
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json)
Hash identifier: aUD8QsiXL7Ximkab5fU3+BHXuLE1DMv7UflGCHdG4+g=
Subject key identifier: 1D:B2:21:89:F3:1B:4C:3F:48:0E:7C:99:1E:88:D3:07:F3:35:64:99
Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4
Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4
Certificate serial: 063A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
Manifest number: 0630
Signing time: Mon 28 Sep 2026 22:53:38 +0000
Manifest this update: Mon 28 Sep 2026 22:53:38 +0000
Manifest next update: Mon 05 Oct 2026 22:53:38 +0000
Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: vkUl4tOPjEyqCu1XKuwiqqRvxqwCIDrp0dEsLQ9twWs=)
2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: XNmP7Zo2Gu2ysZZkwdUo+plqL0kQKyZ4CkwaD9acTw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl
rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 22:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1594 (0x63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4
Validity
Not Before: Sep 28 22:53:38 2026 GMT
Not After : Oct 5 22:53:38 2026 GMT
Subject: CN=6abaeff2-9cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:ef:e3:bd:b8:17:be:9d:b1:df:fa:6b:10:
38:23:c9:e8:da:6c:9a:99:4a:75:c9:9a:f8:54:e4:
8f:72:01:9f:7c:96:21:f6:89:c0:3a:45:51:c4:4f:
ae:fa:31:3d:41:28:ae:e9:a7:0a:bc:a4:06:de:a3:
21:4f:a8:4f:6a:32:dd:74:64:b9:11:f1:bc:c5:f0:
fe:fe:11:2f:8a:8a:26:b4:f5:8c:39:c8:9e:32:55:
07:34:dd:18:29:0b:25:63:cf:ab:f2:3c:85:19:f9:
f9:f5:fd:aa:98:31:c4:c2:91:23:45:15:f4:af:c9:
2b:2f:fb:59:39:bb:8c:53:50:2c:49:cf:59:1b:06:
0e:09:67:51:f0:c9:ca:52:d7:02:e8:f0:10:64:37:
9c:62:3b:24:4e:9d:05:1e:2a:22:fd:26:54:eb:96:
bd:3d:13:27:0f:45:24:ad:b2:78:95:a9:4f:9d:ac:
33:d2:9b:7a:15:e8:bd:5f:bc:5a:fb:63:df:29:29:
13:92:c4:41:53:90:9a:25:51:0e:cf:f2:cd:64:7c:
7e:47:61:b4:4e:36:52:e9:ea:59:fd:34:c8:6d:e0:
6e:cf:db:0b:fa:0d:c8:b4:27:01:0c:e3:8f:ac:4e:
7c:67:1a:c7:ee:ce:5c:f5:c4:fe:ae:36:c5:6c:f2:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B2:21:89:F3:1B:4C:3F:48:0E:7C:99:1E:88:D3:07:F3:35:64:99
X509v3 Authority Key Identifier:
keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:54:ae:8a:9f:fe:2b:75:7a:35:64:94:28:13:44:82:13:d3:
4d:98:4b:9f:3d:a7:67:fb:d3:4e:73:6b:66:85:4c:8d:f9:7e:
7d:62:95:7e:3d:4b:ba:38:09:22:f5:40:c7:a5:91:d7:8e:a7:
fc:c3:3f:de:a0:c5:8a:9f:a9:21:11:f5:69:50:98:a2:ff:8e:
c8:b1:09:74:3f:8a:14:c0:83:bc:e5:19:50:21:90:8f:3f:25:
95:a4:c6:38:47:78:44:68:9d:de:c9:e5:e4:45:da:eb:10:89:
cb:aa:23:af:5a:a2:b5:48:3d:99:ab:a3:58:61:67:b7:5c:fb:
ae:47:ea:a5:0f:f8:ea:77:0d:ee:4e:5a:0f:7b:c8:8d:6e:83:
52:e9:c5:fa:65:16:7c:8b:ca:ba:3b:86:9e:4b:d2:ec:71:be:
ab:73:38:17:2d:3c:a3:4f:4e:3c:1c:64:21:be:96:fc:8c:57:
d6:f4:92:3c:e7:d9:c1:b8:c6:ce:da:f1:3b:15:46:a9:b9:4c:
02:aa:a0:d9:7c:5c:78:e1:1c:73:94:64:b6:3c:f9:1b:ae:a4:
bf:f3:f3:9b:74:26:2f:7b:38:84:56:1f:8c:25:6c:ea:89:c4:
4d:d7:1a:69:c5:5c:f2:20:06:4c:54:fd:70:19:29:ec:38:66:
40:c8:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:54:58 2026 by rpki-client