
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier: Fj6gz60sWEp8eIH4nDb+JoPgw23paD1RD3enZc7SEIU=
Subject key identifier: E8:9A:18:A5:83:2B:F0:04:6B:2A:1A:29:68:6C:4E:6C:85:62:57:46
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number: 027A
Signing time: Mon 05 Oct 2026 02:14:32 +0000
Manifest this update: Mon 05 Oct 2026 02:14:31 +0000
Manifest next update: Mon 12 Oct 2026 02:14:31 +0000
Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: eN8sEYttxohhJiS4/IoFAJOTlorIlm0jPLgWziSYOHQ=)
2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: gp5WZJBdG8buH2FoAFWLx0g28D8rX+R/fO2EnJ+4Rtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Validity
Not Before: Oct 5 02:14:31 2026 GMT
Not After : Oct 12 02:14:31 2026 GMT
Subject: CN=6ac30808-13de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:35:cc:d8:30:52:c7:33:25:d4:c3:b6:91:
87:e0:87:0d:61:77:54:f1:22:d8:b2:86:99:9a:52:
00:78:a4:42:a9:6f:68:af:29:d7:3e:8d:14:04:e4:
b3:01:93:c2:16:90:ff:89:00:92:0c:21:81:ad:15:
69:b3:c8:4b:1b:25:ab:24:32:78:97:8a:d2:f3:ff:
c0:99:a2:94:ca:97:65:7a:20:e3:57:00:09:3a:d8:
d5:83:43:9e:0d:bf:f9:42:45:ea:8a:6b:b9:43:a7:
1b:e6:05:73:72:10:4c:73:4b:e9:63:9f:57:24:bd:
c4:e5:00:64:f5:0b:6b:af:ce:23:1f:3a:9d:22:7d:
87:db:84:86:6f:54:79:17:73:06:88:38:f1:b6:87:
65:06:b1:c5:cf:17:c3:3b:22:02:0e:2c:bb:fe:c1:
24:7e:98:65:2b:5b:7c:26:d1:e7:5e:67:1e:c7:7a:
b7:42:7b:26:10:68:99:60:62:5a:60:38:3d:20:ca:
ef:ba:6d:f5:83:01:7d:83:ce:58:a5:e7:f3:2e:5f:
61:c0:f2:37:69:5b:78:67:bd:da:95:3f:30:1c:e1:
84:6b:c4:23:22:d8:9f:db:32:47:f1:50:ff:1a:48:
fa:64:74:6a:2d:6d:59:7c:99:e7:c2:e5:dc:3c:d3:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:18:A5:83:2B:F0:04:6B:2A:1A:29:68:6C:4E:6C:85:62:57:46
X509v3 Authority Key Identifier:
keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:52:ee:53:69:9c:d3:74:a6:68:a8:27:44:10:09:20:bd:98:
dd:f0:54:a3:be:79:3a:58:e2:c7:a3:a8:6f:73:d3:91:11:f5:
20:6f:84:48:65:ce:c3:be:db:55:9d:ca:3e:6d:2e:95:78:e5:
b2:4b:c0:58:75:1a:78:69:92:46:7c:ee:82:e7:25:f8:75:07:
31:1e:e1:5f:2a:df:ff:7a:9a:4f:cb:e5:8f:20:3a:f4:7d:9d:
25:25:9a:57:af:54:39:6e:f5:fb:43:cd:65:52:3d:fe:1a:46:
c7:3e:e6:12:25:97:d3:a0:b5:bf:a4:6f:dc:a0:98:fe:91:9d:
2f:7e:dd:2d:e4:f2:ae:94:6e:07:c9:75:9c:86:ff:e8:65:de:
9e:60:8c:d7:79:bc:3c:37:bc:93:2f:8e:46:49:e8:9b:33:8e:
07:c8:f6:92:c5:67:1a:73:2f:e2:42:84:60:ac:71:fe:0e:97:
89:9e:7e:22:2b:3e:80:2f:8a:28:6c:cc:3c:14:c9:4e:1e:1d:
9a:6c:89:a6:ab:af:02:ed:e0:76:f6:ef:5b:34:ff:93:b0:ff:
bc:6e:8c:69:fe:88:ff:9b:a4:00:6e:06:37:1b:18:41:ea:2f:
7d:ff:72:9b:78:62:f3:8f:96:54:f6:2d:0b:71:95:54:34:60:
61:87:6d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:15 2026 by rpki-client