
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.mft
File: QxYDELuWA-TqdjAXNBK4uR8r-qY.mft (raw, json)
Hash identifier: UzV5Bt0meN5i54oXqxkklXSdIlo5DnaxPZXtUhzndF0=
Subject key identifier: 18:C9:6A:1D:4D:0B:DB:33:7D:0A:5C:9D:D8:69:60:99:87:92:BC:07
Authority key identifier: 43:16:03:10:BB:96:03:E4:EA:76:30:17:34:12:B8:B9:1F:2B:FA:A6
Certificate issuer: /CN=A91E45D3/serialNumber=43160310BB9603E4EA7630173412B8B91F2BFAA6
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxYDELuWA-TqdjAXNBK4uR8r-qY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.mft
Manifest number: 04
Signing time: Wed 21 Oct 2026 09:53:21 +0000
Manifest this update: Wed 21 Oct 2026 09:53:21 +0000
Manifest next update: Wed 28 Oct 2026 09:53:21 +0000
Files and hashes: 1: QxYDELuWA-TqdjAXNBK4uR8r-qY.crl (hash: 0q2Bv6BNPiKCvkkuULNCY8yieVr4W7R/obyaC9Y1mMI=)
2: 3C285EF6CC3611F18CCDB4410066CEF9.roa (hash: mkB01zUWTNP/TULSXX0zbFdwruttgeXNhCyGzTg+Qzo=)
3: 3B93610CCC3611F18CCDB4410066CEF9.roa (hash: 9tXmQEbfghLFeLO1snMIr7cIgGzBSr8f8qYWnwlWnP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.crl
rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxYDELuWA-TqdjAXNBK4uR8r-qY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E45D3, serialNumber=43160310BB9603E4EA7630173412B8B91F2BFAA6
Validity
Not Before: Oct 21 09:53:21 2026 GMT
Not After : Oct 28 09:53:21 2026 GMT
Subject: CN=6ad88b91-9e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:63:49:c5:d5:d0:aa:51:fa:20:dc:ee:c6:
d2:58:bf:63:7b:fc:56:4d:ab:88:5c:6d:a0:e3:35:
ee:8c:e5:5a:fc:71:21:0a:f7:92:d0:19:29:42:b9:
ab:0a:79:e5:78:0c:45:d3:53:6b:4d:b3:18:d0:23:
20:ba:30:d3:ad:62:e1:88:8e:82:a7:31:79:b3:b1:
4c:33:d2:09:a6:b7:4b:fa:9a:27:f8:3c:21:1e:dd:
c3:aa:06:92:25:ea:df:ab:62:bf:8c:39:2f:de:81:
c9:89:c6:ba:aa:c4:cb:53:01:a9:1a:2c:ea:87:ed:
7b:e0:77:57:3e:53:61:55:fd:0b:72:98:3b:d2:d1:
78:a0:b0:ef:e6:b6:25:0a:98:17:46:da:2b:dc:5b:
b9:04:44:a4:37:26:c1:ce:47:e8:9c:6d:f9:04:06:
94:5e:d4:85:5a:1b:21:9f:cf:87:64:19:c7:27:6a:
d5:c0:93:2b:6c:e3:24:ab:a9:27:1a:3c:b2:85:97:
ba:b1:80:2b:42:1e:58:03:22:3b:86:64:f7:1a:f6:
64:de:d3:b9:8c:47:64:a7:c7:50:a0:97:c0:e6:33:
e0:37:6f:15:87:05:20:b8:c0:78:89:b5:91:cc:46:
72:06:b2:6d:de:45:b9:2b:fe:9f:ef:d1:d2:35:c1:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:6A:1D:4D:0B:DB:33:7D:0A:5C:9D:D8:69:60:99:87:92:BC:07
X509v3 Authority Key Identifier:
keyid:43:16:03:10:BB:96:03:E4:EA:76:30:17:34:12:B8:B9:1F:2B:FA:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxYDELuWA-TqdjAXNBK4uR8r-qY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E45D3/C01DDFF8CC1111F1A3EC0A11F565CEF9/QxYDELuWA-TqdjAXNBK4uR8r-qY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6a:c3:a9:46:24:62:a7:37:41:e7:d7:67:4e:4d:08:14:c7:
1d:8d:e5:1e:45:1d:8e:5d:43:85:f6:fa:b0:08:3b:6b:fe:b2:
18:6c:32:ff:52:e3:96:05:d2:35:38:f6:07:09:bd:82:0d:58:
6b:32:12:7f:60:1e:74:e9:39:6c:ca:ac:ea:2d:d4:a3:f2:b3:
5a:6d:74:4e:5b:13:5e:ab:32:49:66:a0:3f:f0:ef:12:e1:a8:
43:4e:42:2b:e9:64:df:b0:d0:a3:c5:eb:99:4e:99:64:a9:32:
21:36:c9:a7:17:0d:ba:6d:48:ae:10:41:3f:b2:b2:69:39:af:
38:bf:69:10:8f:e2:f3:cd:52:66:98:e0:65:ef:3e:8d:d2:09:
c0:fb:00:10:aa:a9:60:ab:11:73:d5:df:ae:75:57:7b:ff:e1:
b4:d7:cc:9b:a4:4e:f9:e2:aa:3a:ec:b7:a8:20:b1:51:c7:91:
61:98:bf:79:07:ed:de:7b:12:f4:2e:c5:b8:33:39:ea:13:84:
cc:6b:6c:09:84:00:f0:a6:5d:38:4d:42:89:48:7d:40:bb:63:
b4:52:e4:81:88:dd:b4:34:22:a7:5b:bc:82:62:4c:81:7a:18:
f0:d0:4e:3d:44:da:46:de:1e:8b:9a:06:d0:e2:06:15:04:6f:
b9:04:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:16:49 2026 by rpki-client