
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
File: qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json)
Hash identifier: IABQEeTEEf7+D69a22iNGylgDbJZE5yGsMKwtaKmWRw=
Subject key identifier: 26:02:34:ED:9B:6C:D2:2C:A2:1F:3C:AC:38:D6:24:6D:69:78:E5:97
Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
Certificate issuer: /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
Manifest number: 0150
Signing time: Wed 23 Sep 2026 05:08:03 +0000
Manifest this update: Wed 23 Sep 2026 05:08:03 +0000
Manifest next update: Wed 30 Sep 2026 05:08:03 +0000
Files and hashes: 1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: evLFRI4j9x1sSW46e0YlzbqJYN8s4spmBbRXlPhXkZg=)
2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: aCExDuGa6YujX3JL0arcNyOR8mwam9J29+GY2ZdNl4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Validity
Not Before: Sep 23 05:08:03 2026 GMT
Not After : Sep 30 05:08:03 2026 GMT
Subject: CN=6ab35eb3-dbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:33:e8:a3:a1:8f:86:19:3b:9b:94:4f:e3:
9c:8d:02:3f:0f:b5:42:52:cf:cc:a7:4c:d0:f0:e2:
14:62:fe:96:04:a0:b5:34:73:56:b1:b1:93:70:5b:
b8:06:3b:38:7d:42:24:79:57:55:6b:6d:a8:88:bd:
61:58:4b:8c:16:e4:12:d8:1f:17:d9:6f:14:ef:99:
55:75:2e:8f:73:85:46:96:12:99:31:ad:d0:c1:b6:
c0:b1:aa:97:b3:5f:e8:17:3a:cd:92:ef:a0:61:5b:
47:c9:52:58:86:10:c0:1f:32:fa:9e:8e:7b:98:cf:
1d:a8:89:6d:c3:eb:0d:52:b1:1b:8a:e6:b9:f7:53:
62:68:d9:53:44:8e:3f:06:9b:cb:c2:b0:a1:33:08:
9d:ab:64:8b:10:79:eb:63:4d:eb:5f:5a:5c:ea:24:
cc:c2:9f:1c:04:8b:13:ea:44:bc:88:ca:8e:0b:65:
84:41:45:4b:89:98:de:d0:77:64:73:3f:fb:ac:0f:
b2:b0:bd:cd:fd:c1:e7:d2:86:a3:e3:9a:20:6a:cc:
09:4a:fb:a0:5b:07:b9:fa:e5:6c:7f:24:5f:e7:9a:
a9:b7:50:c8:6b:83:aa:34:d2:b7:dd:fe:e7:f7:b1:
09:c9:ce:45:f1:70:bb:31:10:35:e2:4d:79:3d:b9:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:02:34:ED:9B:6C:D2:2C:A2:1F:3C:AC:38:D6:24:6D:69:78:E5:97
X509v3 Authority Key Identifier:
keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:1c:8f:57:09:56:90:c3:01:6d:a3:f5:8a:c1:cb:7c:57:
79:b1:86:a2:45:31:55:ed:4d:74:3b:27:0c:35:1c:5c:77:4f:
f2:e1:a2:49:1c:23:62:0e:0b:fa:f3:c1:b9:d7:ea:e6:e0:34:
71:f6:37:9b:ba:32:b4:42:38:7c:2b:d2:47:c5:db:65:f2:15:
f3:06:a5:d9:e5:05:ea:9f:7b:36:9f:a2:b4:88:d3:0a:46:cf:
20:4f:9e:78:7d:97:40:da:49:e3:63:7b:40:07:cb:df:83:b4:
eb:d8:b2:f2:93:35:1a:58:75:dd:6c:73:99:80:96:e6:ee:5b:
3b:37:7e:b7:70:92:60:1c:03:df:6c:c8:2a:50:41:a6:d2:3f:
8d:21:3a:8e:f6:46:14:51:e2:7e:2c:81:fe:11:60:b1:13:c5:
38:7d:17:a3:83:59:0e:c1:c1:f0:79:e2:15:b8:b8:04:7a:12:
b7:54:bb:f6:75:ee:3d:fc:03:2c:da:bc:36:b5:bc:c1:a8:ba:
ee:da:b9:dd:9f:71:65:13:f7:f7:cb:68:80:4f:52:59:f2:ca:
7f:69:22:1f:51:3c:90:46:05:92:ad:ff:85:10:4c:45:84:42:
1c:bf:71:ab:5a:68:a5:f1:ac:dc:b9:71:0e:21:19:e3:df:b4:
66:65:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:26:26 2026 by rpki-client