
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier: iIvrSa6M3j7503sfCav8sPt51tGu8yyBWo68bE35Pfs=
Subject key identifier: C3:E3:42:74:DD:B2:DB:2B:E7:06:49:D1:41:40:C6:F0:14:64:DD:58
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial: 0535
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number: 051F
Signing time: Thu 24 Sep 2026 23:28:20 +0000
Manifest this update: Thu 24 Sep 2026 23:28:19 +0000
Manifest next update: Thu 01 Oct 2026 23:28:19 +0000
Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: XAUljTk9+GKz/vpweQMPYkBuVsAGN8/RKfi+x1EibNg=)
2: 65798E8A1F7D11F18F98CA06223D8C67.roa (hash: RZFsnQn6HA9v12vUgYh/78hGLqlY8AmjxFGu89yIv54=)
3: F3B1927A1E0511F1841549681E3D8C67.roa (hash: KFJazkmvnPBoQlHt7NJ9M2Eg3tsyR0kZTa+OC7vwIGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1333 (0x535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Validity
Not Before: Sep 24 23:28:19 2026 GMT
Not After : Oct 1 23:28:19 2026 GMT
Subject: CN=6ab5b214-0522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:8f:a8:1c:67:8c:d6:14:ff:22:fc:75:eb:
f2:5f:69:c6:03:99:20:ba:da:32:39:77:db:e8:1a:
d3:0c:9a:dd:c4:62:15:19:38:ff:55:80:61:08:2a:
b8:5a:e1:bb:2b:7e:ab:35:7e:3b:02:b5:46:c4:90:
a2:9a:07:87:48:bc:37:53:46:2d:44:89:ef:63:31:
d4:05:1a:90:95:6d:ac:23:66:67:69:e7:dd:84:84:
c5:71:6f:48:ca:f5:6e:2f:a1:e1:7a:4a:b7:44:f7:
f7:44:2b:a1:17:a5:6b:88:fa:ee:38:c2:35:81:b8:
49:86:a2:1c:08:85:37:c1:c1:e5:9c:be:d1:f4:a3:
b7:9e:ea:1d:c9:7e:77:3d:c3:dc:a0:62:27:4b:9a:
04:d6:71:f3:59:52:e6:70:20:ff:07:7f:6c:57:65:
a1:76:ee:e5:60:a5:2f:5f:4d:cd:36:20:84:6a:b2:
43:1c:26:46:03:82:76:21:dd:7a:a4:5f:5b:de:9a:
c6:89:19:9d:76:48:99:8b:5c:35:01:39:c9:75:03:
bb:fa:23:0f:00:31:c1:15:67:62:d4:e5:0e:7f:57:
01:1e:f8:dc:b7:09:71:8e:a5:e9:85:2e:f7:2b:34:
2f:85:19:b0:c3:2e:35:23:b1:cf:0a:72:33:33:f0:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:42:74:DD:B2:DB:2B:E7:06:49:D1:41:40:C6:F0:14:64:DD:58
X509v3 Authority Key Identifier:
keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:01:f6:c0:e0:98:91:b8:bc:15:af:57:69:0d:40:f6:c6:99:
ad:19:e6:2d:47:9e:cd:fa:aa:7f:8e:a2:14:a1:32:89:f9:49:
80:79:b2:74:59:46:ad:fe:ea:5b:86:59:04:37:51:1e:1e:a3:
e9:0c:cf:a3:45:83:da:7d:8c:79:7c:ca:d5:c6:99:b9:53:54:
9f:a3:4a:d5:41:8d:3a:20:b0:1f:5c:8f:02:1d:6a:1e:9a:70:
ee:7b:c2:ff:06:7c:fa:39:4b:42:03:c4:ae:bd:77:a4:6b:39:
db:57:1e:ef:6d:c9:fe:f8:99:ef:ad:27:27:07:6f:f3:da:75:
cd:48:10:e1:e3:10:22:2e:54:ce:5e:ae:8e:9b:54:4c:d8:98:
1e:32:cc:b1:ea:f1:e4:e0:ac:86:4f:fc:17:10:22:5f:f0:6e:
9c:68:ec:3e:d1:3a:c8:e2:73:b9:9f:6f:c3:ea:95:c1:91:38:
db:67:72:a1:fa:8c:0b:28:da:da:cb:b0:52:85:61:3e:cf:3c:
2d:74:51:cd:f8:44:60:5e:fa:7e:b1:d1:5b:fc:c2:c7:ae:11:
88:b0:0f:61:64:be:94:01:b4:49:06:f8:cf:67:30:d3:2c:42:
c4:b0:d4:8d:13:e8:46:cf:22:9c:c4:ae:08:68:e9:3f:e4:a7:
a9:08:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:42:37 2026 by rpki-client