
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier: kTrQeYttXIe1P5q/SfPvlmA+5XC1rUOrjvqWoFVXLx0=
Subject key identifier: 18:8C:AF:A1:F9:9D:AE:DF:35:9B:6D:4F:FC:DF:88:00:7E:21:09:A0
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number: 01B1
Signing time: Fri 25 Sep 2026 04:09:09 +0000
Manifest this update: Fri 25 Sep 2026 04:09:08 +0000
Manifest next update: Fri 02 Oct 2026 04:09:08 +0000
Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: ZE3TTpxOSeb4eOaLv/z8asV3gUoj5paYH53NIKIEuxk=)
2: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: d5dzHjf47NOOSGPLahsslWBgH1SBkb8wVgAs9kRSe4A=)
3: C06D45B6961611F0870D4413C4F9AE02.roa (hash: 7ZGhxf9oX5UkJZGlhXDn7K0MzOyBj1gitvA48GUMVto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Validity
Not Before: Sep 25 04:09:08 2026 GMT
Not After : Oct 2 04:09:08 2026 GMT
Subject: CN=6ab5f3e4-43b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:6b:ad:a0:de:2b:eb:b5:ba:65:64:79:25:
8f:43:59:ca:94:35:53:f2:48:9c:e3:0a:64:26:ea:
27:ff:96:5f:9c:4a:b3:9e:a7:da:a2:fe:69:24:1a:
44:f7:be:47:8f:75:2d:e7:9f:fa:4b:38:c0:a5:c0:
2f:40:b2:d1:11:7b:5c:ea:2f:38:ab:17:42:fc:88:
6a:43:7a:b7:4c:46:ef:59:70:0b:8d:e6:35:0c:c1:
e6:b8:13:ce:11:17:d6:ff:43:17:cb:9e:dc:71:33:
e1:45:2a:0b:8b:a2:34:69:fc:96:33:be:ef:5c:c0:
e7:ee:66:aa:d5:92:95:b9:b0:d6:fd:c9:6e:ae:0a:
92:9c:50:85:6a:f5:fa:f0:5f:57:f2:61:9b:01:4c:
12:74:84:9c:cc:fa:7d:35:8b:12:6c:bc:6e:9e:11:
1e:e0:37:7b:1a:49:39:fc:56:e7:4c:7a:46:b6:14:
b8:fc:64:37:17:65:f5:0c:04:e3:73:42:8d:c9:11:
f7:86:38:08:f0:4a:1c:10:25:80:e7:81:72:a7:ef:
57:25:ab:51:ec:68:15:90:6b:aa:30:31:8c:f8:e7:
e5:6e:4d:f1:e4:f9:3d:c1:16:a7:73:88:3e:d4:96:
03:46:88:32:05:24:da:2b:ec:bd:fc:3f:5d:7e:ae:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:AF:A1:F9:9D:AE:DF:35:9B:6D:4F:FC:DF:88:00:7E:21:09:A0
X509v3 Authority Key Identifier:
keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:a7:ea:14:7d:e8:7a:46:c5:2a:cd:50:c6:be:ef:68:28:93:
ea:33:47:07:61:cd:50:aa:5f:07:1b:02:03:b7:6c:6a:72:68:
15:23:e3:47:ac:2d:a6:79:45:cf:97:3d:f4:fd:a2:9e:28:8b:
7f:96:0b:79:4f:34:fd:ab:bf:69:d6:a9:dd:ae:46:2d:02:b6:
52:ed:1e:0e:7c:04:c5:09:b6:ce:0a:45:ec:01:61:f8:9d:f4:
42:df:f7:5f:d7:0d:90:0a:09:20:6f:65:6e:fb:a4:73:c3:14:
b6:f1:62:08:ee:1e:9c:38:87:e4:d5:27:32:96:da:03:3c:20:
c0:36:70:fc:2d:a2:05:5c:dc:52:09:9d:bd:dd:76:39:31:5b:
bb:dc:2f:a6:61:dd:15:f4:6a:e3:68:e5:61:ec:a3:b5:b2:d8:
4a:c4:49:b0:ed:9a:c2:9f:ab:3e:c1:66:9f:2b:89:13:73:aa:
1b:0b:48:96:9b:81:a5:1d:b3:1d:61:78:69:75:06:50:47:3e:
03:7a:2c:ad:38:26:a4:b9:c6:ca:b4:a0:2e:3a:07:ff:16:18:
71:62:80:54:49:e1:c6:20:a1:7c:70:c6:4a:9a:a6:b4:e1:e3:
f6:ac:70:37:88:2b:60:d9:d6:9c:27:a6:a3:23:1b:6b:3c:42:
bf:4f:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:55:44 2026 by rpki-client