
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier: 0toKqEtELQ7Q2aG6fo0lXWF3J9jBZB20GfrC/ajufRw=
Subject key identifier: 58:EA:8C:AC:1D:C4:0C:CD:9D:77:37:D5:02:62:74:51:13:17:3C:15
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number: 0140
Signing time: Wed 23 Sep 2026 05:14:20 +0000
Manifest this update: Wed 23 Sep 2026 05:14:20 +0000
Manifest next update: Wed 30 Sep 2026 05:14:20 +0000
Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: 56l+37T9wRrqE06HJMAewEUNuPq9hwUgyzvf0/thIb4=)
2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Validity
Not Before: Sep 23 05:14:20 2026 GMT
Not After : Sep 30 05:14:20 2026 GMT
Subject: CN=6ab3602c-94e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:83:5d:64:26:72:a5:fa:44:e2:5c:2b:d8:
06:5f:f0:c0:0a:e3:d1:a8:21:dd:8c:6f:b2:f6:39:
4b:c3:53:1d:9a:f1:71:1a:16:99:b3:28:a6:25:a7:
ae:14:14:d9:a1:c6:ab:91:38:f1:3b:d8:80:01:ba:
cf:87:6c:0d:cc:0b:02:2a:8f:0d:d9:bd:51:01:75:
cc:7b:fd:1d:ca:52:07:0f:26:8a:0a:dd:7a:aa:8b:
51:c8:a9:97:2f:1a:af:2d:2c:96:4a:cd:e8:15:67:
76:6b:67:2d:20:0e:d8:3f:ef:a0:df:09:c7:f9:0c:
c5:f2:65:90:7b:50:9d:b3:f5:b9:fe:36:9b:89:d1:
db:7e:45:57:5c:e1:14:6d:4c:6b:ce:0d:92:35:f2:
f2:29:a2:85:a5:62:14:23:95:f4:65:ef:47:d6:83:
38:e0:c4:a3:a6:9c:7c:15:b2:bd:48:51:6b:cc:7d:
34:e6:83:40:86:2d:e1:5c:3f:68:80:b4:b6:f0:1e:
d8:ac:ed:93:a9:bb:0f:93:1f:ac:f8:7a:31:98:86:
76:38:30:bb:9d:3e:da:32:9d:09:1f:c5:29:db:8a:
12:d8:d4:03:3f:65:37:8c:f8:7e:62:e6:1e:bb:f0:
65:17:28:3e:04:f6:1e:ce:a1:57:a9:df:91:88:f8:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:8C:AC:1D:C4:0C:CD:9D:77:37:D5:02:62:74:51:13:17:3C:15
X509v3 Authority Key Identifier:
keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:18:51:03:47:cd:2e:ff:e6:09:80:56:f2:5f:bd:f6:79:b4:
96:df:ad:c0:f8:2c:63:95:db:6f:96:7c:2f:0e:47:3b:7a:73:
ce:1d:69:34:ad:4e:e2:e3:bb:fa:4f:0d:a1:34:38:c3:ad:a8:
da:4b:59:0c:4d:b3:d4:f7:2d:24:2e:c7:f5:b4:d7:9b:79:b8:
30:27:61:ba:b6:be:7b:d4:2c:c3:31:6e:5d:b2:50:3a:06:b5:
e1:e4:83:db:4a:1a:7b:84:4a:11:53:7b:94:96:eb:19:4d:8d:
e8:e3:7f:8c:6b:a3:3f:c7:2e:1c:64:a5:ef:c2:a5:87:85:0e:
a8:21:e3:8f:c7:df:52:be:22:87:bc:e9:09:e5:25:6b:3e:a8:
ad:37:73:73:a4:43:88:dd:37:f4:a0:f0:29:09:e9:ab:d7:d5:
06:be:18:27:72:0b:c9:45:41:45:15:ee:13:45:f4:25:79:30:
16:f1:e0:00:bd:5b:37:6f:d3:ad:06:66:4e:40:8c:28:61:0e:
14:b6:c9:e2:09:5e:be:83:3e:93:21:7c:a5:0e:88:ad:a7:9c:
30:dd:85:30:12:5d:82:5c:ba:b6:08:1b:d7:a7:82:61:b2:2b:
ce:ac:9b:5f:80:30:61:dc:97:18:24:e0:f7:86:fc:3e:8f:27:
c9:c0:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:05 2026 by rpki-client