
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
File: Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json)
Hash identifier: IratO7WEjidi5tmxwPaAQ30uBcIFGcdqqb1ZchAEN74=
Subject key identifier: 18:B7:1D:C7:4E:36:33:2E:1B:3D:9E:74:20:3D:C5:6E:EF:66:0B:52
Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
Certificate issuer: /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
Manifest number: D0
Signing time: Mon 05 Oct 2026 07:07:11 +0000
Manifest this update: Mon 05 Oct 2026 07:07:10 +0000
Manifest next update: Mon 12 Oct 2026 07:07:10 +0000
Files and hashes: 1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: kzpL28nweGH73n8ABZQi6yhG+6LbDEW95NmKB00EOM4=)
2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: cPnYWMNQVMlUCzK+IYFg8KOYZlfdR0D1X+BkfCqpA3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Validity
Not Before: Oct 5 07:07:10 2026 GMT
Not After : Oct 12 07:07:10 2026 GMT
Subject: CN=6ac34c9f-ff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:fc:cd:bf:6d:46:34:1b:7c:9d:6b:c9:a9:
67:04:4c:07:7b:cd:55:a4:ac:c6:b3:48:8c:d7:dd:
eb:20:9e:a3:47:ab:6a:d1:0a:95:7e:65:0c:50:5e:
0a:d6:4e:2e:55:d9:dc:34:e8:f3:d9:48:29:2a:29:
ac:63:e6:1c:77:46:a6:b4:ae:6a:d4:af:29:3b:aa:
2f:ce:d5:68:af:f3:fd:56:35:a1:19:10:cb:15:47:
85:c3:43:6c:07:6e:0e:a8:f5:78:fc:5f:79:f0:07:
eb:f6:0a:a9:fa:b6:b6:44:69:9d:73:90:89:04:80:
14:10:6a:49:80:ac:43:1d:39:7b:55:20:11:52:cd:
cd:b5:9a:7c:32:be:25:a1:45:d2:e5:84:8a:e3:79:
ef:61:f0:50:3f:66:ba:91:0c:f9:52:5a:96:7d:c5:
59:0c:9f:1c:65:87:a4:6e:50:13:fb:ed:ba:b0:33:
04:17:74:02:11:81:f6:05:d5:36:6a:74:b9:4c:c2:
f0:5a:70:e6:46:81:c9:e3:5d:a4:ac:4d:50:ce:09:
9d:01:19:21:9d:89:a4:a8:ec:4b:d2:ca:4f:1d:f4:
59:c4:a3:5f:6e:5c:58:cb:4a:28:74:18:77:50:3a:
da:5b:09:14:fb:1e:54:d6:24:4a:54:be:a4:dc:3b:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B7:1D:C7:4E:36:33:2E:1B:3D:9E:74:20:3D:C5:6E:EF:66:0B:52
X509v3 Authority Key Identifier:
keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:fe:2e:55:aa:a8:01:79:e5:74:5d:59:dd:94:d7:ce:56:0e:
fb:cd:ed:e3:18:d4:8c:4c:3a:49:47:a7:e0:f3:7a:a7:ed:77:
a0:d8:98:d0:93:ec:7b:66:91:13:b0:31:d1:b3:0a:39:6c:30:
a2:b3:4a:8c:91:bf:ab:c5:e3:8c:ec:c3:c1:6b:3c:48:82:6b:
e2:2b:38:a2:5d:a9:14:b5:01:b3:7c:cf:d3:0b:88:73:f9:c2:
0a:31:18:53:c8:2e:dc:54:8d:99:e0:4b:8f:5d:9e:96:f1:7c:
07:25:9c:6c:5e:ca:13:62:4d:3c:88:5f:a4:b5:5b:ba:a0:4f:
0a:df:9c:3d:7f:85:96:54:cb:f3:a3:36:f3:9d:36:c8:d0:f0:
55:0d:66:27:19:81:3e:0a:45:dd:b0:4c:91:98:7b:88:2b:63:
f0:ca:ab:c0:d4:a9:5e:8f:5c:18:07:10:a0:44:28:1a:aa:d0:
36:1c:e7:66:9c:49:65:66:eb:58:45:04:c5:0d:fa:b7:b0:7f:
ae:12:97:3a:91:e0:00:13:57:8e:ef:17:cd:3c:bf:59:59:d8:
12:3a:25:7c:c7:c1:c0:b1:b8:e8:2d:07:e2:80:5c:48:bd:df:
c9:8f:42:7b:87:f7:dd:73:99:7c:6e:86:81:68:24:37:1b:b6:
d4:c5:74:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:22:41 2026 by rpki-client