
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier: yF3/nCxfQdi2mqr9UgHSyJkcHz10WDWeAPU0T8QBnGo=
Subject key identifier: B2:E0:92:20:C5:91:4A:FC:0A:7C:01:54:12:4D:48:C6:61:FC:49:C1
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number: F4
Signing time: Tue 27 Oct 2026 06:39:25 +0000
Manifest this update: Tue 27 Oct 2026 06:39:24 +0000
Manifest next update: Tue 03 Nov 2026 06:39:24 +0000
Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: 6v7fr5W4mfmBhHKADdpvG5mcAhQnO/R7/8qVmc3UcGA=)
2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ol5yFCZOBiVTvk8E7fVatGRyyicC3FHaDbYq9ITTPLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Validity
Not Before: Oct 27 06:39:24 2026 GMT
Not After : Nov 3 06:39:24 2026 GMT
Subject: CN=6ae0471d-3306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:fd:d2:c2:dc:03:13:c0:0a:0a:46:44:78:
87:04:37:78:f2:0d:bc:69:a4:8b:eb:68:ec:06:e8:
fb:e3:39:30:f7:84:cb:aa:4c:3c:af:ab:2a:10:be:
23:d5:bd:9e:16:dc:10:4c:96:f5:50:77:1c:f8:e4:
a7:85:08:96:ae:90:8c:bd:31:d9:05:49:65:cf:e8:
99:25:93:fb:77:51:b0:bc:f6:c2:db:f9:61:d1:56:
37:fd:06:25:0f:a9:fd:51:a4:da:d5:2f:67:c8:f7:
a9:2f:42:01:b2:29:ef:a6:31:a7:ef:81:44:39:76:
7a:33:93:a7:fc:7b:9c:a2:ae:a9:32:92:86:dd:a7:
6b:ca:ff:06:0f:ba:0e:3a:3c:4e:80:dd:eb:53:58:
6f:66:0d:ac:46:cf:26:44:15:c6:48:3b:0b:29:0a:
21:a9:4e:53:4e:97:50:99:b1:0d:ce:ad:47:04:77:
ff:8e:d6:4d:30:02:fb:5e:99:ac:1a:71:6a:04:00:
3f:65:0a:2a:94:54:be:62:8a:fc:8a:f8:23:97:d8:
74:3d:2c:56:15:2a:9d:d1:df:76:17:bc:13:35:db:
bb:3c:b4:47:1b:61:57:74:ac:6b:5f:66:b5:a7:d8:
fe:81:03:58:dd:58:70:e0:ed:a9:51:9d:ec:fb:b6:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:92:20:C5:91:4A:FC:0A:7C:01:54:12:4D:48:C6:61:FC:49:C1
X509v3 Authority Key Identifier:
keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:58:90:96:34:54:28:0b:76:96:f1:4b:8a:61:11:d4:7f:e0:
b1:a0:85:b7:ac:88:a0:cd:ff:6d:40:55:1f:aa:29:8b:1f:ba:
5b:73:8a:24:a5:40:cc:ec:e7:f8:12:49:53:9c:00:a0:84:1b:
a7:9d:4e:93:ee:63:a1:3f:68:07:30:e0:2c:fa:0c:e3:89:6f:
5e:9b:e6:d1:ca:42:a4:c0:2b:12:35:3b:cf:de:48:cb:fc:34:
99:c7:19:7b:80:84:2c:c0:3d:ed:65:a7:01:da:e2:8b:df:ef:
1c:cf:f9:71:54:b1:f1:56:c1:bb:5d:83:3e:45:ec:9f:42:68:
a9:6c:63:25:8a:92:b6:46:95:32:b3:17:d6:cd:c3:d6:d0:60:
b2:24:e0:25:9f:29:1b:97:8e:2e:a2:90:e3:1e:91:ce:96:44:
1c:44:75:38:02:76:5e:51:d4:11:42:d0:c3:7b:55:28:75:53:
8b:66:da:07:99:c7:df:82:3a:04:fd:75:c7:13:d1:a7:fa:c8:
d6:ae:aa:e3:fe:7a:eb:1a:79:77:64:c2:8c:72:82:d8:23:8e:
46:5e:3b:a6:2c:c0:f8:cb:ea:35:4f:a9:a6:78:3f:91:b7:a7:
e0:a0:15:73:ac:2b:5a:ca:75:36:dd:b5:a9:4c:bb:98:2d:4c:
90:68:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:06:37 2026 by rpki-client