
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier: ZK32jqiXc/f6HBEgQk5TzrwjjP4TxD0YEjDy/K1WQjk=
Subject key identifier: B6:7B:C3:3B:30:8D:2D:FE:D3:17:A2:EF:4F:03:0D:4E:E2:13:83:46
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number: 02B0
Signing time: Sun 15 Nov 2026 01:37:03 +0000
Manifest this update: Sun 15 Nov 2026 01:37:02 +0000
Manifest next update: Sun 22 Nov 2026 01:37:02 +0000
Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: VvrdEvCSwp4xxg78kJwqoHeGv40+aEKnjxarAcRzMjU=)
2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Validity
Not Before: Nov 15 01:37:02 2026 GMT
Not After : Nov 22 01:37:02 2026 GMT
Subject: CN=6af90cbf-4fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:b3:b8:3b:74:3d:82:b9:ba:17:ca:48:e4:
f5:af:2e:2f:c4:13:bb:11:3d:77:32:75:51:48:07:
f9:34:04:36:5d:88:f7:4d:85:a7:9a:f6:1c:2d:f4:
4a:ee:30:4b:57:8e:39:b1:d2:b4:60:76:38:3d:a4:
63:73:e3:12:a9:52:eb:25:6f:d2:70:6e:dc:8a:b9:
20:29:63:d7:64:35:fd:b9:64:b2:14:f0:45:83:46:
1f:d2:bf:a4:cf:c6:3d:49:5b:cf:b6:a2:0c:bb:5a:
63:10:90:21:c6:63:56:65:1f:2c:68:af:95:df:64:
d5:b5:7a:26:bd:6b:27:a5:a6:f8:32:1d:5a:d4:85:
47:8e:67:f0:d9:34:bd:98:9f:b6:fb:d6:ff:0f:9d:
c4:09:91:38:a7:cc:2b:45:ab:72:00:1e:d8:84:ce:
72:e1:13:40:73:0f:e0:28:dd:df:39:47:9d:40:2a:
5b:69:ef:ed:19:4b:55:a1:27:9d:dc:49:dc:df:b1:
46:8a:37:0d:c5:10:d2:db:dc:6e:7a:84:26:da:8a:
d4:90:72:00:92:a7:8e:3a:fc:ca:92:6e:7a:45:10:
75:de:f4:54:37:d4:77:2a:fc:1a:39:99:ba:26:4a:
36:f3:16:48:e2:3e:83:2e:45:8b:fa:d1:b6:60:b5:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:C3:3B:30:8D:2D:FE:D3:17:A2:EF:4F:03:0D:4E:E2:13:83:46
X509v3 Authority Key Identifier:
keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:24:e7:bc:cc:b6:6b:7e:29:91:20:2c:0b:89:87:62:2c:
43:ad:ba:0f:99:df:f8:ad:1e:d4:4a:aa:29:91:47:1a:26:5f:
99:ee:5b:85:d6:1c:d5:07:65:49:eb:57:ea:bb:c6:a6:79:27:
95:f4:7b:ea:f0:95:81:da:ab:47:cd:fa:99:44:09:8a:a8:a1:
9c:90:cd:83:4a:25:e5:61:40:a9:fc:4a:0f:7f:66:70:b8:e7:
d9:c6:b6:94:e3:f4:2c:c0:1c:e1:dd:8c:b5:0b:73:4b:6b:3a:
0d:9a:6f:da:c5:b2:97:d6:b4:cc:e8:d1:14:b3:fd:b7:1f:f9:
e9:da:26:33:a3:1f:7c:ce:95:a8:d3:07:4e:1e:86:1c:f9:e5:
2e:66:ae:32:fa:b5:71:b5:a9:ae:cb:e9:29:be:11:41:f4:7d:
7b:0a:34:dd:92:59:eb:0b:09:27:df:92:5b:ff:c0:2a:5e:8f:
f0:88:8b:97:80:be:98:fd:0a:6f:c5:c9:cd:ba:61:44:e9:03:
bd:a9:e2:ae:e8:e6:fb:79:f2:86:e9:1c:9f:62:88:72:b5:63:
37:8f:5a:31:d3:f0:12:62:96:d2:ee:3a:3b:90:20:6d:4b:e9:
aa:84:6a:8a:69:cc:b4:0e:8b:89:24:7f:fc:49:8c:18:5d:f1:
49:79:f5:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5
NDdCRTA5MkEwHhcNMjYxMTE1MDEzNzAyWhcNMjYxMTIyMDEzNzAyWjAYMRYwFAYD
VQQDEw02YWY5MGNiZi00ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3vSzuDt0PYK5uhfKSOT1ry4vxBO7ET13MnVRSAf5NAQ2XYj3TYWnmvYcLfRK
7jBLV445sdK0YHY4PaRjc+MSqVLrJW/ScG7cirkgKWPXZDX9uWSyFPBFg0Yf0r+k
z8Y9SVvPtqIMu1pjEJAhxmNWZR8saK+V32TVtXomvWsnpab4Mh1a1IVHjmfw2TS9
mJ+2+9b/D53ECZE4p8wrRatyAB7YhM5y4RNAcw/gKN3fOUedQCpbae/tGUtVoSed
3Enc37FGijcNxRDS29xueoQm2orUkHIAkqeOOvzKkm56RRB13vRUN9R3KvwaOZm6
Jko28xZI4j6DLkWL+tG2YLWnVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZ7wzsw
jS3+0xei708DDU7iE4NGMB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0
QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi
enJmc2RjRjRZUHVVZS1DU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa08k57zMtmt+KZEgLAuJh2IsQ626D5nf+K0e1EqqKZFHGiZfme5bhdYc1Qdl
SetX6rvGpnknlfR76vCVgdqrR836mUQJiqihnJDNg0ol5WFAqfxKD39mcLjn2ca2
lOP0LMAc4d2MtQtzS2s6DZpv2sWyl9a0zOjRFLP9tx/56domM6MffM6VqNMHTh6G
HPnlLmauMvq1cbWprsvpKb4RQfR9ewo03ZJZ6wsJJ9+SW//AKl6P8IiLl4C+mP0K
b8XJzbphROkDvanirujm+3nyhukcn2KIcrVjN49aMdPwEmKW0u46O5AgbUvpqoRq
imnMtA6LiSR//EmMGF3xSXn1+w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:51 2026 by rpki-client