
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
File: qwZIgiREAh7nNyCgReCpRPXXf-M.mft (raw, json)
Hash identifier: X/1GSWN2JQoa+2DRpQAK35RGa60tQU++r9k6M7sZquo=
Subject key identifier: DF:4D:29:15:DD:3F:D3:2F:72:47:F5:E7:4B:FD:57:34:A0:CD:A5:2B
Authority key identifier: AB:06:48:82:24:44:02:1E:E7:37:20:A0:45:E0:A9:44:F5:D7:7F:E3
Certificate issuer: /CN=A91CE4A1/serialNumber=AB0648822444021EE73720A045E0A944F5D77FE3
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
Manifest number: 0508
Signing time: Thu 24 Sep 2026 23:36:21 +0000
Manifest this update: Thu 24 Sep 2026 23:36:20 +0000
Manifest next update: Thu 01 Oct 2026 23:36:20 +0000
Files and hashes: 1: qwZIgiREAh7nNyCgReCpRPXXf-M.crl (hash: 0tvLI7AO2FzM1gzs+fFiwpu1AisK9JiccbBKOoI97ms=)
2: CE6F2E9C97BC11F18CB49434A2EE528E.roa (hash: Nwt+OMKG4b1+bsIf5bbnfPAQc5s5GLqlwpqO4m2VZos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.crl
rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE4A1, serialNumber=AB0648822444021EE73720A045E0A944F5D77FE3
Validity
Not Before: Sep 24 23:36:20 2026 GMT
Not After : Oct 1 23:36:20 2026 GMT
Subject: CN=6ab5b3f5-f913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:f5:98:7d:61:7b:57:8e:0f:1c:9f:92:d7:
b1:70:29:6b:30:86:55:15:79:89:ac:07:f9:c9:77:
36:15:a6:89:08:8f:de:50:d2:96:aa:4d:e5:a1:74:
71:be:a0:79:c8:da:3a:e3:92:7f:48:ac:43:dd:e8:
34:66:e0:1c:b3:0c:2c:98:84:27:52:e2:f0:c7:f1:
f1:25:d9:c7:a3:03:d4:0e:26:b4:7f:d5:ba:84:f7:
99:44:44:51:c8:c2:89:5c:1c:6f:73:0e:2b:5f:ea:
1c:be:4e:03:72:59:dc:9f:7b:6f:44:8a:95:3f:17:
18:25:f6:68:f8:53:7f:b6:44:dd:cc:35:b6:cc:0e:
85:d7:95:ff:1e:4a:a0:e6:cc:46:2f:fd:29:ca:68:
74:3e:f5:bc:c7:86:a1:3d:87:0a:00:9a:6b:e1:72:
0c:0d:be:9b:c6:95:db:14:29:0c:14:05:a2:72:be:
cc:6e:94:09:bd:da:2a:ac:54:5d:1d:49:f6:e2:b5:
b0:70:b5:60:c4:d0:a4:9f:e3:77:48:eb:68:19:cc:
53:86:8c:b0:13:e6:97:3f:70:1d:f5:a6:96:a5:36:
3a:6e:93:1d:ca:2d:49:20:b9:c5:26:66:d8:b5:1b:
d8:e4:56:32:64:98:19:81:a1:94:8b:a8:4c:ba:fe:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:29:15:DD:3F:D3:2F:72:47:F5:E7:4B:FD:57:34:A0:CD:A5:2B
X509v3 Authority Key Identifier:
keyid:AB:06:48:82:24:44:02:1E:E7:37:20:A0:45:E0:A9:44:F5:D7:7F:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4f:5a:de:9f:5d:aa:28:e7:ab:ee:9e:85:fb:fb:9c:e7:62:
cd:f5:a5:24:bd:db:c5:77:56:05:6b:3e:30:4c:a9:ff:e6:4c:
0d:bd:08:45:35:42:46:56:0e:ae:3b:12:40:3c:74:d5:4c:99:
eb:6f:3e:c5:e7:5d:62:0c:43:09:ef:13:46:0e:45:fd:5d:ec:
1c:0b:ab:e6:c5:9c:c4:68:f0:6b:8f:80:4b:47:5b:de:85:f9:
bc:d2:a8:7e:10:b7:34:0d:2b:52:14:5a:e9:17:7e:d6:45:5e:
61:ed:0c:7a:91:c3:ce:46:10:22:9a:03:ac:92:40:6a:be:2f:
1b:14:eb:06:b8:ea:7e:7c:b2:f6:8d:02:3b:a5:08:36:14:37:
01:4c:4f:c1:ba:39:31:53:3b:52:6a:43:52:ca:7c:4a:90:17:
8e:97:f7:88:cb:f3:08:b5:4b:d1:1b:1e:eb:02:01:49:cb:69:
0b:01:a7:8f:26:9c:c7:53:88:04:62:46:ee:b4:6d:2d:51:5d:
28:7e:e1:c2:4d:33:b3:e2:12:46:71:bf:8a:0f:f9:cb:a5:b0:
8b:20:1c:2d:04:3a:0b:13:4c:96:5c:03:46:bd:ca:97:f5:6c:
b3:fa:2f:64:03:7f:35:55:ce:69:bf:24:0e:1e:91:60:67:19:
fd:10:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:25:09 2026 by rpki-client