
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File: qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier: SlcVVZ/E7kl3+PFobepzSX9DJ7CZ+eEUNjTz2ocNiWM=
Subject key identifier: 42:EB:23:7C:A7:1B:A2:77:FC:04:57:63:50:6C:B0:88:FC:59:14:F3
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial: 3680
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number: 35F5
Signing time: Wed 30 Sep 2026 14:19:52 +0000
Manifest this update: Wed 30 Sep 2026 14:19:51 +0000
Manifest next update: Wed 07 Oct 2026 14:19:51 +0000
Files and hashes: 1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: mGRGdCvbwPapcAALWHO4EFwDYNpi2GsDHH+vi51K3Lw=)
2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: VMik+VP2VW8b9tXPC9B03sMT9ppFEX01lrBrKEr5WZo=)
3: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: YjGvu7hS1PYqJK/ZSd5JlS+EEqqiFgJ4Qzr5idGzW0I=)
4: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: x0LYtT3APJOM1BU3phk/GRsyUAfN6VfKZJ0ccXlvtdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 14:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13952 (0x3680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Validity
Not Before: Sep 30 14:19:51 2026 GMT
Not After : Oct 7 14:19:51 2026 GMT
Subject: CN=6abd1a87-ff23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:17:f6:78:9d:db:8e:3e:a2:0a:18:02:ad:
df:8a:d3:f5:f1:ac:ad:77:55:d7:a8:1f:8b:d1:99:
97:12:31:32:be:e9:39:eb:fb:7c:0e:7b:43:7d:9e:
ea:fe:bd:ed:a5:13:b6:ae:01:14:6a:01:56:cf:4e:
b5:f8:28:9a:64:10:62:3d:2c:03:92:d0:da:f5:8e:
61:05:59:a2:18:cb:f1:3d:26:a5:56:f6:d1:b2:be:
73:54:ef:e0:89:e6:f5:72:a3:f8:24:c0:10:ec:17:
bd:0b:72:bb:24:dc:ed:ff:9b:38:92:e3:6a:bb:0e:
4e:27:86:f3:a9:6b:78:78:47:67:29:a8:eb:ee:f0:
7d:c5:45:62:89:79:bb:e1:ec:17:94:ac:74:cf:f6:
ac:99:48:80:8a:7a:b2:83:82:50:fb:e4:04:16:a1:
52:a3:91:5c:cd:58:f1:21:da:b4:40:bd:c7:78:37:
66:43:2c:1f:ce:38:1d:2f:7d:5a:57:3a:05:c3:bb:
d0:7a:78:fe:ab:50:5a:0e:d3:dd:73:8b:ab:9b:e8:
67:82:f1:7d:ce:d2:67:d0:82:1b:56:cd:1f:7c:73:
51:2d:d4:26:ce:ad:96:61:70:d3:88:25:33:2e:5a:
ff:89:71:1e:cd:37:58:78:b4:95:e3:a7:9b:99:f6:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:23:7C:A7:1B:A2:77:FC:04:57:63:50:6C:B0:88:FC:59:14:F3
X509v3 Authority Key Identifier:
keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:a1:05:92:0c:3c:c5:bc:23:b0:85:6c:f0:2b:12:c1:1f:
e3:73:1b:fc:87:3d:f7:f8:b3:52:c3:e6:23:fe:92:7c:fa:01:
46:f6:f3:89:f3:91:db:c6:4a:6d:6f:59:13:e3:06:5b:0a:17:
b2:da:f9:fd:73:94:1f:9e:48:54:56:6a:bd:1a:28:27:b3:b9:
04:7a:a2:7a:a4:f6:35:0b:30:a8:50:b9:2e:d8:33:32:fe:0c:
a9:98:45:ab:22:88:1e:27:49:71:31:b3:7d:63:7d:16:57:b6:
a3:9e:6c:18:8c:26:df:8e:0b:41:1e:48:2f:7a:c0:bb:a4:fd:
7e:2d:0d:3f:e6:06:ba:2c:48:b3:2f:c5:a3:4e:be:7e:ed:0b:
27:c9:0d:cd:3c:bb:c2:b6:4f:d6:61:b6:18:8f:54:70:dd:6f:
03:39:93:1c:f4:0a:53:7e:61:26:d7:82:ca:74:32:19:cb:e2:
e4:45:ad:ad:a7:60:5f:88:a7:c4:70:db:e8:c8:de:d3:a7:7d:
9b:55:17:80:e4:ed:53:86:6a:d0:b7:55:f9:9a:1b:1f:a5:c7:
61:cc:ae:9d:be:2a:35:88:80:79:3b:97:58:45:85:76:15:27:
ec:20:93:19:e7:82:5f:e6:fc:cd:6f:f2:54:5b:98:df:0f:6e:
85:73:1b:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD
QjhDM0I1MDkwHhcNMjYwOTMwMTQxOTUxWhcNMjYxMDA3MTQxOTUxWjAYMRYwFAYD
VQQDEw02YWJkMWE4Ny1mZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1p8X9nid244+ogoYAq3fitP18aytd1XXqB+L0ZmXEjEyvuk56/t8DntDfZ7q
/r3tpRO2rgEUagFWz061+CiaZBBiPSwDktDa9Y5hBVmiGMvxPSalVvbRsr5zVO/g
ieb1cqP4JMAQ7Be9C3K7JNzt/5s4kuNquw5OJ4bzqWt4eEdnKajr7vB9xUViiXm7
4ewXlKx0z/asmUiAinqyg4JQ++QEFqFSo5FczVjxIdq0QL3HeDdmQywfzjgdL31a
VzoFw7vQenj+q1BaDtPdc4urm+hngvF9ztJn0IIbVs0ffHNRLdQmzq2WYXDTiCUz
Llr/iXEezTdYeLSV46ebmfZltQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELrI3yn
G6J3/ARXY1BssIj8WRTzMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE
NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzM5NC80RjU5MTg2QTFENkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1
TTNfVDE2bG1iRmpMakR0UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE8KhBZIMPMW8I7CFbPArEsEf43Mb/Ic99/izUsPmI/6SfPoBRvbzifOR28ZK
bW9ZE+MGWwoXstr5/XOUH55IVFZqvRooJ7O5BHqieqT2NQswqFC5LtgzMv4MqZhF
qyKIHidJcTGzfWN9Fle2o55sGIwm344LQR5IL3rAu6T9fi0NP+YGuixIsy/Fo06+
fu0LJ8kNzTy7wrZP1mG2GI9UcN1vAzmTHPQKU35hJteCynQyGcvi5EWtradgX4in
xHDb6Mje06d9m1UXgOTtU4Zq0LdV+ZobH6XHYcyunb4qNYiAeTuXWEWFdhUn7CCT
GeeCX+b8zW/yVFuY3w9uhXMb/A==
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:58:25 2026 by rpki-client