
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
File: QidVkJNLMeOdgd28nAmFa39OWIQ.mft (raw, json)
Hash identifier: RuDH+aAQy+OHjG7MszIz92sJrMLLnnpjV7rYto3rFXY=
Subject key identifier: 64:D7:73:84:93:1C:DC:03:BF:78:04:CE:5E:25:43:5C:96:A2:67:18
Authority key identifier: 42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
Certificate issuer: /CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
Manifest number: 02E8
Signing time: Sat 03 Oct 2026 01:30:23 +0000
Manifest this update: Sat 03 Oct 2026 01:30:22 +0000
Manifest next update: Sat 10 Oct 2026 01:30:22 +0000
Files and hashes: 1: QidVkJNLMeOdgd28nAmFa39OWIQ.crl (hash: jWwMcIAWj/LzNxaRPtfd5DCkTkwG5QnLTFoeug/z88o=)
2: 754A1888490D11ED95C7C86EC4F9AE02.roa (hash: Qahj6ijZlV0ENHSi7W3OwZGiJhU6W6dxMtqWIMdxIl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC009, serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Validity
Not Before: Oct 3 01:30:22 2026 GMT
Not After : Oct 10 01:30:22 2026 GMT
Subject: CN=6ac05aaf-5485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:6b:ac:f3:58:3d:ed:b2:9b:9b:eb:3e:39:
20:c3:ea:64:f1:1b:45:b0:bf:bb:09:af:3e:dc:03:
91:d1:a4:ba:70:93:4b:d8:f3:94:29:b2:bd:c2:00:
87:d1:55:f4:f1:3e:9d:62:21:ea:47:32:bc:84:de:
92:7d:90:c5:11:64:ad:a0:21:fa:b6:d0:4e:fe:a4:
bf:07:3e:5f:c0:99:1b:69:9f:d3:72:82:49:f8:d8:
78:73:7e:04:2f:71:21:b0:21:19:44:21:41:76:eb:
85:75:78:4b:45:de:b6:27:d7:21:02:ae:c0:a4:b0:
bb:ed:c0:8f:09:61:14:f3:51:bf:57:e6:1b:05:e9:
da:32:e2:91:49:5e:97:c9:fa:cc:a0:1b:a2:bd:a1:
17:c5:d0:19:3c:20:b4:ab:c1:9a:59:f1:4e:5f:94:
7d:7c:2d:30:24:5d:04:49:4a:d2:54:62:89:ea:38:
f1:5e:a2:49:c8:d6:f6:bf:e3:6b:ff:74:67:99:c6:
a5:a6:59:a9:e2:59:b5:65:ea:00:62:73:52:7e:94:
de:f1:8b:7d:64:8c:80:77:a3:da:2b:f6:75:21:3f:
9f:d0:26:99:59:d0:01:42:a5:5d:f8:8a:38:6c:54:
4b:7e:c0:26:5b:76:9e:2a:20:bc:e2:31:73:b9:64:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D7:73:84:93:1C:DC:03:BF:78:04:CE:5E:25:43:5C:96:A2:67:18
X509v3 Authority Key Identifier:
keyid:42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:d4:26:47:76:56:26:03:72:aa:25:69:ef:85:70:09:df:
d1:b9:dd:6f:4e:7a:51:73:9a:9a:c1:9b:fe:45:ed:fe:b7:31:
d7:01:15:af:9c:13:aa:67:08:dd:50:0b:57:05:e7:fd:e3:48:
48:18:30:85:06:57:d2:05:e5:f8:a7:b8:c2:e9:e5:ba:c4:e7:
1d:a3:62:72:95:16:4e:95:68:cc:aa:40:74:6b:0f:07:f7:df:
d3:f4:3f:ab:96:85:a0:b4:bd:ee:fc:86:0b:b1:d5:a5:b3:ad:
33:12:61:18:bb:b5:83:47:a1:14:6a:b2:83:b9:57:d8:cb:c1:
7a:5d:71:cd:8d:ea:ac:65:d9:6a:44:40:f3:74:e6:c4:cc:c0:
da:ef:a1:82:d2:bb:db:ba:6b:bd:39:33:b7:d7:fe:3c:6f:29:
c3:86:a7:8d:f2:53:5a:12:58:a2:ef:92:1c:71:64:86:47:c9:
7c:7b:52:3d:a2:5f:6c:06:8e:cd:9c:38:f6:61:70:61:a3:3e:
aa:0b:8c:2d:a6:6b:89:42:04:54:33:e9:18:c8:0b:50:f0:b8:
43:dc:c6:1b:86:23:23:c5:38:6d:ab:64:d8:97:44:84:f5:dd:
09:fb:4c:fc:4f:4c:f5:f4:ec:cf:dc:68:9f:fd:c5:d2:36:48:
f1:c2:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:19 2026 by rpki-client