
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier: xDdeUjxYkv7mLBGNz/mFMG6LxV/NXaoEY12zJnDETdY=
Subject key identifier: 75:36:F8:FA:D4:19:A9:BD:A7:F0:99:87:80:A7:BE:9D:3D:7C:F2:69
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial: 034A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number: 032E
Signing time: Wed 23 Sep 2026 00:43:40 +0000
Manifest this update: Wed 23 Sep 2026 00:43:39 +0000
Manifest next update: Wed 30 Sep 2026 00:43:39 +0000
Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: 7IIjJxG0kghIrRFZ7/8sd1JRdseVhEcArHcjoSNpBpc=)
2: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=)
3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Validity
Not Before: Sep 23 00:43:39 2026 GMT
Not After : Sep 30 00:43:39 2026 GMT
Subject: CN=6ab320bc-9dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:09:34:9a:4a:55:bf:2b:10:be:be:21:53:
ba:61:32:e3:4b:b3:31:30:17:2b:c9:96:91:ca:93:
5d:0c:42:3d:81:d7:8a:43:b4:bf:94:56:47:ae:50:
c9:83:8e:5c:c2:03:7f:11:56:85:03:ef:74:a5:87:
eb:db:92:3b:b5:6b:f7:cb:a9:e0:98:ee:03:e3:e8:
8f:f4:94:5a:f2:c4:4d:d8:8c:e6:f9:db:33:68:e3:
c8:08:9b:b0:ef:a0:b9:08:34:16:10:86:3a:63:62:
3a:6f:e2:fc:91:e2:33:72:09:d7:d6:f7:cc:0e:a1:
96:43:cf:85:72:72:d1:18:e4:8f:01:19:b4:ba:c0:
19:f3:36:ec:09:d7:51:92:11:02:37:21:0a:5a:b6:
a7:a3:09:7d:5d:31:fd:63:bd:a9:a7:77:82:78:e0:
90:8d:c9:31:0d:29:0e:aa:1b:a5:35:88:6f:0d:96:
ca:be:16:70:55:97:40:33:13:dd:e7:37:c6:14:8e:
be:52:5e:22:1d:ee:de:24:d0:34:ef:98:68:32:36:
ae:23:18:f6:68:26:00:4e:3f:a0:fc:19:82:55:cb:
76:f9:ef:67:8d:a8:0f:94:52:c7:b5:bd:be:c2:43:
53:03:a5:4f:fc:2d:f8:bc:e4:87:77:d3:11:2e:c0:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:36:F8:FA:D4:19:A9:BD:A7:F0:99:87:80:A7:BE:9D:3D:7C:F2:69
X509v3 Authority Key Identifier:
keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:d5:34:2a:d5:18:b4:03:7c:78:7a:69:30:c2:ce:22:35:d1:
82:ed:99:15:cf:6b:d0:ae:c0:5a:ea:36:b7:c8:73:47:d9:76:
f1:c2:b6:e8:69:b6:7a:47:51:5e:1d:2f:80:ec:4d:fd:1e:8e:
d8:2d:ea:ee:3a:43:be:35:15:e8:aa:d8:78:52:73:a0:49:c1:
8e:05:9e:6a:6d:84:ab:1e:dd:ff:cd:d6:a7:47:a6:e4:b1:ac:
ba:c9:cf:a2:1e:12:bc:e5:fe:9e:f2:b3:a3:54:33:fa:3e:bb:
84:18:b5:df:8f:a0:a0:e7:d3:79:9c:ba:2f:04:74:3b:0e:9f:
4c:89:fe:7e:e7:df:7b:50:93:7a:82:2c:8e:60:5f:8f:8d:53:
69:f9:b1:b0:aa:b4:9a:e9:cd:c8:a8:00:23:41:7f:5a:0d:5e:
d0:01:a6:05:55:7d:e5:cd:5f:d0:35:04:6c:16:da:0e:5f:d4:
eb:58:80:e5:1b:26:76:ad:5e:b8:8f:71:69:cb:c1:d4:c1:53:
c1:b1:5b:f1:47:65:98:22:56:60:be:61:67:3f:2d:48:1f:d1:
7c:1f:5c:06:06:80:59:d3:c5:a0:14:9b:f8:82:7d:0d:ff:48:
a7:6b:56:c0:93:2a:e7:a3:58:7c:fd:42:df:48:60:34:17:71:
59:45:9c:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0
ODFBMzcxOUUwHhcNMjYwOTIzMDA0MzM5WhcNMjYwOTMwMDA0MzM5WjAYMRYwFAYD
VQQDEw02YWIzMjBiYy05ZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwv4JNJpKVb8rEL6+IVO6YTLjS7MxMBcryZaRypNdDEI9gdeKQ7S/lFZHrlDJ
g45cwgN/EVaFA+90pYfr25I7tWv3y6ngmO4D4+iP9JRa8sRN2Izm+dszaOPICJuw
76C5CDQWEIY6Y2I6b+L8keIzcgnX1vfMDqGWQ8+FcnLRGOSPARm0usAZ8zbsCddR
khECNyEKWranowl9XTH9Y72pp3eCeOCQjckxDSkOqhulNYhvDZbKvhZwVZdAMxPd
5zfGFI6+Ul4iHe7eJNA075hoMjauIxj2aCYATj+g/BmCVct2+e9njagPlFLHtb2+
wkNTA6VP/C34vOSHd9MRLsCWMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHU2+PrU
Gam9p/CZh4Cnvp09fPJpMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1
NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj
WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p
UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARdU0KtUYtAN8eHppMMLOIjXRgu2ZFc9r0K7AWuo2t8hzR9l28cK26Gm2ekdR
Xh0vgOxN/R6O2C3q7jpDvjUV6KrYeFJzoEnBjgWeam2Eqx7d/83Wp0em5LGsusnP
oh4SvOX+nvKzo1Qz+j67hBi134+goOfTeZy6LwR0Ow6fTIn+fuffe1CTeoIsjmBf
j41TafmxsKq0munNyKgAI0F/Wg1e0AGmBVV95c1f0DUEbBbaDl/U61iA5Rsmdq1e
uI9xacvB1MFTwbFb8UdlmCJWYL5hZz8tSB/RfB9cBgaAWdPFoBSb+IJ9Df9Ip2tW
wJMq56NYfP1C30hgNBdxWUWcXA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:13:09 2026 by rpki-client