
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier: zxCwYJ6YnveFElIUkV9Wdjr250enatPZ5NkfEyWQEME=
Subject key identifier: DC:68:EB:9C:6F:64:2C:9A:2A:05:19:67:BF:29:25:CE:D2:BE:8D:EC
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial: 0AAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number: 0A98
Signing time: Thu 10 Sep 2026 19:31:15 +0000
Manifest this update: Thu 10 Sep 2026 19:31:14 +0000
Manifest next update: Thu 17 Sep 2026 19:31:14 +0000
Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: q50cKyiunQ58UdBmVO5tudeWdajg8GwS8MXwLuHJ4wg=)
2: -MDpMwooKlC4cQ11sxMasnukqjE.asa (hash: aI8XaEF93rscIyRJ9IGwHhTTopcBsHgO5XCQV5/Qw40=)
3: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: BML+CpNfWIhxgmjTMLZ//EdSsz/6Hi/QXJXWPhL7TSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2734 (0xaae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Validity
Not Before: Sep 10 19:31:14 2026 GMT
Not After : Sep 17 19:31:14 2026 GMT
Subject: CN=6aa30583-c742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:38:d1:76:58:1c:c4:65:66:bd:a7:d6:b9:
9b:58:45:04:eb:06:bf:a2:c1:46:d5:ba:3c:77:6c:
93:4b:8b:1b:cc:be:dd:4c:20:27:18:25:c3:5e:2e:
03:98:dc:09:c1:fd:24:3e:3e:91:58:b3:06:b3:33:
51:cb:59:ff:d1:f2:09:f0:2e:22:f1:9c:3d:32:50:
60:92:b2:a6:94:0f:24:3b:37:25:b9:f1:e0:52:10:
d8:82:79:42:53:eb:0e:73:ac:9b:94:e5:b1:bf:c4:
1c:a9:94:bc:e3:5d:e3:ee:ee:2e:73:3b:b4:fa:a8:
55:75:35:e7:72:64:95:a3:fb:8f:f6:d8:72:d0:8e:
a5:be:53:4b:d4:16:93:67:f7:38:24:8d:3b:18:72:
66:90:52:1f:01:be:1e:90:d9:f9:1a:6e:32:79:1e:
98:7a:d6:57:a2:dc:51:82:73:6b:c1:d9:98:7b:7f:
5e:16:a3:44:8a:e2:6c:1e:0e:8e:5c:b9:6c:79:13:
22:96:1f:4f:0a:0c:1c:65:81:d6:e0:5c:0a:06:61:
06:f4:05:ae:1c:23:6e:ce:d1:0a:7e:c2:49:74:3e:
ef:f3:f6:f8:c5:86:e6:c3:ba:aa:c9:7e:46:ec:50:
31:f7:4e:16:55:4a:ed:31:c3:51:d0:61:f3:e7:06:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:68:EB:9C:6F:64:2C:9A:2A:05:19:67:BF:29:25:CE:D2:BE:8D:EC
X509v3 Authority Key Identifier:
keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0d:a5:b1:62:e9:81:d8:0b:ec:89:77:58:ce:49:1c:42:e9:
8d:a3:47:84:7a:e4:47:c6:1a:ee:c6:a1:db:0e:24:e2:7f:83:
03:e4:6d:40:d7:32:c1:e0:ce:c2:dc:2b:fa:02:99:5c:47:f1:
da:df:bc:7d:0f:7a:08:69:39:ee:30:5d:27:3b:68:1e:93:45:
0c:2b:4f:ce:3d:0a:e9:3c:d9:6d:72:67:68:07:e6:2a:8c:56:
58:75:a5:63:3a:3c:0d:49:47:ae:d1:68:df:64:89:e2:82:1b:
54:1c:27:32:76:59:ef:99:6b:b0:6d:e8:5d:5f:c3:d0:63:94:
92:de:bc:9d:61:a5:1e:8b:99:f5:cc:da:55:d3:6f:9a:c1:f2:
15:4c:8a:da:e4:c3:72:78:c0:8f:d4:cc:29:77:65:73:fe:48:
e5:44:f7:e6:3e:2f:fb:6a:52:6c:a5:af:7e:17:9a:3d:c7:cb:
a6:0b:74:c6:93:a3:bd:41:1b:ad:5b:64:d5:00:62:de:33:a7:
dd:fc:db:c5:bd:1f:f0:08:d5:86:f8:03:ed:f8:9e:52:07:71:
c1:51:63:b1:4f:eb:59:3d:fa:e3:ec:93:fa:e2:da:77:5b:54:
70:28:40:a8:2e:e0:b4:4f:eb:37:55:1d:55:16:17:2d:27:44:
97:9a:bd:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5
MzYxQTJGNDMwHhcNMjYwOTEwMTkzMTE0WhcNMjYwOTE3MTkzMTE0WjAYMRYwFAYD
VQQDEw02YWEzMDU4My1jNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA33A40XZYHMRlZr2n1rmbWEUE6wa/osFG1bo8d2yTS4sbzL7dTCAnGCXDXi4D
mNwJwf0kPj6RWLMGszNRy1n/0fIJ8C4i8Zw9MlBgkrKmlA8kOzclufHgUhDYgnlC
U+sOc6yblOWxv8QcqZS8413j7u4uczu0+qhVdTXncmSVo/uP9thy0I6lvlNL1BaT
Z/c4JI07GHJmkFIfAb4ekNn5Gm4yeR6YetZXotxRgnNrwdmYe39eFqNEiuJsHg6O
XLlseRMilh9PCgwcZYHW4FwKBmEG9AWuHCNuztEKfsJJdD7v8/b4xYbmw7qqyX5G
7FAx904WVUrtMcNR0GHz5wa4nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxo65xv
ZCyaKgUZZ78pJc7Svo3sMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB
RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV
MWNveHE1OS1oRGVUWWFMME0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXg2lsWLpgdgL7Il3WM5JHELpjaNHhHrkR8Ya7sah2w4k4n+DA+RtQNcyweDO
wtwr+gKZXEfx2t+8fQ96CGk57jBdJztoHpNFDCtPzj0K6TzZbXJnaAfmKoxWWHWl
Yzo8DUlHrtFo32SJ4oIbVBwnMnZZ75lrsG3oXV/D0GOUkt68nWGlHouZ9czaVdNv
msHyFUyK2uTDcnjAj9TMKXdlc/5I5UT35j4v+2pSbKWvfheaPcfLpgt0xpOjvUEb
rVtk1QBi3jOn3fzbxb0f8AjVhvgD7fieUgdxwVFjsU/rWT364+yT+uLad1tUcChA
qC7gtE/rN1UdVRYXLSdEl5q9jw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:54:33 2026 by rpki-client