 Oct 2026 09:16:20 +0000
Manifest this update: Tue 27 Oct 2026 09:16:19 +0000
Manifest next update: Tue 03 Nov 2026 09:16:19 +0000
Files and hashes: 1: Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl (hash: sOauMoFcivKvJXrURNVi1swXA2tMEZhTDHJq3OMLu68=)
2: DEA91CF8AA9C11F19F04260F3311F970.roa (hash: SCbJOwXSWDEjztL6+Kzjl8eS8WRrj5FuN9JXi9rj2W8=)
3: DD890BBCAA9C11F19F04260F3311F970.roa (hash: dc58Ik+rvtv7DPEkUFFu4gn25qgDCCMkoi43G75u9yg=)
4: DF68D5ACAA9C11F19F04260F3311F970.roa (hash: WPsEj0kc/u7fp3yWYz5NbDeFJGi70xZk5MXwb7AW1SU=)
5: DE194D08AA9C11F19F04260F3311F970.roa (hash: sjmWl1oslUuNyOaGiFybs67KITawAWqRvbDugu37hTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 09:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7818, serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Validity
Not Before: Oct 27 09:16:19 2026 GMT
Not After : Nov 3 09:16:19 2026 GMT
Subject: CN=6ae06be4-4c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:53:6f:fc:12:bd:5b:4f:21:7f:13:68:f0:11:
c5:19:b7:6f:a3:59:61:ab:a6:ee:37:18:5f:1b:04:
ec:c4:0f:b6:3c:f5:67:7a:77:37:6a:2d:fb:04:36:
bb:78:39:70:80:ea:61:1a:73:27:62:44:0e:af:b7:
cc:de:dc:98:5e:c6:a3:09:b1:46:46:38:55:04:78:
90:60:5d:89:09:d0:ee:45:e0:e7:f0:c3:90:2e:7a:
96:0d:93:4f:b9:82:b7:7d:15:03:06:cd:b6:b4:81:
36:ae:b2:7d:6b:53:9e:b1:e4:62:5b:1e:74:df:e6:
8d:7f:84:f5:e3:c1:60:4d:49:10:a8:e2:80:42:4b:
17:2f:ca:01:26:43:47:c0:9d:1b:07:74:2e:90:28:
4c:34:81:d4:f7:e0:dd:ca:49:9a:68:29:6f:98:a0:
78:5f:4c:eb:15:06:2b:05:2c:5d:2d:f5:36:5a:cd:
74:35:df:01:a1:26:b6:9c:91:e7:c9:94:d2:f8:af:
fb:71:0d:de:48:85:d6:f1:04:4d:aa:25:2a:15:de:
10:dd:f9:e4:81:d1:21:c7:7e:7a:8f:3d:cf:87:15:
f9:23:8b:a8:e7:ce:9e:85:25:b7:82:1f:fe:f2:fd:
61:ea:87:7a:8d:b8:92:56:65:a1:2e:8d:44:1b:55:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:A1:19:F5:CA:40:A9:CC:33:4C:1E:FB:FE:24:B2:BE:EE:15:B3
X509v3 Authority Key Identifier:
keyid:42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:53:b4:07:58:b1:95:f8:37:19:76:8d:a4:a1:ad:8c:5f:46:
90:da:c0:88:fe:ac:98:21:af:2b:30:38:ab:8b:96:ce:f1:a7:
88:6e:5c:20:55:52:2b:68:00:2c:24:68:7f:89:a9:6c:21:28:
02:01:f7:65:32:dd:3b:77:a0:e0:ec:37:a6:a8:6a:61:04:8d:
9a:00:1e:19:3c:2a:45:4c:e2:e9:e0:4d:fd:e3:29:8a:a2:86:
b6:06:19:54:d2:b0:e7:b4:9c:cb:8a:c7:af:45:f3:03:bb:2e:
1a:98:15:0c:9f:cb:8d:e5:89:89:57:a2:03:ae:cc:51:c7:0f:
e6:ff:6b:d9:eb:da:4a:e6:6d:de:ed:37:95:e4:16:df:2e:13:
6c:f9:84:f2:2c:65:9f:48:b8:ef:4a:4d:9d:92:8a:6d:a2:f8:
50:ba:88:a7:77:4b:55:73:fe:86:97:ee:99:21:97:15:ca:91:
21:94:2f:33:01:dd:7e:d3:66:78:b1:8e:8d:a6:0d:9c:a0:a8:
5c:61:71:5d:70:97:dd:57:7d:cb:80:b5:d1:a3:56:72:f6:e6:
55:27:d3:cf:f6:df:35:23:ff:be:f3:4e:b8:b9:19:58:cb:91:
d6:5e:43:f2:1c:a5:57:6b:aa:5b:94:81:76:37:ce:00:2f:9c:
30:3b:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:25:59 2026 by rpki-client