
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json)
Hash identifier: 6JT2TM1sLh4h6aZxIKy3e0oL0BowWMGJMpTQvQlzXBA=
Subject key identifier: DD:4A:5B:42:15:0F:2D:2F:6E:C4:0F:56:90:4E:2B:C1:A7:D9:CC:85
Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Certificate serial: 3583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
Manifest number: 3581
Signing time: Thu 24 Sep 2026 14:47:51 +0000
Manifest this update: Thu 24 Sep 2026 14:47:51 +0000
Manifest next update: Thu 01 Oct 2026 14:47:51 +0000
Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: 7Rk4kIcmIsjEezzOD/Rofy3sKPYU+0L0mTy+7cszN2o=)
2: B214E89862DF11F1B42E082E6B47A888.roa (hash: 67D5OAf3QDK83q26hEzjDiIhbelSrK6yBD/M0iQ72XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Validity
Not Before: Sep 24 14:47:51 2026 GMT
Not After : Oct 1 14:47:51 2026 GMT
Subject: CN=6ab53817-86fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:49:e5:83:34:65:5c:f1:93:ea:1d:0d:d1:
00:1a:76:5c:78:fb:43:d7:c5:1c:b9:9b:15:9d:34:
2a:37:6f:86:39:da:01:02:81:39:cd:ec:b1:22:02:
44:66:5b:02:9a:02:7e:ef:7b:cf:f3:9d:de:ed:78:
20:b9:13:48:6f:96:37:7e:8a:14:c7:7c:11:8e:b3:
32:27:8a:ff:4c:a2:33:26:41:3a:84:29:36:7e:93:
9c:39:40:19:7d:be:92:c8:a2:6e:6e:79:36:2e:36:
fa:b9:a6:ed:a2:a5:51:29:b9:8e:c1:a5:18:5f:06:
c0:03:a2:b5:cb:38:da:5e:0f:cc:9c:ee:1c:e7:8b:
bb:f9:9a:71:0e:d9:45:1b:0e:9b:a1:46:c8:b9:f3:
34:a0:04:8d:66:63:7d:64:21:b0:40:11:4e:9a:53:
86:d1:32:20:65:31:6f:cf:04:82:51:de:66:fb:e6:
da:d3:f7:c0:c6:c2:53:f9:39:3f:6e:32:a3:04:50:
99:3a:fb:45:2e:93:a0:97:f4:83:48:4a:fd:bc:29:
ee:db:b7:35:e4:1e:6f:d6:37:70:d9:9a:ee:7a:47:
cd:e6:f7:59:e5:c1:8c:94:87:9d:7b:a5:1b:89:4d:
fa:dc:9e:ec:19:ff:34:10:af:20:2f:d1:39:94:3b:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4A:5B:42:15:0F:2D:2F:6E:C4:0F:56:90:4E:2B:C1:A7:D9:CC:85
X509v3 Authority Key Identifier:
keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1e:9f:56:d8:30:c9:d0:5c:5d:60:7f:fb:3b:ba:7f:ac:4f:
f1:69:57:e8:54:c1:ec:32:85:8c:8d:39:3e:1c:e5:3e:a9:de:
66:c7:41:c9:07:52:ec:ab:14:82:ab:c5:2d:55:36:50:de:99:
6e:ef:7b:3e:65:4d:a9:f7:3a:5e:29:f4:45:58:8a:d9:12:75:
68:cd:c1:7d:2e:bf:af:e9:f5:a0:79:34:2e:95:55:db:2d:12:
9c:48:07:66:f7:df:ff:90:7e:d6:50:33:a7:c5:5b:c2:b2:92:
10:a5:64:5f:ca:4c:12:ba:bc:bc:a5:81:76:53:4e:d5:84:c2:
19:bf:df:07:47:80:ba:72:7c:6e:6f:7d:c7:07:ee:c3:a9:02:
09:d1:fe:a4:50:af:26:ba:9b:c2:30:8d:a4:97:6a:3a:78:0d:
a6:6d:d2:77:e8:33:0c:66:79:4e:ad:89:95:d6:34:fe:ce:ef:
16:04:7d:0e:6b:cd:73:2e:26:8d:eb:9c:e1:59:84:1c:4b:cd:
72:78:ee:cc:ae:98:c0:e0:3c:e4:10:0d:ec:11:85:1c:28:2f:
5c:4a:00:4e:e4:3c:c6:00:56:1f:c4:ff:4e:a1:d9:62:8d:00:
fe:ca:b5:4d:cf:d5:97:96:2a:80:fc:a8:fd:f7:36:e3:d1:57:
e7:19:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:23:25 2026 by rpki-client