
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
File: rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json)
Hash identifier: MxeIXeauXXl+eTGTh91RsY+7sIhCfxb1k9RNp8+nOuE=
Subject key identifier: AC:39:B5:80:29:AE:CC:84:8C:BD:1F:D1:3B:CE:A1:99:47:1F:90:5E
Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B
Certificate issuer: /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
Manifest number: 9A
Signing time: Fri 09 Oct 2026 08:10:21 +0000
Manifest this update: Fri 09 Oct 2026 08:10:21 +0000
Manifest next update: Fri 16 Oct 2026 08:10:21 +0000
Files and hashes: 1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: UEl+8WbN+VutrD9qakN97uSez2uAcurk4eI3l3hFSnk=)
2: 38D21898F49411F08DD0DDBA746F56BC.roa (hash: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo=)
3: 81346F96F49411F0BFEF52BD746F56BC.roa (hash: KtQdT3wKXi5XLWS0IbUBySou/W4dYxSu83urtoPZVvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl
rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B
Validity
Not Before: Oct 9 08:10:21 2026 GMT
Not After : Oct 16 08:10:21 2026 GMT
Subject: CN=6ac8a16d-6349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:73:c2:fb:60:cd:7b:c0:b3:9b:3e:f5:9c:
69:06:2b:67:fa:e4:08:67:41:56:99:a2:1b:70:ef:
21:a4:55:45:ce:ad:70:fe:43:27:1d:9f:ff:ef:ba:
8a:5f:1e:51:65:c9:39:97:2e:42:d5:2c:20:3d:21:
02:04:35:3e:40:bc:3c:1f:d2:b0:54:15:63:a2:33:
cd:4c:33:23:fa:96:c9:47:af:38:b9:ae:03:38:06:
65:ba:16:d6:a9:c3:76:d4:6f:40:65:1e:db:17:9d:
52:a5:98:b8:5e:52:96:12:cb:ba:29:ad:c0:ba:01:
ee:4c:65:30:55:50:a7:d6:6d:ed:23:3c:53:7a:db:
10:f6:e1:1e:84:4d:3d:90:65:c2:37:95:e0:7e:1c:
66:2b:90:51:4a:9e:1f:4b:05:31:47:fa:2e:d4:65:
e7:9c:a2:4c:d6:3f:e3:3b:6d:50:83:83:e5:b9:c8:
1f:46:74:c9:0f:8a:2a:fc:ab:21:39:6a:c3:b1:24:
d0:1b:1f:e2:36:df:1f:45:34:d5:d7:1e:72:94:b9:
38:2a:bf:18:9a:08:ce:bc:dd:c2:53:6b:e4:c9:87:
91:66:4c:70:e9:d8:eb:fe:ce:83:6b:0b:18:d8:9f:
6c:2f:54:a9:53:65:a2:c8:bf:24:f9:0e:1b:1d:be:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:39:B5:80:29:AE:CC:84:8C:BD:1F:D1:3B:CE:A1:99:47:1F:90:5E
X509v3 Authority Key Identifier:
keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:c2:a5:37:7d:1c:ac:28:6b:08:3a:1e:a0:35:27:30:3f:0b:
b4:4d:9a:75:c8:ef:a1:53:3e:c7:fc:f2:49:59:bd:ce:ee:a8:
4c:b2:6a:cb:04:93:77:96:5a:b2:f1:50:14:f9:22:9d:84:27:
e2:92:91:c8:32:91:65:5a:bc:a2:33:a8:86:fe:7a:17:eb:73:
7d:1a:89:90:96:9d:8d:45:ca:05:27:1c:a9:66:ff:06:e5:59:
50:19:2b:82:54:34:07:ee:f9:34:da:c9:c4:97:f3:57:7b:fe:
d1:10:f6:ee:c5:65:2c:23:26:49:be:62:89:3d:5d:af:b4:b0:
c0:e6:21:08:5f:0f:60:1c:ae:06:f6:99:ca:28:86:d1:e0:d4:
48:b9:7a:27:c2:8f:f7:d2:f4:aa:81:c0:25:14:61:90:b5:a5:
7a:a9:e5:cf:16:c2:ee:e1:95:2d:54:bd:e3:f8:8f:b4:8e:c7:
64:7f:fb:b8:6e:47:6c:db:84:e9:d8:d8:c1:1d:04:2d:9d:76:
5e:84:3c:8f:a5:fe:91:57:e3:aa:86:ea:65:b4:2f:ac:a3:42:
90:ab:bd:bd:b0:07:b3:45:a3:1f:7d:30:fc:da:69:1b:fd:06:
e7:da:a7:99:d3:a7:e1:93:50:4e:0f:4d:f6:d0:4d:b7:db:17:
40:d4:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:25:37 2026 by rpki-client