
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier: SWLXo1FvCnVMEQ0IGKWLTMtoF4Dsn1nRcIbj68vSewk=
Subject key identifier: 17:9B:A9:3C:F6:6D:17:A0:56:C9:74:67:4F:8B:B1:2E:8B:54:5F:52
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial: 029B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number: 0296
Signing time: Fri 25 Sep 2026 01:44:32 +0000
Manifest this update: Fri 25 Sep 2026 01:44:31 +0000
Manifest next update: Fri 02 Oct 2026 01:44:31 +0000
Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: 4X+xpSOSjUaz8e21zPSoyWR4wocqHkr+QvpaQ5syOH8=)
2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Validity
Not Before: Sep 25 01:44:31 2026 GMT
Not After : Oct 2 01:44:31 2026 GMT
Subject: CN=6ab5d1ff-0ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:7f:ec:f1:67:20:54:0e:fd:aa:9b:9e:37:
f6:7c:40:d4:d5:f7:68:54:54:31:6e:ec:12:a0:c6:
61:94:b6:9e:7b:dd:cc:d1:e3:6d:77:41:c0:f0:aa:
6c:bf:29:10:9e:ef:a3:8e:cb:99:96:ac:d4:eb:86:
fc:9f:f1:72:85:49:37:e0:4c:d2:f3:4e:76:f5:0d:
ac:ac:d1:5c:9e:ec:0b:77:2e:d8:1a:51:02:de:92:
1c:5a:7a:32:ae:ca:1d:5b:a1:2e:87:e2:f4:30:3d:
a3:21:48:c2:99:aa:46:3c:db:d2:07:bd:5d:4f:86:
e4:e8:11:16:14:f9:be:27:b6:a6:36:b3:9a:27:a8:
5c:f6:0c:21:53:36:53:1f:64:98:6a:64:d3:0e:f1:
af:4d:aa:a7:16:c0:86:3f:ab:e1:7b:65:72:07:b2:
2e:64:3b:fb:2e:0d:e2:5e:f8:28:54:28:7a:44:05:
4a:8b:37:3e:7f:d4:36:ab:c1:6b:95:87:ca:6a:0d:
ee:ed:81:ed:bb:2b:61:75:50:11:16:81:05:ca:a6:
4c:e4:97:3f:96:2b:60:31:22:d3:87:24:fe:97:36:
8f:8d:3d:e0:67:38:f7:ca:39:94:e5:80:19:35:06:
49:ad:dd:65:9c:e5:c6:56:4e:87:fb:4c:35:05:8c:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9B:A9:3C:F6:6D:17:A0:56:C9:74:67:4F:8B:B1:2E:8B:54:5F:52
X509v3 Authority Key Identifier:
keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:da:cf:46:12:a9:2d:ed:6e:e1:19:32:9d:cb:be:d6:da:e7:
0f:39:6b:91:a9:e9:14:37:e8:62:02:c7:61:55:20:4c:36:24:
67:ba:a8:40:52:64:12:8c:b2:fb:78:f2:b6:31:3d:2d:39:29:
49:c0:05:69:6b:c3:c5:b1:34:0a:94:fd:26:ac:0f:48:81:05:
93:39:9c:72:f7:91:de:b6:47:f3:1f:a7:1d:8f:d4:d6:fe:d9:
19:49:c2:5e:f6:53:67:68:3c:4f:11:51:da:39:60:16:8c:1a:
57:d6:1e:2f:ec:e5:24:23:22:33:ba:bf:84:99:57:28:43:70:
ff:12:36:e7:b9:74:a7:eb:7e:fa:38:90:03:77:1d:87:bd:e8:
fd:c8:c9:a4:3d:3e:12:51:cb:44:52:24:64:b4:45:b9:73:be:
80:e4:7c:79:52:cd:83:d2:b0:c3:aa:7b:55:5d:ad:62:04:35:
b1:ae:5c:6f:1c:ca:7e:9c:31:76:44:d4:88:39:6d:7e:87:2a:
7f:d7:53:cd:8b:ca:cd:47:be:c3:61:ec:3c:15:c2:35:c6:4d:
d1:86:85:3a:c8:42:07:be:7f:e0:9a:03:b8:7c:f7:f8:1e:db:
02:dd:03:d6:ca:eb:01:9e:37:b5:40:41:80:a0:f7:50:d6:54:
8f:bd:91:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5
NDdCRTA5MkEwHhcNMjYwOTI1MDE0NDMxWhcNMjYxMDAyMDE0NDMxWjAYMRYwFAYD
VQQDEw02YWI1ZDFmZi0wZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUl/7PFnIFQO/aqbnjf2fEDU1fdoVFQxbuwSoMZhlLaee93M0eNtd0HA8Kps
vykQnu+jjsuZlqzU64b8n/FyhUk34EzS80529Q2srNFcnuwLdy7YGlEC3pIcWnoy
rsodW6Euh+L0MD2jIUjCmapGPNvSB71dT4bk6BEWFPm+J7amNrOaJ6hc9gwhUzZT
H2SYamTTDvGvTaqnFsCGP6vhe2VyB7IuZDv7Lg3iXvgoVCh6RAVKizc+f9Q2q8Fr
lYfKag3u7YHtuythdVARFoEFyqZM5Jc/litgMSLThyT+lzaPjT3gZzj3yjmU5YAZ
NQZJrd1lnOXGVk6H+0w1BYwGkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBebqTz2
bRegVsl0Z0+LsS6LVF9SMB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0
QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi
enJmc2RjRjRZUHVVZS1DU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwNrPRhKpLe1u4Rkyncu+1trnDzlrkanpFDfoYgLHYVUgTDYkZ7qoQFJkEoyy
+3jytjE9LTkpScAFaWvDxbE0CpT9JqwPSIEFkzmccveR3rZH8x+nHY/U1v7ZGUnC
XvZTZ2g8TxFR2jlgFowaV9YeL+zlJCMiM7q/hJlXKENw/xI257l0p+t++jiQA3cd
h73o/cjJpD0+ElHLRFIkZLRFuXO+gOR8eVLNg9Kww6p7VV2tYgQ1sa5cbxzKfpwx
dkTUiDltfocqf9dTzYvKzUe+w2HsPBXCNcZN0YaFOshCB75/4JoDuHz3+B7bAt0D
1srrAZ43tUBBgKD3UNZUj72RVA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:14:24 2026 by rpki-client