
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier: OyI1xnjSbBnHu0vedj61x1Gp2bDTV7aby0/SUC7ljO4=
Subject key identifier: 7D:85:50:6C:DC:1E:88:51:DE:C3:5E:E7:EA:D9:3D:41:D0:9A:21:9A
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial: 0B59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number: 0B4F
Signing time: Fri 02 Oct 2026 19:28:15 +0000
Manifest this update: Fri 02 Oct 2026 19:28:14 +0000
Manifest next update: Fri 09 Oct 2026 19:28:14 +0000
Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: egPtcYMjd61sMejdIwo8l2aphkeTxHinpShBlNb138Q=)
2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: r0lCb8PmrHuRVFml8CXtx2AwxypyCR8m21BT5Lcfkrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2905 (0xb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Validity
Not Before: Oct 2 19:28:14 2026 GMT
Not After : Oct 9 19:28:14 2026 GMT
Subject: CN=6ac005cf-b475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:4c:5d:a9:4c:08:6c:f7:e9:ea:6a:0d:d3:
66:e2:53:dc:ef:cb:c5:95:ca:25:88:b9:72:9b:d4:
66:e6:33:4f:9f:a0:d3:76:c0:5a:3b:ec:be:1b:6c:
56:cb:95:9e:b8:66:8a:fb:20:c5:b6:3c:a3:93:1f:
b0:fa:c8:59:cd:bf:86:ff:18:37:5e:ef:86:56:69:
db:15:db:1e:91:2c:6c:3c:ca:bc:83:0d:be:1c:ec:
fd:31:ed:ac:ae:c3:a4:fa:60:6b:c0:69:09:52:96:
97:5a:46:d8:9a:cd:38:6c:83:62:99:a4:30:bf:b7:
bd:9b:f1:d4:e1:1b:c1:aa:d5:c1:a9:0b:3a:10:11:
25:72:ae:23:57:3b:ec:81:09:b5:c7:88:4e:77:e6:
cf:00:00:4f:6c:f8:f3:15:2d:71:3e:0d:09:76:84:
47:32:01:52:6c:00:10:3a:7b:cd:b2:cd:5e:f5:4e:
21:a6:bd:8d:e4:7b:f2:87:08:45:bf:fb:cc:2b:5c:
c4:19:fc:ec:91:ce:e1:87:29:98:e9:7a:26:14:e9:
7a:da:26:56:f4:7c:d0:ba:90:f2:b1:73:5e:f4:3e:
de:47:6b:3c:c1:a9:72:26:7b:e5:d2:b7:29:95:8d:
7a:45:1b:d5:99:62:f3:3f:6a:18:82:ab:66:00:f4:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:50:6C:DC:1E:88:51:DE:C3:5E:E7:EA:D9:3D:41:D0:9A:21:9A
X509v3 Authority Key Identifier:
keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:bf:2b:19:ef:59:d7:68:0f:75:3c:fe:85:4e:cb:44:b3:a7:
7a:76:99:64:7b:e8:1e:9c:22:20:a2:c9:4e:29:0c:b4:2c:c5:
eb:1c:64:10:06:56:96:20:8e:f8:1c:12:28:0b:15:0b:44:5d:
c2:9c:6d:ce:2d:61:b3:b7:ed:ed:02:cd:69:35:36:ea:a4:b9:
29:94:a1:0e:6b:0c:24:cf:c1:8f:e9:d5:e1:a7:46:0e:77:31:
63:52:df:b1:19:59:84:9a:a5:d3:01:1e:cd:26:2e:74:01:ef:
d1:b4:49:f0:35:25:f4:c5:42:20:68:b5:7f:98:f2:85:55:df:
b3:cb:e6:87:c2:b1:fe:2a:48:6d:61:3b:3b:90:5b:fe:63:91:
2a:a2:f4:0b:84:5d:2d:b4:48:80:f9:9d:92:63:58:2e:a7:20:
14:14:55:f9:b3:03:26:70:c9:65:9d:0e:c8:64:17:2e:d7:74:
1c:27:64:2d:28:c3:50:e4:89:e8:0b:0e:4e:35:6d:87:7d:a2:
09:03:39:72:8f:b4:77:a2:e9:7a:80:97:f7:fc:28:51:03:29:
79:84:a9:4f:80:dd:1d:80:e1:43:2b:25:78:c7:9a:1b:fe:12:
fa:b7:68:97:d3:ef:59:b4:a9:b7:43:98:94:96:dd:7a:12:8a:
89:6a:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:02 2026 by rpki-client