
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json)
Hash identifier: NeWLthDAL9wXA9hcB/o6oZ9znDj0YXo3oThouPVmPJU=
Subject key identifier: 17:6B:F6:E8:07:CA:E3:92:5B:AE:29:7C:E6:86:52:4C:0D:45:04:3E
Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
Certificate issuer: /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
Manifest number: 0119
Signing time: Mon 21 Sep 2026 05:55:21 +0000
Manifest this update: Mon 21 Sep 2026 05:55:21 +0000
Manifest next update: Mon 28 Sep 2026 05:55:21 +0000
Files and hashes: 1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: UIS88BOFoSpECXWb6QT2WrnAG5gRZS2+BH3jhwBr7c4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Validity
Not Before: Sep 21 05:55:21 2026 GMT
Not After : Sep 28 05:55:21 2026 GMT
Subject: CN=6ab0c6c9-f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:f8:27:c8:54:44:61:bb:80:b8:ad:f2:e4:
b8:4e:e9:9c:74:16:0f:89:28:40:96:3b:d5:70:8c:
18:29:84:30:a0:a5:d5:02:22:3e:21:f6:d4:e7:6f:
d3:a3:41:dc:1e:78:00:50:3d:7c:0f:0f:4e:7e:8c:
d6:ea:52:3b:c4:21:ea:03:cf:7d:02:be:5c:54:e3:
a8:9c:6a:25:ec:a3:ff:f0:fd:db:c6:6e:c8:0a:f3:
54:ee:f4:16:a0:5b:d2:7d:40:1b:a0:c5:e4:bc:84:
25:1a:fb:80:10:ef:92:98:5a:8f:31:ea:9e:d0:52:
6d:7f:dd:35:a8:a7:25:da:ab:3d:f7:55:b5:a6:3a:
09:02:fb:5c:06:d1:9e:81:bc:d8:07:1a:87:18:e2:
52:0c:bd:b3:9f:36:b8:cd:5a:ef:d5:f5:39:ab:c3:
ca:98:05:2e:a2:d1:76:52:ad:cd:6d:0b:16:b6:0e:
02:64:87:85:ea:0f:03:f0:05:de:97:34:36:05:9e:
9b:ff:3c:fa:fa:a2:a7:4c:db:6b:fa:2a:0b:56:43:
65:37:9f:73:18:3a:9a:2a:e1:5d:25:6a:41:a0:9c:
a7:46:a8:02:d7:67:60:40:da:8e:04:5a:c0:41:15:
4c:68:79:9f:fe:04:23:3c:82:c1:8f:04:c7:05:3b:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6B:F6:E8:07:CA:E3:92:5B:AE:29:7C:E6:86:52:4C:0D:45:04:3E
X509v3 Authority Key Identifier:
keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:f5:4b:d3:e5:fa:69:cb:2f:9e:2d:99:5f:26:b8:13:d1:50:
cf:06:21:0d:94:d8:29:57:18:65:6e:85:a3:a4:45:a1:00:d1:
f7:16:c8:c8:39:08:1b:13:ed:d7:f2:a2:94:fc:30:a7:19:3b:
98:e4:af:45:5c:5d:a9:c6:9a:1c:df:bd:ce:97:c8:cb:4f:6d:
11:7d:a1:89:62:40:08:05:ee:7e:dd:ca:ae:26:ff:15:5c:fb:
c3:a4:ab:03:89:84:89:a0:1c:ad:dc:02:63:5e:ef:6d:d1:ef:
f7:7b:76:15:35:b0:14:96:88:03:69:18:6d:e1:a6:63:7d:21:
35:10:81:a9:cb:7b:a4:8b:fc:37:93:26:fa:e2:9c:11:a4:a5:
2e:04:ad:c5:1a:35:23:a8:8b:b5:e5:e9:41:9e:d0:66:42:7b:
50:5a:bd:43:42:4f:00:7d:78:0d:43:b8:43:24:ed:66:41:39:
17:39:2d:31:ae:d3:42:d7:9c:f6:ce:e0:41:27:73:c2:ee:03:
aa:ea:66:a0:a6:a0:48:47:ef:f8:c8:0e:c9:78:78:88:71:66:
ca:34:0a:d6:48:a8:c0:af:b7:a6:b4:2d:b7:b1:7d:c8:d7:29:
63:c4:e7:34:07:7f:a5:2b:20:0a:05:50:69:23:e5:6f:41:14:
63:29:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:21 2026 by rpki-client