
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier: Xae/vAfsGGofxstiVSk8HO8mS2RmwfV4H7JVz4arAfg=
Subject key identifier: 6C:04:01:E4:7B:BA:E2:82:15:86:47:90:9F:EF:B7:FF:8F:3F:81:5A
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number: D9
Signing time: Thu 03 Sep 2026 06:52:24 +0000
Manifest this update: Thu 03 Sep 2026 06:52:23 +0000
Manifest next update: Thu 10 Sep 2026 06:52:23 +0000
Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: MdIVD6i7BEtCSCwRK5RXgIoXNfMIZ+2pQbpD9kzX2E8=)
2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ol5yFCZOBiVTvk8E7fVatGRyyicC3FHaDbYq9ITTPLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Validity
Not Before: Sep 3 06:52:23 2026 GMT
Not After : Sep 10 06:52:23 2026 GMT
Subject: CN=6a991928-b553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:f4:e4:3b:ab:75:1c:47:68:6c:1b:dd:69:
44:9a:19:6f:b4:fb:1c:de:ea:0d:cf:1f:96:79:4d:
ea:cb:eb:06:f8:b1:9e:a1:ff:28:dc:49:6b:1b:6c:
bc:23:9f:be:18:f3:e7:06:02:d1:47:7d:79:f6:3b:
47:0f:cb:ad:f3:d5:b0:4f:dd:78:ea:e6:cf:eb:29:
55:7e:7f:9e:6f:92:b9:9e:eb:a1:cb:49:b7:15:ae:
b1:2a:d6:0a:64:7c:2f:b9:da:9e:fd:52:97:d7:18:
dd:34:24:86:0c:f3:50:29:53:00:d7:7a:fd:fd:77:
bc:0a:a8:53:ff:49:93:ad:73:0d:e8:1f:cf:b1:28:
ce:56:35:e9:cd:19:75:75:9f:26:a5:0f:10:1d:8e:
5f:36:47:57:b3:30:1f:51:f3:e3:2c:b6:11:5e:29:
ce:a2:1e:be:70:9e:cf:c1:9d:c9:d8:56:ad:8e:94:
80:a3:42:38:43:80:7d:44:03:0d:71:fc:34:10:89:
c1:55:d1:8c:3d:47:6a:b8:3c:78:ef:4b:34:f9:da:
e4:cb:5e:f5:ed:a8:63:fc:8c:81:48:b5:78:1c:0e:
94:22:ca:e5:58:b3:01:64:c8:db:15:54:d9:4f:54:
47:4c:17:b7:e0:88:1b:83:e3:f8:47:3b:fb:ad:90:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:01:E4:7B:BA:E2:82:15:86:47:90:9F:EF:B7:FF:8F:3F:81:5A
X509v3 Authority Key Identifier:
keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:2e:8d:3a:5d:01:2f:6b:42:88:c7:17:0b:c8:f2:9e:e3:f4:
95:7b:f7:70:88:ca:96:a5:5c:fb:6e:e9:2f:65:c4:39:2f:05:
85:62:b2:a1:2f:c1:07:c0:9b:b3:cf:81:02:38:8a:ee:45:82:
32:d1:9f:4f:45:19:c6:b9:0c:42:30:1b:65:7d:80:7d:5d:9c:
b9:b6:7d:b2:1e:30:e2:ec:2b:cd:c5:fc:8d:4a:dc:a5:80:8c:
9d:fa:dd:52:c6:d9:e0:f6:9f:82:f7:91:c2:63:5f:e0:7d:83:
55:ca:33:1f:af:f0:1d:94:bf:aa:03:da:11:cd:38:61:60:19:
1c:c4:2e:a3:a3:df:1c:37:b5:88:a8:bb:e2:e7:d2:79:ed:45:
da:47:09:3b:a7:53:63:64:2d:25:c3:76:fc:65:46:85:cb:1c:
2f:27:28:d5:ea:da:ac:1a:99:2a:e9:8b:1f:28:e4:e4:1a:f2:
dc:17:6c:70:71:e2:60:66:4e:37:9e:e8:fd:e9:e9:11:c6:84:
35:50:1e:96:7d:81:62:65:fb:db:ec:0b:f9:1e:45:b9:0c:4b:
bc:28:d6:9f:f5:7a:a5:ad:ae:7b:13:6a:7b:03:e9:61:81:fc:
52:63:ec:55:28:36:e8:3c:5e:7c:31:79:23:ad:90:5e:59:da:
89:74:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:22:38 2026 by rpki-client