
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json)
Hash identifier: wFYuKLg963QW7+32oGq6I79D4dSyKbRyJeh5WEIaib4=
Subject key identifier: 55:37:F6:10:23:2F:24:EA:F0:AB:DC:CB:0B:2D:A3:7E:BA:6F:30:56
Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Certificate serial: 02AF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
Manifest number: 02AA
Signing time: Thu 22 Oct 2026 15:53:04 +0000
Manifest this update: Thu 22 Oct 2026 15:53:04 +0000
Manifest next update: Thu 29 Oct 2026 15:53:04 +0000
Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: Gm9Ogpmr2ZSP7z1FkOT9KSFWsUxJZJ+TavKx7rt8W4s=)
2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: JNyU8R5c8QL0IEETvSkoNrLyRGc2x887+ZYrTw2mI3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 15:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Validity
Not Before: Oct 22 15:53:04 2026 GMT
Not After : Oct 29 15:53:04 2026 GMT
Subject: CN=6ada3160-3d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:97:a3:17:27:9c:d9:22:1b:c1:7c:20:54:
63:4f:8a:2c:36:db:05:f4:0b:d9:dc:19:7b:43:be:
29:0a:fe:c5:99:29:bb:83:43:c7:85:7c:6b:e4:dc:
93:3a:70:c3:e4:e2:bd:4b:0e:a3:5e:5a:f2:67:14:
8c:f6:c3:ed:01:56:be:9a:68:16:ae:42:ef:40:32:
10:3f:41:7a:3a:99:b2:48:48:7b:15:5f:ba:4f:44:
7d:76:f5:df:d3:9e:c5:56:fb:2b:2f:37:f8:fb:3f:
16:15:c1:7e:3f:39:7d:aa:22:9f:d5:de:13:98:3c:
eb:f0:24:e2:91:3d:49:55:09:3d:4f:fd:98:fa:cc:
1a:43:e5:86:39:17:97:75:0e:7d:ee:a9:38:a3:c0:
27:76:ad:c1:83:97:7b:80:ca:cd:cd:aa:98:60:81:
91:84:60:93:27:53:8f:6e:23:27:32:df:d5:cf:5a:
f9:d3:4f:83:99:e4:b4:f6:c9:62:e6:12:b2:a5:c4:
96:7b:28:1b:b9:c2:04:c2:b9:02:9f:65:8e:54:86:
4e:70:a8:20:a8:ee:b5:4b:85:f9:41:42:be:49:95:
73:d9:39:be:ae:fe:9e:c8:5f:4f:74:b3:47:39:24:
2a:c8:c4:c8:f9:78:05:3b:13:ff:0b:8d:86:05:2f:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:F6:10:23:2F:24:EA:F0:AB:DC:CB:0B:2D:A3:7E:BA:6F:30:56
X509v3 Authority Key Identifier:
keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0b:72:e5:c7:75:be:d2:b7:0f:24:dd:7d:c4:c4:e7:c3:38:
5f:0c:f9:5f:7d:77:09:50:be:c1:42:ed:e5:59:57:73:70:10:
59:45:45:f7:30:e5:f0:b7:d2:bc:3c:32:9d:3c:95:85:28:d4:
7d:99:c5:10:54:93:1f:f6:00:28:b6:27:4d:2e:a8:8b:79:d0:
ba:ed:89:af:89:09:22:08:d8:4c:3f:65:4c:8a:09:4f:09:e3:
93:24:24:c8:88:4f:a8:63:fb:3f:1d:9d:61:43:1d:56:1a:0d:
7c:ec:3c:71:42:bf:86:bf:dc:f7:72:ae:72:6d:eb:bd:06:b2:
25:17:54:13:4c:3e:86:80:22:a2:b6:fc:e0:82:4f:9a:3c:80:
e6:dc:6c:c1:15:f6:00:c0:0b:74:8b:52:3a:a6:c1:d5:ba:56:
b7:c1:e9:97:5c:a0:c9:b8:29:74:61:97:7d:5a:39:9d:c3:71:
e3:ad:34:b3:3f:3d:7b:e3:33:6f:f8:d5:a4:b3:25:74:f3:77:
3b:bf:8b:7f:91:f5:0e:39:c6:10:cc:98:c3:1b:a9:b4:44:73:
38:fd:b4:61:ca:5b:85:38:f2:19:3d:6e:5f:d6:f3:9b:5c:d8:
e0:fb:cd:e3:47:02:95:cd:fc:b6:fb:da:c9:f7:c7:25:29:c5:
85:91:0e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:15:00 2026 by rpki-client