
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier: YjaO+2kR046JYlhRly4yJg7QM5I3geY0twswB7tntnM=
Subject key identifier: 52:CF:C2:7A:7C:13:B3:0E:95:DC:D9:85:D6:C9:02:1C:6B:9D:65:CA
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial: 0553
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number: 054C
Signing time: Sat 24 Oct 2026 23:24:30 +0000
Manifest this update: Sat 24 Oct 2026 23:24:29 +0000
Manifest next update: Sat 31 Oct 2026 23:24:29 +0000
Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: pHoz7xUR+aLYgKH+b+OshbNnsOrd7IpfVwDIGKdk/aU=)
2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: F+I43DaEg4RPjKbDgo7LbT/oq9DuBWqE4SqCTrHW1b0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Validity
Not Before: Oct 24 23:24:29 2026 GMT
Not After : Oct 31 23:24:29 2026 GMT
Subject: CN=6add3e2d-16af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:4d:ec:d1:a6:d0:ff:fe:59:5d:92:4a:bd:
6b:61:69:6b:ca:52:79:56:77:9b:66:31:d9:6c:81:
8b:8f:e3:a2:02:77:da:47:d5:76:7b:2c:42:4e:1c:
d5:29:ae:54:4a:1c:8d:4c:5f:12:6b:e2:b9:a2:27:
14:b5:4c:ec:cf:78:53:ca:e9:e7:97:19:8d:88:8b:
ad:75:06:f9:72:f9:22:83:86:27:74:63:5f:76:3c:
10:4a:cd:89:08:c6:04:e3:98:57:73:05:e6:10:88:
b5:4e:e3:ee:16:fb:b6:26:3e:aa:3e:88:25:44:8a:
a2:6b:9e:cb:b4:e3:0d:33:d7:1f:0c:ff:ff:55:fc:
f3:a7:8e:60:77:9b:e3:9d:32:f1:5f:18:f9:87:37:
ca:b2:1d:5f:02:2c:17:c6:ef:b6:53:bf:64:70:db:
db:bd:2a:57:30:96:0b:80:6a:91:42:e9:63:df:ae:
84:da:49:38:0e:a4:c1:48:e1:8e:ff:d6:25:a1:29:
95:5b:e2:8a:76:72:1d:1c:5d:2c:49:37:dc:ca:3f:
a5:6f:4b:00:be:d6:f3:bf:51:ed:df:3d:6a:6c:00:
4d:b4:01:ef:5c:f0:33:aa:76:16:bf:2d:b2:bf:9e:
99:52:0c:d7:5a:ab:a7:cb:21:90:99:b8:46:d5:5e:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CF:C2:7A:7C:13:B3:0E:95:DC:D9:85:D6:C9:02:1C:6B:9D:65:CA
X509v3 Authority Key Identifier:
keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:78:08:f0:79:64:22:df:f9:57:a9:4f:b8:e2:8d:1b:aa:5b:
6d:c4:e9:71:b5:9b:1c:d1:2b:ff:db:2d:9e:d9:e1:a9:6e:8a:
72:d5:9d:13:ec:2c:b0:7e:18:b7:e4:86:a7:38:1a:4f:f4:64:
4f:25:9e:10:21:fd:94:de:b7:37:bd:fe:20:ea:df:3e:c4:ae:
cf:d1:39:69:1c:9e:fa:47:fb:cd:c1:6d:99:47:58:12:b5:c7:
78:7d:af:a2:dc:b4:4f:6d:97:61:eb:e5:9a:24:9e:52:95:71:
99:05:8a:d9:1d:e0:40:41:f3:db:a6:46:2f:67:6d:59:9e:fb:
64:73:88:86:f8:79:01:ef:ac:6e:98:ac:d2:b4:06:3e:70:6e:
bc:2e:af:11:6d:79:a3:85:39:43:ab:9b:55:a7:ff:70:83:69:
95:40:4b:3a:d0:89:8a:6b:26:e8:4e:d3:cf:dc:ab:0b:de:5b:
f6:ca:ff:81:59:42:90:82:ab:af:1a:00:fd:08:02:c7:68:13:
67:9d:c4:03:d7:6b:7c:b6:5f:6c:2f:ed:fa:3f:f6:3b:36:2e:
27:99:5e:34:8a:4e:f0:d8:4a:a7:62:6c:e0:97:59:9f:30:54:
b4:7b:ff:1b:ec:a1:91:da:88:94:85:b0:b9:5d:8a:0a:9e:12:
6d:34:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:16 2026 by rpki-client