
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json)
Hash identifier: Ow3SrDOqFXMq1ubYXatTXoP3sQePLNuRO0+vVQOrjQo=
Subject key identifier: 53:8A:49:2D:41:35:94:EE:53:69:69:52:C2:8F:B7:03:1F:D8:38:7B
Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Certificate serial: 0CBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
Manifest number: 0CBA
Signing time: Mon 28 Sep 2026 18:40:57 +0000
Manifest this update: Mon 28 Sep 2026 18:40:57 +0000
Manifest next update: Mon 05 Oct 2026 18:40:57 +0000
Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: OBfTYiYlj9B3Kj40XbVtkLH45m/l0sSPCjOaEgBdPFU=)
2: DCA4F74AA77E11F1AC50A9373F11F970.roa (hash: U5B6BD+AQVgGNRiCjakEnvUVRqkWyd49kgo+EJ246as=)
3: AB9730AAA7DD11F1B8E3669D5C11F970.roa (hash: V0nf8R/JXTCmLmr3evrsoWZqErfhyc7Me8vH9L8neaE=)
4: 4C3E706CA52311F1BF257A553D11F970.roa (hash: gX6kPHPqmwsZXWiQP0ngQzAC81Vp3pbcU0fPRnXm1tk=)
5: 4B953CCCA52311F1BF257A553D11F970.roa (hash: 0ImBywBjvGucOTmDCrSxY7e6CfnTVMVfaWd4EW4f3f0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Validity
Not Before: Sep 28 18:40:57 2026 GMT
Not After : Oct 5 18:40:57 2026 GMT
Subject: CN=6abab4b9-fb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:ad:1c:d4:ea:3c:a1:b9:2c:37:2e:d4:23:
b0:a6:ad:51:4c:49:6f:45:af:18:26:d2:08:da:78:
a2:41:45:ec:16:be:65:10:6d:e5:38:01:3a:18:06:
5f:c8:52:1b:13:38:83:a1:2d:75:b1:8e:ac:20:7f:
af:44:89:46:a6:cd:29:73:35:d5:a4:e2:d5:43:8f:
38:d3:b9:72:ef:8b:6b:f4:35:8c:92:29:2e:7a:ad:
1a:66:c4:85:76:51:2f:9a:20:6e:ce:68:db:09:2c:
11:a5:85:80:11:7f:43:33:7e:b3:d2:f4:70:dc:3e:
c5:56:08:3f:5e:f8:f5:a5:5a:56:7f:1b:8a:52:bb:
0c:eb:18:d5:e2:ca:9d:4a:79:90:51:de:d9:5b:21:
ed:5b:93:e1:30:65:35:11:7a:e6:b2:72:8d:c1:30:
cc:24:45:0d:a3:7b:b3:f2:54:63:6d:3f:e2:73:c2:
fd:04:6d:54:a9:dd:98:1a:11:8e:35:56:0e:96:85:
8d:16:17:0a:1b:75:28:47:fc:5a:cd:c7:6f:9b:70:
b4:1e:4e:81:2f:1b:31:4b:0e:46:3e:fd:09:6f:f7:
43:14:b4:12:20:c2:e6:76:c4:41:db:6a:f8:a9:53:
83:58:6d:36:1b:d2:3b:25:b6:ed:32:d2:57:4f:43:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8A:49:2D:41:35:94:EE:53:69:69:52:C2:8F:B7:03:1F:D8:38:7B
X509v3 Authority Key Identifier:
keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:03:49:f7:b6:5e:d4:85:28:d4:0f:55:78:d0:e6:9f:35:
a9:d0:35:7b:34:28:c8:05:5a:7d:0c:35:5f:6f:0e:38:65:7f:
97:d0:5f:32:6a:59:d0:4e:f5:ac:c1:24:19:e6:0e:6a:08:03:
33:b0:79:70:9f:44:bd:29:50:39:ff:79:1a:c5:6e:65:de:c5:
31:72:8d:c5:a2:ce:31:ea:94:bc:ac:27:d5:69:34:a0:d1:f3:
0e:bc:9c:2c:30:46:61:a2:0d:58:64:28:af:55:48:53:4d:a2:
d2:ce:c6:79:c1:fb:d5:5f:63:f6:3c:fa:d0:19:e4:f0:f7:aa:
7a:13:d0:3b:96:2e:04:2d:23:12:a5:95:4d:63:f7:54:33:82:
fd:5a:1c:8b:59:03:05:52:22:00:63:51:9d:ba:f8:73:6a:59:
e5:3d:18:4a:25:f2:28:60:5c:13:24:e4:65:97:87:8a:b3:71:
3d:99:11:50:f0:d9:5a:20:ab:6b:39:58:b3:d2:69:89:4c:42:
80:35:5c:ff:b8:43:c5:c3:50:12:5a:79:46:0e:b1:11:e8:48:
b5:0b:91:c5:9b:1f:4a:5a:7a:b7:e5:5b:38:c3:5d:62:09:22:
cb:21:fe:f6:28:ea:8d:09:55:68:d9:bf:1c:6f:fe:97:40:47:
89:28:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:56:53 2026 by rpki-client