
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier: 9zjsxcu3T8h+YXG3dUG2BlTAT+pgLKwxsf80uivJo+M=
Subject key identifier: 51:89:F6:95:F0:BA:03:8B:CF:7F:CD:97:54:F4:92:FD:43:17:0C:9E
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer: /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number: 027D
Signing time: Fri 25 Sep 2026 02:12:42 +0000
Manifest this update: Fri 25 Sep 2026 02:12:42 +0000
Manifest next update: Fri 02 Oct 2026 02:12:42 +0000
Files and hashes: 1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: C+tKtxCFlF3ExsjoXR8kdAG1hooQojX+RokqdGUjdb0=)
2: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: /3te3zobVZswJsFFIn071Wgbe9BzUFq7AKG46skLDvA=)
3: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: Hhuce/k2Nig26k0PhaoBK79YcGuzei5AcpeXnj1kphs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Validity
Not Before: Sep 25 02:12:42 2026 GMT
Not After : Oct 2 02:12:42 2026 GMT
Subject: CN=6ab5d89a-be89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:1f:7b:86:cf:66:b7:c7:9c:16:fe:d1:60:
6f:89:29:69:10:0c:f3:3f:42:12:a4:be:81:cb:da:
51:07:12:d5:96:10:68:5d:6a:1f:1f:32:12:ad:ab:
59:75:16:df:db:cf:ff:91:ca:3a:49:1f:07:86:6b:
85:e8:ad:f6:5e:bf:95:0a:64:08:b1:d2:29:f6:d9:
f1:e1:db:89:42:b9:e3:19:af:aa:1e:c0:11:7b:7e:
62:4a:39:62:5a:59:97:9c:5d:66:fe:7a:f5:c7:78:
25:5a:d0:0a:5a:e4:c4:b1:26:69:d7:6a:84:5a:ea:
de:c6:26:e8:3f:81:3f:1f:41:c2:b2:1b:9b:ad:b2:
9a:7b:f7:1e:0e:5a:cb:c9:fe:c2:f3:e2:1e:98:af:
33:c0:3a:49:46:67:89:5e:c8:4d:c7:11:ad:29:ac:
a8:17:81:55:77:e3:63:9d:75:d4:d6:c7:65:84:50:
9a:e2:d3:e0:d5:39:04:53:80:93:3e:a6:a0:93:c5:
94:95:52:55:b1:da:9a:cb:dc:7e:ff:0a:0a:87:21:
cc:7d:8a:6a:8f:89:22:56:3d:1c:d5:ff:2b:7d:71:
17:f2:2b:3e:24:89:eb:35:52:c9:ac:1a:9a:96:ec:
e2:7e:3a:02:72:74:55:09:6e:a3:9c:83:6f:eb:dd:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:F6:95:F0:BA:03:8B:CF:7F:CD:97:54:F4:92:FD:43:17:0C:9E
X509v3 Authority Key Identifier:
keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:5e:c4:e2:d6:32:a8:98:07:3f:ea:80:60:35:29:c4:6d:
07:fd:fd:00:ca:29:93:84:92:91:2a:2b:4a:12:14:54:85:e0:
a8:0e:0f:3c:47:38:8d:0d:9f:d4:2d:82:aa:9b:28:3d:9c:5a:
84:d1:82:32:7d:52:76:f0:71:62:4f:0e:af:c6:f9:81:5d:fa:
cb:e4:a0:30:0a:fd:1a:5a:81:4a:29:c8:be:71:bf:69:e0:a4:
c4:ce:5a:cb:4c:59:a6:cd:45:d4:14:10:95:a9:92:3a:75:56:
1d:43:a0:ee:57:9d:22:60:61:4a:25:1a:8d:5d:f3:b2:35:54:
91:0e:b3:ae:61:01:9a:b9:54:66:94:fc:b9:28:a3:7f:08:11:
b3:e5:bb:55:e7:e6:59:f0:58:6a:8d:7e:71:00:87:af:6b:2b:
94:3f:39:37:ee:65:09:eb:cf:bd:ed:e8:f3:71:66:4a:a7:8f:
81:2d:68:60:b6:e8:2b:9b:ca:23:83:a9:86:60:7f:27:7e:43:
28:02:9c:04:1f:bc:2d:e8:9b:05:5d:aa:ec:4e:36:1b:5c:33:
11:17:4a:2b:d7:5c:13:9d:e9:57:d7:a4:f4:65:80:03:4a:ce:
cf:ce:ec:91:d4:ab:e9:db:46:8d:90:22:61:2c:5f:89:40:1e:
37:f8:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:32:26 2026 by rpki-client