
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
File: qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft (raw, json)
Hash identifier: zp69RtS7UZ5UF2GIt7MkQhQW06BLv7pE1a6/KFGRqdo=
Subject key identifier: 4A:0C:69:E3:AE:2A:B8:90:33:89:F0:97:12:1C:FF:F1:BD:A9:FA:3C
Authority key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
Certificate issuer: /CN=A91B8833/serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
Manifest number: 6F
Signing time: Fri 25 Sep 2026 08:06:43 +0000
Manifest this update: Fri 25 Sep 2026 08:06:43 +0000
Manifest next update: Fri 02 Oct 2026 08:06:43 +0000
Files and hashes: 1: qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl (hash: cR6L7BRtQoGe9lpv4+DcoEF4ndtBnzMM8wPfTy5BfPo=)
2: ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa (hash: 1VgHobz4nzrs5NBqb89qRpxnur9wCmTVYrTP5UDXUqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Validity
Not Before: Sep 25 08:06:43 2026 GMT
Not After : Oct 2 08:06:43 2026 GMT
Subject: CN=6ab62b93-6925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:44:fd:27:70:d7:07:65:f4:47:c7:14:0a:
16:33:48:40:33:df:59:04:55:bc:6e:3a:47:ad:e5:
08:ea:6c:03:34:08:d6:1e:78:09:68:3d:bc:2a:b0:
7b:98:95:22:81:f6:4d:86:2d:a9:6b:4a:9d:7d:a5:
26:bc:e4:33:fb:25:95:49:88:2c:aa:4a:93:18:47:
8b:f8:9a:5b:ec:0f:32:98:b3:46:80:00:86:e3:3d:
a3:89:73:3a:40:c0:d0:6a:07:22:53:92:95:c2:cf:
e7:1f:7d:63:e3:dc:b5:6f:53:b1:1c:4c:bf:12:fc:
55:3c:ec:9d:38:96:10:d4:f7:32:fa:e3:19:14:d3:
e0:25:20:aa:c1:df:28:30:41:8f:99:27:af:31:8e:
63:cf:8c:bb:1a:ff:54:e6:e5:35:21:83:4f:be:04:
eb:eb:6f:3d:37:95:53:a8:9e:91:9b:12:40:e3:94:
0d:12:82:d9:00:ae:1e:0f:ef:84:ed:24:cd:e4:ae:
35:b4:3e:47:98:27:6c:44:69:7a:85:00:f0:58:2a:
3a:c3:1d:90:57:91:8b:f9:52:1e:35:9d:d6:c0:20:
87:8e:fe:b0:ee:a8:b6:1e:a7:ec:67:29:f5:c2:7a:
eb:6f:c6:72:d4:1e:61:a0:2b:53:54:b4:2d:40:48:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0C:69:E3:AE:2A:B8:90:33:89:F0:97:12:1C:FF:F1:BD:A9:FA:3C
X509v3 Authority Key Identifier:
keyid:A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:69:e1:1d:b9:1d:0f:98:30:b9:7f:dd:da:bd:6a:74:2a:3e:
55:2d:5e:ed:4d:d8:68:c0:9e:82:17:e5:2b:57:d7:9d:81:3d:
e2:d9:88:94:f3:a1:46:f4:c1:a4:9c:94:36:c9:3b:b3:90:99:
34:81:0d:53:7e:d5:61:02:ab:df:38:e0:b6:a7:e2:9c:85:7b:
63:5d:3e:4f:17:76:9e:68:88:e5:62:d6:82:f2:cb:a9:26:2e:
a1:18:11:10:d5:ef:66:9e:6e:9e:6f:5d:f2:73:08:d3:bd:c0:
75:6c:ad:f5:35:a9:c1:c7:8a:7b:80:f0:4a:71:c8:0c:1e:e0:
8b:24:40:b0:52:b3:4f:42:bc:36:3d:4c:bb:15:68:70:b2:1f:
73:33:64:be:b2:c5:4a:26:39:e2:3b:8f:34:c0:3e:d6:7a:69:
e9:59:e5:ef:d4:fc:4f:f4:4a:15:a7:e8:9c:ba:69:19:69:10:
c7:74:e3:ba:81:38:02:d7:ab:42:4d:ff:85:3b:93:a0:f3:04:
25:f3:de:49:33:d8:3a:8b:79:2d:cd:7a:d1:3e:e1:3a:ff:4c:
d1:09:94:f7:d3:5c:fa:b1:20:d7:9f:95:a5:f9:2a:1a:15:c1:
0f:02:a9:62:fa:1f:73:34:3d:e9:73:d7:07:be:3e:8b:d5:f6:
d9:5b:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:02:37 2026 by rpki-client