
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
File: X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft (raw, json)
Hash identifier: nD0/zBO52k9dQgX2nOknfc3GoXTP6+Hqp1pksiFxCWs=
Subject key identifier: 17:41:BD:C6:8E:7E:6F:A6:0D:E6:C9:ED:AA:C5:11:90:79:AC:2C:2F
Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
Manifest number: 6E
Signing time: Sun 27 Sep 2026 08:31:18 +0000
Manifest this update: Sun 27 Sep 2026 08:31:17 +0000
Manifest next update: Sun 04 Oct 2026 08:31:17 +0000
Files and hashes: 1: X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl (hash: sjQl2rN5gCd4+5s98IMXjOrF4EBXj4qsWku0Sn9SrlM=)
2: 58EB7FEA17BA11F192FEB12A393D8C67.roa (hash: 5nbX1XIJNdumuOJIpAiDvH+g4m9L4W7smTojDdZZ4A0=)
3: B1AC59CA17B911F18117E782383D8C67.roa (hash: +NS4dIto6+EmYFB1YZFztX1H1Dxs72FShVzE38yw9hI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Validity
Not Before: Sep 27 08:31:17 2026 GMT
Not After : Oct 4 08:31:17 2026 GMT
Subject: CN=6ab8d456-2ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:56:4f:81:0a:d4:d5:25:ea:d4:65:4c:dd:
5d:d4:59:79:98:95:f3:86:34:3c:99:d4:d8:49:d0:
76:0d:3b:11:ee:e6:2f:77:e9:1b:db:7f:9f:da:e1:
d0:51:ac:50:f4:0e:6d:e5:80:5c:9f:f3:6c:7c:a2:
f0:4a:ae:a6:27:ce:9a:b4:97:d9:a5:56:5b:c1:a4:
b9:e0:32:ba:94:71:c9:b5:75:9f:af:e6:30:a1:8f:
b7:91:ad:0f:e9:be:7b:c9:34:7d:08:8d:29:94:4f:
1f:08:1a:7d:c8:d3:37:50:35:dd:a7:fe:1d:01:2a:
0e:30:ac:7a:ba:61:7c:de:52:1d:60:16:93:92:ec:
08:07:f5:66:21:9a:6b:05:e8:0f:2e:65:d2:2e:59:
ce:b1:8c:83:09:3a:81:7a:49:78:03:5a:bf:05:e8:
11:db:9b:04:bf:bb:31:99:5a:44:0a:be:b4:33:9f:
97:34:a4:71:d7:1b:97:c5:ee:d6:ff:ad:f9:d0:27:
9b:45:d7:e2:ba:31:e7:67:8f:66:df:a4:2c:c3:ac:
29:f5:5a:3a:ec:f6:1d:9c:ba:b8:27:e3:1f:fb:89:
9e:3a:5d:5e:ab:7c:55:8f:26:8a:72:45:4a:50:b0:
21:a0:0b:af:17:c9:89:3e:f1:25:85:5a:37:28:f8:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:BD:C6:8E:7E:6F:A6:0D:E6:C9:ED:AA:C5:11:90:79:AC:2C:2F
X509v3 Authority Key Identifier:
keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:a6:91:d8:e6:16:e4:c3:1a:97:fd:1d:e5:b7:4e:73:09:af:
f3:a5:b4:c7:f0:16:83:58:37:de:6a:89:36:89:1d:06:ab:1f:
b3:06:ad:30:56:ca:e9:2a:7b:f1:ca:c4:6e:fa:59:6d:50:63:
d6:cf:73:04:66:66:7e:98:dd:d3:72:9a:d5:58:7c:3b:d7:8b:
ac:2d:13:c3:50:17:c1:d0:e8:a2:fd:ac:92:9a:81:1f:d3:15:
ab:67:8f:d8:70:ed:12:61:77:d7:ff:27:c6:12:02:db:5b:2c:
ae:54:8c:92:60:34:43:80:4e:64:ae:57:56:b2:c4:ab:df:b9:
f2:d0:e0:2b:99:e9:e6:0e:d3:7f:9e:c2:cf:d9:8c:ec:78:c1:
e3:47:c6:c6:a9:99:9e:e3:50:82:7b:54:29:22:a3:78:77:dc:
b8:4e:fd:11:ad:31:fb:f2:23:0e:bc:5f:3a:4a:07:a7:20:2c:
22:5f:bd:2a:06:34:1d:3f:d3:5e:a9:1f:5a:ac:76:4c:37:e8:
73:60:1f:47:23:6a:38:c8:0d:5e:21:2f:eb:5e:1b:76:c4:56:
56:bd:5f:bf:40:6a:ba:2f:67:73:81:75:ec:38:54:79:18:02:
c3:0d:98:3f:33:3d:9a:9f:12:22:ae:96:6d:77:8d:54:2e:e9:
46:23:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:55:25 2026 by rpki-client