
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: U4ZQaxE3dkVuXPP7wzIa0i45l23M6LViOqzBieLCHmw=
Subject key identifier: 67:C5:2D:4C:03:9F:DB:92:15:80:BF:2B:BA:84:3E:52:7B:70:78:E4
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: 0172
Signing time: Sun 27 Sep 2026 05:22:39 +0000
Manifest this update: Sun 27 Sep 2026 05:22:39 +0000
Manifest next update: Sun 04 Oct 2026 05:22:39 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: Nf9hhPI6QBEPMl8fagLRp1zPLOXhaFGXxivl8FmBr3I=)
2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Sep 27 05:22:39 2026 GMT
Not After : Oct 4 05:22:39 2026 GMT
Subject: CN=6ab8a81f-391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:99:99:45:f7:33:aa:40:65:f6:e1:1b:90:
5a:ca:2d:6c:c8:e4:03:67:7c:29:3a:7d:a4:9e:d8:
43:97:32:42:e5:80:53:ce:70:03:6c:73:72:25:60:
29:7f:62:5e:e5:d0:fe:33:d7:16:4b:ee:4b:62:35:
54:84:d2:d6:97:96:17:82:34:d4:c5:06:9a:fa:ed:
44:43:6b:58:b8:8e:01:5d:7a:d9:ab:08:d2:ac:17:
2d:0f:23:d9:06:63:c8:d1:7c:60:f0:8f:e7:5d:a8:
f5:19:49:ee:07:b8:ee:26:34:25:36:b5:38:82:23:
99:6a:81:43:f1:96:5b:b7:fd:3f:e2:fe:4e:6c:50:
26:eb:c2:48:ad:c8:5c:6f:41:26:3e:26:1a:0a:3c:
3b:bb:48:5e:b1:86:17:b6:35:2f:33:a7:8a:12:72:
36:0d:97:6f:e5:6c:a6:48:aa:0e:98:64:a3:30:b0:
4c:87:0b:4d:74:9c:36:57:3b:52:97:24:e7:51:ef:
9a:84:14:24:ef:41:ae:c8:4b:16:b4:a6:5a:6b:41:
5e:4f:a5:2c:09:fe:ef:49:de:b8:22:1b:f2:6e:8d:
83:89:50:93:da:4f:f7:9d:9f:a4:59:0d:01:95:f4:
9a:4c:7b:a3:15:81:df:c7:0e:51:ac:04:dc:0b:99:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:2D:4C:03:9F:DB:92:15:80:BF:2B:BA:84:3E:52:7B:70:78:E4
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2e:d9:ce:17:fa:49:0c:cf:56:d2:ff:38:7c:31:d0:34:6b:
10:3b:26:81:d9:c0:2e:fe:db:2f:fc:6c:4e:71:e2:65:1e:11:
9b:68:31:29:4b:c4:68:34:26:59:4e:58:0d:dc:c4:be:72:19:
c7:e8:d6:03:15:34:f0:86:80:88:20:b7:66:5e:65:e7:02:e4:
08:00:92:64:a5:1e:d2:17:ec:dd:20:dc:59:11:7a:af:10:66:
0e:2f:a5:3a:12:56:03:fe:2f:c6:ff:6b:3e:cc:ba:2b:ca:49:
a9:07:dc:bf:11:f3:27:18:b4:5a:27:af:83:f4:f6:f3:db:19:
f6:a0:70:c9:c9:de:9e:96:5f:71:5e:bf:d6:6e:11:63:99:37:
8a:0b:35:38:b7:30:fd:3f:a8:10:ce:72:6f:88:7a:d1:49:ef:
29:ab:d4:01:b9:cb:1a:98:0c:4e:70:38:22:03:4c:56:ba:f5:
9f:41:ad:20:39:8d:f8:19:cf:00:d0:9d:49:6b:9f:47:d5:81:
e0:99:0c:bd:3b:1a:8e:2b:8f:59:7c:3c:bc:65:95:8f:00:44:
c0:03:01:10:d0:2c:2d:57:00:d0:75:b9:1f:7f:02:dc:66:4b:
ae:89:f1:4a:ec:99:5d:89:d1:7e:af:bc:dc:8a:86:c5:06:3c:
8d:15:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:01:31 2026 by rpki-client