
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
File: QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json)
Hash identifier: N1dVbkNytOn9XiFTCanoWjgfNdB6uGWI8/IV7aRLYfA=
Subject key identifier: 25:E8:D3:54:BE:C7:FA:80:F0:68:D3:E5:04:31:A4:7C:3D:1D:43:11
Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
Manifest number: 0155
Signing time: Wed 23 Sep 2026 05:03:36 +0000
Manifest this update: Wed 23 Sep 2026 05:03:35 +0000
Manifest next update: Wed 30 Sep 2026 05:03:35 +0000
Files and hashes: 1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: j0XLt7y/RNBIdZ6ACg5bUUUtijekBffuoAJ222N24y0=)
2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: X9jpiXNF6OhTo/yBL+rWyn/9IGUFR3BsO1wY0JKMT4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Validity
Not Before: Sep 23 05:03:35 2026 GMT
Not After : Sep 30 05:03:35 2026 GMT
Subject: CN=6ab35da7-b0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:44:8c:b0:80:66:bc:2a:f6:23:00:ff:bd:
ff:ea:ae:ca:ee:25:72:ae:c1:df:af:9d:90:24:6f:
c9:79:ec:df:30:b3:d6:9b:19:99:c1:4b:d5:9e:f7:
d3:3a:c4:59:d7:c0:da:35:cc:69:f3:35:73:db:f7:
18:b6:88:9a:5d:f1:6b:47:ba:c7:23:01:87:57:c6:
87:b9:5c:4d:19:81:6c:c0:da:89:ac:73:5d:35:ef:
f5:d3:77:d6:c5:55:43:de:8a:ec:b8:67:f1:83:1b:
41:9c:85:05:33:ca:60:cd:78:bd:7c:5f:ca:db:8e:
27:33:7f:78:06:bb:bf:77:d6:71:1c:68:bd:05:1c:
6c:18:bd:3e:c9:7f:9c:19:eb:f9:1e:b3:3f:0e:09:
4b:80:43:01:a9:ac:fc:6e:31:c2:7e:98:ea:d7:2c:
bd:9d:39:04:09:e7:98:6c:b3:bf:38:b8:58:a3:e8:
cc:23:3d:cb:04:76:06:a6:65:d2:67:17:66:d0:c4:
e0:d8:55:db:67:49:41:08:2a:c2:94:fd:b7:2a:7e:
e5:e0:a3:4b:be:cf:fc:7e:75:87:a2:8e:e1:d4:3d:
d5:51:db:5b:72:99:7b:fc:7e:e1:e8:90:c1:47:5e:
bd:7d:8b:0c:d2:6d:6e:75:56:5c:79:49:ba:82:66:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:D3:54:BE:C7:FA:80:F0:68:D3:E5:04:31:A4:7C:3D:1D:43:11
X509v3 Authority Key Identifier:
keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d9:de:bb:fe:98:44:4a:1f:5f:45:fc:e3:17:43:93:3f:cb:
e9:ee:67:72:37:e9:d2:67:34:d6:ae:93:76:86:07:2e:4b:34:
86:ab:9a:1a:8e:99:0b:f7:17:78:9d:d5:6e:35:81:5d:eb:c6:
16:cb:29:a7:44:0c:b7:21:55:f1:96:9a:8f:6c:02:52:74:fa:
2c:ab:ef:b7:b5:d8:36:d5:2e:a7:53:80:6f:fc:1b:69:35:89:
9c:82:f7:d5:d9:f6:da:5f:c3:7f:21:75:dd:44:dc:5b:ad:ed:
c9:63:6f:f8:72:a0:49:30:4f:ff:02:7f:e6:c7:95:35:44:39:
55:76:f3:e9:d5:9e:a7:31:09:57:58:21:e6:80:2f:05:90:01:
69:f7:de:73:bb:78:ed:66:94:be:56:ec:cb:a7:9c:85:9e:28:
65:46:08:45:4c:6f:96:c1:1e:c1:10:f5:6b:b5:f0:7d:62:30:
c3:09:8d:cc:50:2c:53:dd:83:9e:93:9e:13:b0:23:f8:2d:52:
db:89:53:70:ea:d0:03:20:4e:ad:e5:a5:d5:c5:80:6c:ce:b0:
50:16:d6:bc:a3:02:5f:30:90:10:38:4d:1b:16:dc:73:09:a1:
93:61:2c:de:53:57:3b:dc:a1:e2:32:da:1c:04:3d:70:26:68:
67:9b:b9:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZBQ0IxMTAvBgNVBAUTKDQwMkQxRDBCRDkxRjQzODAyQzdBMEQ3MDczNjE4OEJF
QkEwQTA4MTIwHhcNMjYwOTIzMDUwMzM1WhcNMjYwOTMwMDUwMzM1WjAYMRYwFAYD
VQQDEw02YWIzNWRhNy1iMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYBEjLCAZrwq9iMA/73/6q7K7iVyrsHfr52QJG/JeezfMLPWmxmZwUvVnvfT
OsRZ18DaNcxp8zVz2/cYtoiaXfFrR7rHIwGHV8aHuVxNGYFswNqJrHNdNe/103fW
xVVD3orsuGfxgxtBnIUFM8pgzXi9fF/K244nM394Bru/d9ZxHGi9BRxsGL0+yX+c
Gev5HrM/DglLgEMBqaz8bjHCfpjq1yy9nTkECeeYbLO/OLhYo+jMIz3LBHYGpmXS
Zxdm0MTg2FXbZ0lBCCrClP23Kn7l4KNLvs/8fnWHoo7h1D3VUdtbcpl7/H7h6JDB
R169fYsM0m1udVZceUm6gmbThQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXo01S+
x/qA8GjT5QQxpHw9HUMRMB8GA1UdIwQYMBaAFEAtHQvZH0OALHoNcHNhiL66CggS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8xQzk0NkFGMkI0
NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9RQzBkQzlrZlE0QXNlZzF3YzJHSXZyb0tD
QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FDMGRDOWtmUTRBc2VnMXdjMkdJdnJvS0NCSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkFDQi8xQzk0NkFGMkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9RQzBkQzlrZlE0
QXNlZzF3YzJHSXZyb0tDQkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK9neu/6YREofX0X84xdDkz/L6e5ncjfp0mc01q6TdoYHLks0hquaGo6ZC/cX
eJ3VbjWBXevGFsspp0QMtyFV8Zaaj2wCUnT6LKvvt7XYNtUup1OAb/wbaTWJnIL3
1dn22l/DfyF13UTcW63tyWNv+HKgSTBP/wJ/5seVNUQ5VXbz6dWepzEJV1gh5oAv
BZABaffec7t47WaUvlbsy6echZ4oZUYIRUxvlsEewRD1a7XwfWIwwwmNzFAsU92D
npOeE7Aj+C1S24lTcOrQAyBOreWl1cWAbM6wUBbWvKMCXzCQEDhNGxbccwmhk2Es
3lNXO9yh4jLaHAQ9cCZoZ5u50g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:03:22 2026 by rpki-client