
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File: Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier: vmyUf+4O2lM/aLMKmEue6BN4upS+bv4TOIAdB//EzsM=
Subject key identifier: EC:32:45:80:80:E0:CD:DC:94:13:E9:EF:D5:AC:FB:1A:B0:99:A1:36
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1D0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number: 1CCF
Signing time: Thu 24 Sep 2026 16:09:56 +0000
Manifest this update: Thu 24 Sep 2026 16:09:56 +0000
Manifest next update: Thu 01 Oct 2026 16:09:56 +0000
Files and hashes: 1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: 8JPBRh/0YYdDD7dYX2YJFAmKOyfAJRBRF2s5tVa3cZg=)
2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: CUmgiDbzwbQpCrmzIVG8aB3235V6JStS3CWUqJZ04yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7439 (0x1d0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: Sep 24 16:09:56 2026 GMT
Not After : Oct 1 16:09:56 2026 GMT
Subject: CN=6ab54b54-6468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:96:8b:fc:92:7f:7a:ef:83:78:ac:c6:d6:
25:da:3e:2f:01:36:e2:de:ae:6e:04:f8:39:92:76:
54:a4:bd:6e:37:11:47:58:e6:fc:e8:44:ab:b0:f1:
80:4a:d2:d9:4f:69:f5:79:96:5a:bb:26:2d:27:50:
a8:c6:50:d6:10:d6:12:a1:38:2e:0e:2a:b3:ca:ef:
94:53:ad:4a:d7:05:52:5b:04:c7:2c:9d:56:00:95:
80:c7:90:23:31:3c:c2:5d:8a:7c:29:8e:a2:7c:a3:
08:d4:8c:66:69:ef:dd:45:6d:1e:16:18:a8:0f:70:
1e:45:ed:dd:fc:61:54:29:8c:73:28:7a:e5:a2:67:
6d:6f:db:da:4c:99:50:e2:87:b7:25:be:49:06:8f:
58:ff:5a:f9:d4:1a:90:39:40:55:ca:46:29:80:54:
01:99:dd:e0:86:0c:2f:68:ab:61:12:51:d2:94:3b:
b8:4d:0a:ea:69:e6:b8:6f:45:cf:5a:59:7d:55:3f:
1c:19:f2:65:86:fb:62:e3:01:01:3e:75:92:1c:09:
55:84:40:f9:cf:63:ce:4e:9d:94:fd:55:45:49:82:
3d:e0:d8:ab:df:28:bf:9d:13:b4:e5:c8:d4:e3:c5:
51:2e:87:54:8d:bb:cc:02:47:69:65:70:28:b0:19:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:45:80:80:E0:CD:DC:94:13:E9:EF:D5:AC:FB:1A:B0:99:A1:36
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:06:86:63:45:e3:32:f0:ce:d5:5e:f7:bd:3f:c4:a5:20:1f:
d5:7e:2a:c1:1e:f7:cc:cd:f2:e2:3b:2a:4c:30:65:95:f5:8e:
55:16:98:d6:25:67:88:94:6c:66:92:c0:10:67:0f:cc:e9:26:
6f:70:a8:c3:e4:6f:66:b6:e3:ec:2c:38:38:07:c1:05:b8:ad:
ec:67:e3:e5:0b:86:bb:86:e7:69:98:7d:16:bd:2f:26:cf:31:
9d:a4:4e:f9:4a:52:01:c0:e1:b4:90:d6:23:8c:7a:b8:70:8a:
7b:d9:1b:40:4b:f0:0e:de:34:9b:08:86:b8:8a:2a:82:df:44:
e1:9c:37:39:e3:26:57:0a:ac:43:ce:8f:3a:d4:ca:5a:3d:e5:
56:52:ff:9f:bb:b1:d5:86:7e:23:b5:97:00:d7:02:ba:51:7c:
4e:3c:fa:65:c0:6e:2d:21:50:1a:65:75:cd:7b:45:9d:be:50:
de:3e:11:1e:ff:f0:23:a1:1b:84:6f:03:f3:93:01:64:e6:9b:
65:10:9b:ac:0d:32:e8:7f:95:11:37:d0:72:64:70:18:0e:62:
e8:ca:31:88:3d:ee:e5:ed:40:04:db:97:5c:1c:15:d9:fc:53:
2b:d9:59:7e:e8:84:9a:9a:ca:1c:20:ba:17:22:2c:b4:5a:15:
6c:0d:c0:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB
RDRGQUExREMwHhcNMjYwOTI0MTYwOTU2WhcNMjYxMDAxMTYwOTU2WjAYMRYwFAYD
VQQDEw02YWI1NGI1NC02NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyKaWi/ySf3rvg3isxtYl2j4vATbi3q5uBPg5knZUpL1uNxFHWOb86ESrsPGA
StLZT2n1eZZauyYtJ1CoxlDWENYSoTguDiqzyu+UU61K1wVSWwTHLJ1WAJWAx5Aj
MTzCXYp8KY6ifKMI1Ixmae/dRW0eFhioD3AeRe3d/GFUKYxzKHrlomdtb9vaTJlQ
4oe3Jb5JBo9Y/1r51BqQOUBVykYpgFQBmd3ghgwvaKthElHSlDu4TQrqaea4b0XP
Wll9VT8cGfJlhvti4wEBPnWSHAlVhED5z2POTp2U/VVFSYI94Nir3yi/nRO05cjU
48VRLodUjbvMAkdpZXAosBmFBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwyRYCA
4M3clBPp79Ws+xqwmaE2MB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz
QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjVENy8yNTg3MkJCRTAzQjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxX
ZGlQbllJTTVoR2l0VDZvZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwQaGY0XjMvDO1V73vT/EpSAf1X4qwR73zM3y4jsqTDBllfWOVRaY1iVniJRs
ZpLAEGcPzOkmb3Cow+RvZrbj7Cw4OAfBBbit7Gfj5QuGu4bnaZh9Fr0vJs8xnaRO
+UpSAcDhtJDWI4x6uHCKe9kbQEvwDt40mwiGuIoqgt9E4Zw3OeMmVwqsQ86POtTK
Wj3lVlL/n7ux1YZ+I7WXANcCulF8Tjz6ZcBuLSFQGmV1zXtFnb5Q3j4RHv/wI6Eb
hG8D85MBZOabZRCbrA0y6H+VETfQcmRwGA5i6MoxiD3u5e1ABNuXXBwV2fxTK9lZ
fuiEmprKHCC6FyIstFoVbA3AAQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:40:42 2026 by rpki-client