
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json)
Hash identifier: 02KhYhxPsTXBde+N77nuWoo2s3KJpPr3iHx5CqlLtf0=
Subject key identifier: 22:3C:53:CD:90:9C:9F:52:62:E6:94:48:55:7D:29:A7:76:05:3F:46
Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
Manifest number: 0154
Signing time: Mon 05 Oct 2026 05:36:49 +0000
Manifest this update: Mon 05 Oct 2026 05:36:49 +0000
Manifest next update: Mon 12 Oct 2026 05:36:49 +0000
Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: rlgxURUvsmXG3gEa+lCwbbT/9Tdz4PCgA8883OBl8nY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Validity
Not Before: Oct 5 05:36:49 2026 GMT
Not After : Oct 12 05:36:49 2026 GMT
Subject: CN=6ac33771-5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:5e:5f:64:d5:e3:8b:34:3c:5a:55:ac:ce:
32:2c:0e:16:e3:35:e9:a1:f4:cf:15:af:a7:1d:aa:
e3:7e:be:3f:16:ab:4e:19:01:d6:cf:43:e7:71:12:
00:24:b2:1a:d0:e0:1b:11:fe:cc:b2:b8:3a:e7:57:
36:78:b9:33:6e:f2:e9:12:d8:88:8a:7d:f3:1b:01:
5f:3b:fc:d8:80:2c:66:15:13:f2:55:f4:3b:6d:89:
dd:21:36:0e:0a:c2:93:59:b3:4f:df:95:74:11:47:
15:ba:f4:59:99:3c:14:12:90:af:3a:78:d4:6e:54:
d6:85:bd:a8:50:3d:83:76:c1:70:e3:63:56:ac:da:
b9:76:20:38:2b:f3:9c:80:69:29:74:86:1a:90:f0:
d3:b0:2a:ed:62:e1:46:01:09:5f:c1:cf:47:95:90:
54:7b:28:1a:1e:c6:f0:d7:c5:92:4c:ae:70:d9:10:
38:34:d6:b9:ac:66:10:1f:9a:ed:13:51:c7:2e:15:
e0:a2:16:8b:6f:90:7f:72:31:36:e1:66:37:52:f1:
5d:c0:c4:5c:b6:e8:5c:3b:61:48:e8:66:cd:fe:04:
19:42:16:11:3b:66:ce:84:9c:c9:61:79:45:fc:23:
0b:9e:0d:57:4b:2d:28:b3:b7:e5:81:8d:8b:f2:1f:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3C:53:CD:90:9C:9F:52:62:E6:94:48:55:7D:29:A7:76:05:3F:46
X509v3 Authority Key Identifier:
keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a4:e2:d7:ac:66:80:b8:75:2f:fb:12:01:b1:63:59:1c:3f:
77:f3:fe:37:70:3c:83:6c:61:80:f5:91:68:5e:4d:36:56:d1:
93:6b:f1:47:22:db:99:91:0a:34:0b:19:ac:fa:de:14:f5:85:
05:6c:d7:cd:3c:55:7a:94:d7:2a:52:d3:bc:4e:a9:45:b6:a4:
51:0e:a7:b2:3e:fb:df:1a:0f:30:1f:81:42:45:2e:bc:92:f9:
02:8d:e3:76:47:01:ce:e2:f2:7d:22:d1:d6:02:07:46:00:30:
55:10:a0:bf:e5:45:32:55:cd:79:4b:57:54:40:8a:03:e3:19:
80:2f:a8:60:0c:27:d3:33:f8:7d:d9:57:ee:b4:5a:e2:e0:c9:
70:65:79:44:c9:cc:3f:4d:d0:e1:ed:e2:f1:f7:0b:ee:dd:39:
cb:a3:28:d4:7e:94:fd:e9:50:9c:0c:dd:6f:56:ab:b7:16:ae:
4b:f0:5a:89:e7:01:0e:9d:a1:36:8a:6f:5f:0b:b3:e1:be:8a:
55:94:7f:b9:d1:a6:89:27:b9:52:1d:91:ca:21:5b:df:8e:ad:
d3:c5:1c:9c:e2:9d:89:8e:6d:b6:11:9e:75:b1:63:5d:7c:ce:
17:17:5a:c8:13:99:64:b7:2a:01:3f:62:8b:d7:bf:d3:35:09:
53:9d:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:21:21 2026 by rpki-client