
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json)
Hash identifier: TsNpSidsMu+S+broGdrmEmfVRKVMhzjIf9B9Z8wY8xs=
Subject key identifier: 58:10:7C:49:B4:81:96:82:84:A8:DD:71:E2:54:71:A1:CB:36:0B:4A
Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
Manifest number: 02A7
Signing time: Fri 16 Oct 2026 15:55:20 +0000
Manifest this update: Fri 16 Oct 2026 15:55:20 +0000
Manifest next update: Fri 23 Oct 2026 15:55:20 +0000
Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: t0HZotrSgEjzHKPtzwUzB5YP6hPpLXmwdXKPbEXkGKI=)
2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: 49BUIWXY2kRKbxVwv8L7UkKYY+v5irFyHsawrnEYjXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 15:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Validity
Not Before: Oct 16 15:55:20 2026 GMT
Not After : Oct 23 15:55:20 2026 GMT
Subject: CN=6ad248e8-75c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:83:3f:48:99:01:94:ca:61:54:dc:54:75:
27:98:bb:6c:fb:51:6c:7d:b1:06:60:fc:cd:3d:4f:
e8:36:39:ae:38:2c:5e:1d:f9:9e:72:6f:98:33:b3:
b2:8d:c9:a4:87:41:01:eb:55:e9:8c:45:f3:0a:df:
53:49:46:e7:bc:58:93:1d:a6:8e:47:a4:0a:e3:2b:
c2:cb:72:32:a7:8c:54:6f:b6:56:0e:77:55:ef:3b:
fd:92:2f:3f:1d:95:54:39:7d:a0:1e:34:23:31:2d:
fe:71:1a:44:5b:45:1e:8d:0c:bb:2b:0c:d1:da:cf:
73:4f:cb:4a:d4:67:bd:fb:5b:9b:f1:bd:9e:c9:47:
9a:1e:bb:c0:e6:d8:24:a8:96:1c:b6:ca:fd:02:a2:
e4:c4:83:c7:d9:27:45:e2:f3:21:ab:31:af:b1:5b:
79:e5:ad:a5:c9:2a:b8:71:e1:2e:00:18:a2:8f:6b:
eb:e0:39:ad:a8:9c:37:35:e2:ef:b9:c3:43:ca:a9:
13:61:96:69:00:dc:eb:53:63:a8:b2:ec:78:c1:6c:
91:01:f7:94:db:09:40:f3:ea:30:7b:66:2e:64:40:
fd:73:3a:93:a5:13:12:fb:06:81:7e:47:46:33:9c:
72:fd:b1:16:05:23:00:cc:63:69:00:f0:c9:6b:95:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:7C:49:B4:81:96:82:84:A8:DD:71:E2:54:71:A1:CB:36:0B:4A
X509v3 Authority Key Identifier:
keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:a4:d1:e9:09:0b:72:9e:3f:d0:c5:eb:69:84:84:5b:47:
fd:08:4c:1d:df:42:80:28:24:06:18:30:8a:8b:35:61:58:d4:
21:84:34:cc:e1:9d:df:2b:d7:a0:f7:54:46:b7:02:8c:6a:07:
35:77:bf:9b:a7:29:7e:db:d7:22:41:16:bf:7a:2f:52:c5:4d:
62:ac:52:29:c1:ca:71:b9:ba:07:4f:17:e7:84:eb:64:df:d2:
8e:ec:3c:c7:74:ec:87:76:58:c3:6d:d1:eb:8a:00:40:1c:d5:
63:18:ca:e4:a5:c5:4f:ac:b3:2e:8b:5e:16:c3:b3:90:ca:ad:
d5:76:09:51:7e:e1:40:2a:d2:72:65:10:41:2f:3f:8b:92:8a:
8a:06:33:e5:1a:62:4b:7b:a3:0b:37:0a:06:f5:0a:65:07:34:
7b:ba:60:db:ec:56:98:e4:57:ee:ea:ba:ae:16:32:87:22:61:
bd:75:e2:de:34:39:7d:0b:4c:ef:c7:b9:21:82:62:c9:8f:de:
53:40:bc:10:92:54:42:0e:15:ea:01:60:a2:cf:5a:99:5d:5d:
c6:8f:b7:ef:9b:c3:d4:fe:62:a2:5f:72:9a:77:5d:fb:a4:62:
c3:d9:dc:38:3c:9b:a4:f9:ec:1f:37:df:d5:4f:a6:23:4a:68:
47:64:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:19:44 2026 by rpki-client