
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier: xDD/rK8PLFxQDWlhZur5fRFYlBibnuxcFkXC/eJP7qg=
Subject key identifier: E8:25:B3:68:E9:4B:D1:94:A5:F0:FB:CE:40:A2:29:20:3A:68:A0:27
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial: 09EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number: 09D4
Signing time: Sun 04 Oct 2026 19:56:28 +0000
Manifest this update: Sun 04 Oct 2026 19:56:27 +0000
Manifest next update: Sun 11 Oct 2026 19:56:27 +0000
Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: juHk6JlNNchyrIPyWVzl5IFfEaFqbT2u8wgi7DC4JNc=)
2: B7AC544A86F111F19E006003A7EE528E.roa (hash: CD98/zBc1iRMlYgaHXvEmJhl0TajGVGfTmWFNs6GIac=)
3: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: zZu8aFP4Al6GJRPpJKXmBtYypvXABswMl/UMkW8uCT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Validity
Not Before: Oct 4 19:56:27 2026 GMT
Not After : Oct 11 19:56:27 2026 GMT
Subject: CN=6ac2af6b-96bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3d:dd:a0:db:3f:a4:a4:7a:f9:21:b6:fa:fc:
0c:a3:fe:68:ca:3a:1a:d8:08:64:99:68:37:e8:23:
17:2e:94:bc:7b:b4:3c:63:1a:1d:a5:e0:18:6b:1e:
86:d2:05:82:b7:84:a9:86:76:97:22:fc:3f:e7:8e:
50:f2:5a:0f:3f:54:23:f6:c7:9f:c7:18:60:5e:3d:
58:d6:c4:ee:c7:70:44:ee:db:22:c6:b9:da:5b:e6:
7e:da:b5:59:a2:2d:5b:49:38:65:9a:f0:a3:f5:fd:
73:99:fe:e0:26:78:7f:51:53:bc:81:6f:82:af:c9:
ba:e5:27:37:42:3c:0d:12:60:0d:3d:12:46:7b:10:
10:37:36:93:ef:6b:25:b0:ff:09:eb:a0:b1:c0:53:
51:f0:03:e6:48:aa:e8:1b:6c:9c:72:91:24:12:b6:
d1:e3:21:0b:66:ac:58:fe:6f:40:17:a4:f5:cb:b2:
11:f5:3b:0d:39:94:c1:0d:bc:2c:39:ca:15:e9:4f:
6b:63:fd:19:f4:47:cb:d8:5a:8f:9b:ec:62:5f:5b:
52:9a:9f:19:fd:75:ce:28:f8:98:c8:90:c6:91:04:
b9:90:a4:87:cb:c8:c0:78:2a:e3:e8:0d:87:72:2a:
d0:c7:77:0c:07:fa:7b:41:a2:0a:31:c1:8f:c8:0e:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:25:B3:68:E9:4B:D1:94:A5:F0:FB:CE:40:A2:29:20:3A:68:A0:27
X509v3 Authority Key Identifier:
keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:2a:eb:6c:1a:4c:b7:7e:b7:f3:83:c8:ae:61:3a:78:1a:ae:
83:ca:3c:61:80:af:34:59:90:55:20:52:54:41:cd:6c:81:eb:
e8:ed:02:45:9a:d7:f1:c0:9b:6c:64:1b:96:c6:2e:82:01:bb:
f1:22:9b:d9:9d:da:eb:86:d6:96:b3:e7:8f:04:00:de:d1:be:
ae:d3:77:b1:33:cf:44:15:8b:e9:d0:13:a6:98:2d:6b:0c:bb:
12:3d:0a:c5:95:28:53:cd:a7:3f:30:66:4c:69:67:e5:29:79:
ce:9c:9f:e8:bf:ff:e0:3b:e5:49:bf:e0:2e:d2:b4:2a:8e:40:
0f:49:b9:83:27:c7:f2:cb:77:c5:53:8b:d0:b8:db:2d:82:ce:
7c:8f:5a:0d:da:24:c1:33:9b:df:95:c6:66:51:7e:41:e7:ec:
ae:ad:fc:71:02:02:9f:c2:21:5c:85:3a:0c:a3:83:ed:8f:a4:
27:07:2a:2a:59:cd:81:43:3b:ec:c3:f1:f0:5c:78:37:0f:8c:
ab:f4:20:1c:92:71:de:c9:dc:3c:64:20:96:ae:af:dc:31:34:
e1:70:d3:66:19:a4:b5:11:cc:39:ae:8d:2f:44:12:4a:63:d4:
6d:48:06:36:b0:e4:6d:37:7c:5e:d8:9a:73:0b:8a:4c:c5:c4:
00:a4:65:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:31:26 2026 by rpki-client