
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier: SoY4VpWnBsLDv63zJrvv2T9XkcRhaB5DORCv5AOVZXY=
Subject key identifier: AA:82:E8:1D:90:A9:8C:F4:D9:EC:88:80:48:28:D2:AD:46:C9:C4:F0
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number: 01EF
Signing time: Sat 03 Oct 2026 04:06:56 +0000
Manifest this update: Sat 03 Oct 2026 04:06:55 +0000
Manifest next update: Sat 10 Oct 2026 04:06:55 +0000
Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: kxrRwa7G4UIaRDIc1zfeHWRUt3yVCmucK4CxtswcD7Y=)
2: 469DADAE9B1D11F199542C1F6411F970.roa (hash: 7ld5vVKkgDVk7iu8ZivqDo4KyiyF+452Quc+9rok5eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: Oct 3 04:06:55 2026 GMT
Not After : Oct 10 04:06:55 2026 GMT
Subject: CN=6ac07f60-61fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:63:1c:90:97:f4:d6:dd:c5:2c:30:70:14:
b6:d6:2d:73:ca:08:2d:27:f3:8d:57:9f:97:e0:ab:
c1:84:3d:94:0e:ff:85:15:71:29:c4:5a:71:dd:c6:
61:e7:97:4d:0a:63:76:44:74:08:93:f6:8f:b2:c6:
ae:e5:43:6f:db:10:5b:f2:bb:71:f5:e6:57:bb:36:
22:d7:f1:ec:f3:80:e2:cc:5f:79:ee:ff:92:79:2b:
81:70:cf:cb:90:95:7b:bf:30:1c:c4:de:1b:f3:24:
d1:16:34:97:f4:d0:dc:be:76:c9:81:e4:0f:5b:70:
36:e3:28:c8:a5:95:b5:84:2e:4c:b1:ff:39:4c:af:
74:90:be:4d:3f:49:78:f8:7d:01:80:5f:ed:87:7f:
4b:5f:28:ff:54:74:b8:9b:d0:21:f9:5b:c9:ee:6e:
c4:e2:8b:af:88:6e:8d:8f:59:50:f5:18:4c:c1:61:
c9:e9:68:39:56:f4:02:c5:84:13:48:0b:4f:33:0f:
9d:61:5a:76:42:5d:09:83:ab:03:13:ba:95:23:e8:
54:e1:4e:21:b9:35:75:af:3d:0e:0b:c7:42:9e:45:
31:d1:a7:e5:14:ea:c7:5a:c8:0f:dd:60:44:ea:1c:
64:5f:11:bd:6b:21:d9:f1:c6:3f:2f:91:26:a0:b3:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:E8:1D:90:A9:8C:F4:D9:EC:88:80:48:28:D2:AD:46:C9:C4:F0
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:91:6d:ca:14:11:91:ed:11:e3:d9:01:a2:17:1c:ef:1a:fa:
d5:bd:ae:67:97:67:bf:03:57:c0:34:d3:d7:ef:9d:64:55:e1:
0a:72:6e:2b:4f:d7:3e:d9:a5:35:93:e4:19:5d:75:fd:b1:1e:
ba:d6:e7:e1:e7:03:e5:80:7f:6a:8f:44:90:52:91:06:f9:b7:
af:da:85:66:6c:c5:1d:f3:aa:59:8e:2f:79:cb:0f:9a:f9:ca:
fa:31:2e:07:bb:02:26:f4:df:13:6e:ec:2a:1d:24:bb:f7:3f:
3e:42:80:55:38:d7:ad:21:d5:21:2e:db:ec:b6:f6:e8:59:ac:
c8:f1:f5:20:7c:d7:35:12:b9:f9:c0:b5:c0:d8:1f:25:a3:6b:
d6:3c:67:4e:27:1b:5c:1a:26:7e:bc:00:e4:b3:3b:a2:f8:8a:
b0:7f:ad:16:bc:05:e3:69:39:2c:3c:4d:03:0e:e3:cd:fa:1f:
d8:e1:d3:ab:45:b3:9c:e4:11:09:9e:88:ff:c0:ef:6b:ec:33:
85:ec:35:35:56:56:0e:e3:ce:b2:9a:2d:4a:cd:07:05:19:4e:
1d:5e:5f:7f:f7:8b:87:31:df:cf:87:47:e2:39:43:e6:48:53:
56:3e:b7:a3:c7:ac:9d:ad:3b:40:58:2e:59:29:c4:07:f1:7d:
88:e7:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:18:49 2026 by rpki-client