
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json)
Hash identifier: t5hU31+k/8GTSUIKkmkz1dH+JM2VrCQpGorRVmadMSU=
Subject key identifier: 34:55:A6:31:95:62:EA:37:CE:C7:91:2B:F8:FA:CE:FD:D0:98:1B:89
Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Certificate serial: 0276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
Manifest number: 026F
Signing time: Wed 07 Oct 2026 02:30:18 +0000
Manifest this update: Wed 07 Oct 2026 02:30:18 +0000
Manifest next update: Wed 14 Oct 2026 02:30:18 +0000
Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: 1e2SuCt99WjSlUlkVTLVdSGZ9GcijdW8GPzheiy8ehI=)
2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Validity
Not Before: Oct 7 02:30:18 2026 GMT
Not After : Oct 14 02:30:18 2026 GMT
Subject: CN=6ac5aeba-b9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:00:e2:81:38:46:b6:2f:17:23:73:10:85:
1e:8a:b0:31:e5:7c:d6:8d:45:0e:01:4f:b5:b6:e2:
29:31:6c:f4:05:db:3c:eb:1d:e6:4f:e7:f9:a6:cd:
a7:09:bf:87:61:16:b5:cb:a3:41:4b:7d:ca:05:29:
ac:a9:f8:d9:e9:ef:a6:78:8f:9a:b0:00:ca:3c:5a:
3d:26:71:89:5b:d8:f6:7b:a5:ad:2a:5e:a4:ea:60:
c2:60:9b:59:6e:56:c0:78:1f:bb:6b:56:25:56:ae:
6e:ea:4e:9f:f6:3e:a2:1d:1e:69:23:d7:01:ff:68:
da:92:6e:5b:e5:f9:af:38:c0:b5:75:59:d1:30:1f:
e3:9d:fc:41:d4:2c:1d:50:80:e5:1c:1f:40:82:51:
83:11:34:99:51:e4:99:e0:83:06:72:6f:f4:9b:d5:
17:9c:7c:57:55:2a:88:88:0a:ae:13:63:db:c1:7e:
ca:a0:e6:f3:a7:fc:88:c6:1e:c7:47:5c:4b:21:29:
38:41:41:8d:c6:63:fa:83:5a:f0:cc:14:fe:05:c0:
2a:5b:ff:89:2e:34:ce:7a:02:3b:04:36:89:f1:14:
7e:c1:77:f2:ba:7e:7c:17:de:ed:fb:86:9d:98:a3:
3a:41:fd:b6:25:f4:04:a0:6a:8f:9a:ba:1e:67:ba:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:55:A6:31:95:62:EA:37:CE:C7:91:2B:F8:FA:CE:FD:D0:98:1B:89
X509v3 Authority Key Identifier:
keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d2:bf:cd:12:a6:f3:8e:2e:d6:8a:47:28:7a:e1:d3:77:cc:
55:32:30:3b:ac:cd:5a:04:9d:bb:61:1b:c4:a6:93:ff:d0:bd:
39:0b:52:eb:04:6b:b4:e5:d8:03:ed:81:b2:34:67:e7:92:dd:
07:ca:b8:a2:5e:6b:02:07:ee:68:eb:a0:3c:d8:16:56:16:ec:
08:62:7c:1a:27:96:a1:69:4e:f4:4f:bf:b3:c8:9b:14:b6:ef:
cd:92:45:e3:ec:4b:af:5c:4e:40:35:fe:cd:ac:e1:b6:62:a4:
9a:21:14:ba:1d:6e:b8:d1:be:eb:50:33:7a:af:21:51:be:a9:
57:88:de:af:15:12:47:9b:78:a2:94:f1:c0:fb:92:3b:dc:bb:
e7:c2:8a:69:0b:97:00:47:e1:0b:f7:7f:dc:31:51:9a:b0:cd:
e6:50:9b:21:44:6b:4c:9d:67:19:28:e4:16:2b:82:ca:17:15:
c8:50:b0:c7:f2:0d:b2:0c:52:d5:bb:b8:18:45:95:1f:ed:4a:
8f:c5:8d:e7:9d:54:c5:92:a3:e5:4d:2e:62:a5:69:6f:c1:5b:
0d:f0:29:64:4f:b8:cb:28:40:f5:37:c4:83:c8:a3:77:c2:17:
d5:9c:f8:35:00:ff:3b:be:0f:ab:b1:88:35:7a:00:e6:b3:6e:
d0:bb:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:28:56 2026 by rpki-client