
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier: xytv4Rk4ua/lu6rWGaM+CTG9NTosymhgoQvaOnMKTL8=
Subject key identifier: 70:3B:92:C8:56:C6:A5:37:44:97:59:5B:30:3E:79:D0:4B:1A:5A:92
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number: FE
Signing time: Wed 23 Sep 2026 06:10:28 +0000
Manifest this update: Wed 23 Sep 2026 06:10:28 +0000
Manifest next update: Wed 30 Sep 2026 06:10:28 +0000
Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: lvDLOzFCZpMr9MhkXpcGkGALVSE8HfNEqI9otnwWpuk=)
2: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: 2rQsXi5kIwQ2IE+rYx9M2psZsNK3ECigUyxfaVNd7kI=)
3: B87594FC08B311F1954B37591C3D8C67.roa (hash: H6vYE+gxhuAKlVgXnsRMmqmTt0CZdQJgg6x87GzOftE=)
4: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: XTg2evwkR4VvSVQWu251hii2ssGz9ZlroApKBF0azrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: Sep 23 06:10:28 2026 GMT
Not After : Sep 30 06:10:28 2026 GMT
Subject: CN=6ab36d54-1929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:ea:7c:26:1d:1c:0f:0f:35:da:17:2c:92:
fb:5c:80:66:51:88:6e:54:72:85:7d:2f:41:fc:a7:
d5:51:91:d2:1c:5b:bd:fb:a7:a6:11:54:17:ad:8a:
ae:f9:6c:be:d4:c5:04:d9:5f:3d:5f:96:4d:de:2e:
67:77:96:e0:fd:95:d1:b9:0d:54:68:76:28:5b:f8:
b3:22:25:c4:19:49:f0:52:71:12:fa:4f:ea:ee:0e:
ce:10:ad:a5:08:4a:55:84:3c:c1:b8:d5:30:91:8d:
00:49:d8:b8:d2:eb:93:14:68:3c:89:7b:49:3c:62:
23:81:fd:b9:20:2f:f0:2c:73:94:9f:1c:1d:4a:ea:
0b:5e:a3:29:80:f4:6b:fa:8e:17:9e:85:5f:13:09:
6b:3c:08:f7:4a:14:7b:3f:db:59:0b:a5:ab:54:32:
33:18:24:6a:88:a2:54:52:81:d3:1a:db:5c:f8:a6:
4c:5d:22:ae:b9:df:ab:c5:90:33:0f:59:92:27:17:
57:6f:43:d2:a3:d0:db:7b:0b:49:bf:7c:88:90:72:
fd:8e:57:6c:40:d5:9e:a9:ec:29:78:d6:8b:68:63:
ff:d6:88:c3:95:f0:ca:dc:73:cc:ea:30:b9:b7:1b:
9e:3c:df:ad:40:31:1b:ce:a0:40:f4:ab:90:54:88:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:92:C8:56:C6:A5:37:44:97:59:5B:30:3E:79:D0:4B:1A:5A:92
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:16:94:59:1c:21:aa:13:0f:b6:fb:5d:c4:ff:23:b1:b7:3e:
69:7d:57:05:f1:fa:0b:28:4e:94:c4:10:8c:48:f0:94:95:80:
1b:71:4c:d1:92:83:12:ab:e9:dd:cb:5e:57:40:c2:9e:a7:0a:
ae:f2:42:b6:f0:e3:8d:fd:8d:09:ae:cd:36:57:c6:2a:2e:5f:
7f:ac:ed:75:e2:a4:b7:bd:3f:93:2e:a5:66:69:2b:f0:07:a1:
64:3e:0c:45:ae:b5:80:55:ab:92:6f:39:48:f8:e1:00:dd:54:
27:33:6d:18:a3:fb:21:84:9f:0d:47:ad:7d:aa:7c:d5:ed:ae:
f8:43:86:aa:29:84:b7:92:21:91:80:56:78:88:66:e5:09:c2:
28:3c:b7:ee:5c:a7:39:38:35:ae:46:c3:11:ad:9a:aa:fd:5c:
fa:cc:a0:f6:ac:5f:0f:62:2f:51:e0:10:00:bc:2d:ef:3c:b8:
85:86:e9:31:57:96:ff:4e:72:fd:90:5a:ad:9b:94:08:25:04:
10:d6:68:cf:40:c8:f4:e1:88:75:d7:20:fa:e4:33:35:a3:b1:
0c:54:23:17:b6:ff:c4:8e:45:43:ca:f6:f5:a3:32:c5:4d:2e:
cc:7f:e1:e9:d0:58:4e:34:55:83:e7:26:f8:36:4a:f2:23:a1:
76:1b:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:57:57 2026 by rpki-client