
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: 6MQMJLk5zzSUeiS4XpKziV22TtPwLxjsraqq4+Z0w9c=
Subject key identifier: FE:86:47:67:51:26:A6:7E:3E:0D:07:CD:C1:C5:60:5F:E5:A7:61:15
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 0706
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 06DF
Signing time: Sun 04 Oct 2026 22:22:00 +0000
Manifest this update: Sun 04 Oct 2026 22:22:00 +0000
Manifest next update: Sun 11 Oct 2026 22:22:00 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: bHHiXqBLFm5XVWi2CqiJr7OtXaBKX6WuI9LemTaymzM=)
2: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: Z+LqzSewpL/vsWqtL6Yo0e38jLGpTvdUpJpiQgt4Cd8=)
3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: EFEc1hVxBqjFK9K+ebpd9IGqjsMNpFNe4DREx1aJacU=)
4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: rievK77P9KymGMboQx/oO1KggXD+jRQIf3Q9O4SujfY=)
5: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: n0xr/j2GP/MNMRFa7lf1tZ5ywaM4ttYHv9arSET9eaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798 (0x706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Oct 4 22:22:00 2026 GMT
Not After : Oct 11 22:22:00 2026 GMT
Subject: CN=6ac2d188-6786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:76:5a:08:88:96:66:b8:42:18:30:d3:1b:
a5:bb:41:cd:a5:ad:4a:f7:13:a3:99:65:e2:81:27:
6a:0d:7d:9a:52:a2:b6:43:ee:5e:d7:d6:31:51:cb:
59:6b:83:2a:b4:2b:ba:8c:6f:15:5c:1f:b0:d0:0f:
39:3e:a0:79:c3:87:36:61:13:c6:0b:ae:c6:8a:49:
30:9f:dc:6f:ee:f2:2b:5f:4b:a9:9f:3d:5c:36:59:
cc:a1:e4:1a:a3:bc:b8:38:f1:bd:31:f9:54:6a:9e:
3c:f1:ca:ca:80:38:61:4d:5c:72:42:ac:ae:8c:13:
fc:0b:d3:6c:70:bf:02:e4:02:1d:ae:4c:e9:25:f0:
0d:7f:76:0d:4f:75:46:cf:9b:7d:ce:5f:52:5b:57:
17:45:38:4d:fc:51:c3:3c:ee:f0:55:0c:9f:89:ce:
33:fd:db:15:e7:32:9f:7f:98:a1:a7:e0:02:3d:e8:
54:f2:0d:6c:a1:a9:e6:82:a9:67:ff:49:7f:8c:69:
c1:98:74:21:ec:54:8e:d7:6c:4d:57:c0:47:4f:63:
b6:3c:c9:57:45:f9:5e:ff:45:f2:f8:8b:5c:2d:d5:
4f:8c:db:15:b4:81:a1:96:49:b1:0c:f8:0c:f4:15:
8a:71:00:af:cd:b1:fb:1c:31:f7:b7:bc:23:59:84:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:47:67:51:26:A6:7E:3E:0D:07:CD:C1:C5:60:5F:E5:A7:61:15
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:1e:f7:75:b9:37:59:6d:86:57:a8:85:51:85:8c:86:a3:e8:
45:3e:5c:f2:79:a6:b7:ed:c3:92:0e:11:06:e7:ca:c9:78:34:
93:23:0e:98:cb:6f:b2:9f:83:45:82:14:c9:fc:f2:b8:12:bc:
35:11:4b:69:94:fb:5d:86:c6:af:72:5b:d4:4d:2c:46:ab:4f:
c4:74:9f:b0:30:82:1f:ab:2f:a5:7c:49:7b:37:9c:d6:cd:2b:
96:9b:90:33:cd:6e:87:a4:0b:4d:a1:3c:11:ff:bd:45:fc:7b:
04:78:b1:e6:14:ff:72:bf:02:1b:06:95:34:2c:a1:ce:de:b2:
23:8d:b7:24:6d:7d:70:78:24:ca:5f:bb:d4:7e:57:9f:12:ab:
b9:bf:76:5b:b8:12:b8:e1:67:a2:a0:73:17:a2:75:37:ea:6f:
26:99:db:f7:ec:dd:a6:96:5f:33:93:c7:75:bc:09:11:2a:5f:
62:4a:f4:25:48:72:e8:07:76:a4:85:49:d6:f9:16:64:6d:60:
d3:b4:07:02:09:3f:17:35:09:1d:b1:d5:57:2f:f6:61:91:75:
58:b6:58:2c:cd:b1:f1:c2:57:a8:a7:ec:9c:af:6f:76:e9:7e:
43:1e:9d:16:5d:a1:f0:a0:83:fe:54:c2:88:52:93:7f:d0:79:
4d:2d:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:47:44 2026 by rpki-client