
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json)
Hash identifier: pZ+g8Bk6+KVlDiWKWdWZCNSHODhOQKFn5BboBYnrz80=
Subject key identifier: 10:99:D9:47:C5:EA:2F:68:46:AD:5C:60:18:D9:57:5E:BB:66:E8:1B
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
Manifest number: 015C
Signing time: Fri 25 Sep 2026 02:22:01 +0000
Manifest this update: Fri 25 Sep 2026 02:22:00 +0000
Manifest next update: Fri 02 Oct 2026 02:22:00 +0000
Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: gafghU+xE3M21Mh5mEP/u7iEJWrRrGxDT6MGjb1KZJ0=)
2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: rR1KKeL5e9Dn/H+T0NTpy9aZGuScQCP+7yi9NaOAiCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Validity
Not Before: Sep 25 02:22:00 2026 GMT
Not After : Oct 2 02:22:00 2026 GMT
Subject: CN=6ab5dac9-1890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:7c:67:79:c3:fa:44:db:53:23:b6:36:5d:
0a:d5:61:ea:83:53:e7:d5:cc:5a:e9:c3:4b:0b:b7:
48:5c:e1:67:96:ac:8a:b1:99:a2:4d:bc:ad:b4:57:
da:f0:04:89:5e:fd:1b:9b:32:e0:11:e6:a8:a2:06:
65:3a:99:04:a7:70:9a:4f:fe:37:cd:c9:c1:69:85:
95:ae:f1:8d:b2:a2:73:34:ca:28:6a:f9:b4:32:d6:
4f:85:5b:ad:f6:57:cc:af:11:f9:6f:ef:b8:2b:6e:
d7:04:4c:85:2a:c9:84:77:f6:1d:c0:2e:96:5b:8e:
8d:4e:0b:e7:23:f9:b7:77:e8:82:9e:5b:cc:a3:32:
32:1a:05:4b:5e:ab:dc:a2:63:7a:42:b9:73:13:ef:
d9:71:77:5c:30:d8:d7:83:15:d4:eb:c9:7e:76:42:
1c:55:6e:5c:0f:20:ae:89:f9:fe:91:83:fd:97:d7:
b5:09:ac:c0:a5:db:43:a4:4a:78:91:93:a6:86:3a:
a9:3a:aa:27:b7:89:53:df:8a:77:6f:cd:e6:58:b0:
d1:81:7f:2a:dd:8d:49:a8:b8:91:c2:84:4c:8a:f0:
34:55:e2:4a:7d:ec:f9:ae:c6:45:4f:48:32:45:5b:
0e:e2:ee:ef:fa:95:d8:25:0e:41:a0:e2:06:86:1e:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:D9:47:C5:EA:2F:68:46:AD:5C:60:18:D9:57:5E:BB:66:E8:1B
X509v3 Authority Key Identifier:
keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:95:15:50:b0:dc:eb:b2:2d:bf:88:46:93:bf:fc:72:88:21:
55:aa:8a:e5:df:17:db:f6:1e:99:ea:5a:fb:bb:26:15:69:14:
d5:8b:e2:99:87:96:37:4c:20:72:6c:59:72:82:1b:b9:b6:38:
1b:b1:90:81:80:f2:db:53:88:40:9c:44:95:64:f4:db:bc:e9:
ef:45:91:55:76:c2:1d:ba:46:7a:be:2f:07:16:37:a2:29:f9:
85:b8:ed:db:49:1a:de:57:6f:96:b7:23:d3:43:5d:68:ee:1b:
25:7d:48:2f:eb:c1:56:c5:5a:3f:7c:d5:1b:d5:51:7c:09:e9:
80:6e:6f:e4:9f:93:9b:38:0a:4a:a8:6b:4d:85:d5:ec:5c:98:
c7:5a:a5:ee:a0:c2:86:d3:b1:00:47:9e:22:14:c4:6e:5e:ef:
22:b0:4c:ca:6a:b9:f7:60:55:44:1e:95:3b:a3:1b:2b:68:bc:
24:e3:07:e2:fb:94:b4:ea:31:de:f9:a6:63:cf:8c:40:ec:5c:
1d:30:4c:8d:53:3e:b5:b5:86:10:f0:b9:4d:43:34:7c:fe:78:
90:97:ae:cd:56:6d:ce:bc:78:c3:59:a2:c6:e8:88:64:54:2a:
6c:29:e5:e9:99:1a:7b:1d:2e:ee:57:47:df:31:a2:53:ac:73:
44:25:b5:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI0NUYxMTAvBgNVBAUTKDQxMTUyMjM0NjBBM0RERkFDODNBODJGQzYxQjJCRTlF
QzYyNkMyMEMwHhcNMjYwOTI1MDIyMjAwWhcNMjYxMDAyMDIyMjAwWjAYMRYwFAYD
VQQDEw02YWI1ZGFjOS0xODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqid8Z3nD+kTbUyO2Nl0K1WHqg1Pn1cxa6cNLC7dIXOFnlqyKsZmiTbyttFfa
8ASJXv0bmzLgEeaoogZlOpkEp3CaT/43zcnBaYWVrvGNsqJzNMooavm0MtZPhVut
9lfMrxH5b++4K27XBEyFKsmEd/YdwC6WW46NTgvnI/m3d+iCnlvMozIyGgVLXqvc
omN6QrlzE+/ZcXdcMNjXgxXU68l+dkIcVW5cDyCuifn+kYP9l9e1CazApdtDpEp4
kZOmhjqpOqont4lT34p3b83mWLDRgX8q3Y1JqLiRwoRMivA0VeJKfez5rsZFT0gy
RVsO4u7v+pXYJQ5BoOIGhh5euwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCZ2UfF
6i9oRq1cYBjZV167ZugbMB8GA1UdIwQYMBaAFEEVIjRgo936yDqC/GGyvp7GJsIM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ1Ri84Q0EyMEExQ0FB
RDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNmcklPb0w4WWJLLW5zWW13
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjQ1Ri84Q0EyMEExQ0FBRDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNm
cklPb0w4WWJLLW5zWW13Z3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFZUVULDc67Itv4hGk7/8coghVaqK5d8X2/Yemepa+7smFWkU1YvimYeWN0wg
cmxZcoIbubY4G7GQgYDy21OIQJxElWT027zp70WRVXbCHbpGer4vBxY3oin5hbjt
20ka3ldvlrcj00NdaO4bJX1IL+vBVsVaP3zVG9VRfAnpgG5v5J+TmzgKSqhrTYXV
7FyYx1ql7qDChtOxAEeeIhTEbl7vIrBMymq592BVRB6VO6MbK2i8JOMH4vuUtOox
3vmmY8+MQOxcHTBMjVM+tbWGEPC5TUM0fP54kJeuzVZtzrx4w1mixuiIZFQqbCnl
6Zkaex0u7ldH3zGiU6xzRCW10g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:03:55 2026 by rpki-client