
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
File: Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft (raw, json)
Hash identifier: 7FtlqEYRe7MF5J+Tq1EiLCfzOXj+2clYWdPl2KFmqwU=
Subject key identifier: 06:C2:4D:E8:EF:B2:36:22:AF:93:47:CA:73:F1:50:94:C4:05:C5:B7
Authority key identifier: 42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
Certificate issuer: /CN=A91D7818/serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
Manifest number: 0C
Signing time: Sun 27 Sep 2026 09:45:28 +0000
Manifest this update: Sun 27 Sep 2026 09:45:27 +0000
Manifest next update: Sun 04 Oct 2026 09:45:27 +0000
Files and hashes: 1: Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl (hash: 39EzADk4y1HEHKdIGxismH+PERFc2XEdEvvOp8ZZjW8=)
2: DD890BBCAA9C11F19F04260F3311F970.roa (hash: dc58Ik+rvtv7DPEkUFFu4gn25qgDCCMkoi43G75u9yg=)
3: DEA91CF8AA9C11F19F04260F3311F970.roa (hash: SCbJOwXSWDEjztL6+Kzjl8eS8WRrj5FuN9JXi9rj2W8=)
4: DE194D08AA9C11F19F04260F3311F970.roa (hash: sjmWl1oslUuNyOaGiFybs67KITawAWqRvbDugu37hTA=)
5: DF68D5ACAA9C11F19F04260F3311F970.roa (hash: WPsEj0kc/u7fp3yWYz5NbDeFJGi70xZk5MXwb7AW1SU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7818, serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Validity
Not Before: Sep 27 09:45:27 2026 GMT
Not After : Oct 4 09:45:27 2026 GMT
Subject: CN=6ab8e5b8-eb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:68:3a:4a:3c:18:da:42:94:33:82:49:57:
17:22:15:b4:d8:3e:9f:67:da:0b:fd:15:88:34:2d:
a6:8a:73:f4:48:33:82:b8:ab:81:99:40:f1:dd:75:
1f:37:1e:a3:f4:46:db:6a:62:54:92:4c:75:c3:11:
32:30:31:12:c2:89:7e:ac:fc:b2:84:4e:f0:dc:f1:
55:e2:10:27:2b:f0:0c:66:da:ef:1c:85:78:f8:44:
a2:8b:80:35:0a:72:fb:6b:19:ac:8d:3f:d1:23:bf:
1e:77:3e:f5:a7:5c:8c:d6:df:9b:14:ba:0a:60:a6:
05:b7:f3:13:76:2c:e6:10:8c:e9:b8:f1:06:d6:57:
27:e6:63:7a:c3:b1:80:2a:30:69:2a:48:20:a8:ed:
8f:1c:00:2c:5c:4e:ff:0a:6b:5a:9a:1c:72:a9:ab:
7f:91:e3:92:46:99:aa:47:e0:04:10:59:4e:23:16:
4a:e3:26:96:fc:48:2b:99:31:9f:74:e3:90:0e:e7:
0c:46:a7:bb:45:8d:88:4d:a0:e7:ba:33:65:8d:3a:
6b:ca:b0:b9:57:0b:81:ee:90:d7:18:1d:3c:ba:cd:
c8:f7:3e:41:6b:59:ed:c9:18:d8:de:b0:55:88:87:
4b:b5:dd:ef:71:65:66:54:72:68:19:0a:3d:60:f6:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C2:4D:E8:EF:B2:36:22:AF:93:47:CA:73:F1:50:94:C4:05:C5:B7
X509v3 Authority Key Identifier:
keyid:42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:15:97:7e:26:91:64:4f:7a:21:49:eb:dc:09:33:05:01:88:
75:e9:52:35:e3:72:b8:7f:4c:2a:4e:25:e5:92:ae:7b:84:1e:
2e:17:3c:15:fd:67:27:72:73:3e:f1:1c:a4:f6:5a:be:0f:c7:
8d:44:04:01:42:67:b3:d2:b0:de:f7:bd:65:56:77:05:cd:b3:
bb:6f:1b:a3:d6:20:bc:28:26:80:de:36:35:18:b6:e7:1d:b0:
49:08:68:d0:e6:d1:02:c4:bb:bf:e0:24:a5:65:fb:a6:33:ab:
ac:25:a3:8f:33:37:56:e2:5d:bb:4a:e1:94:4a:8e:a9:3c:2a:
28:41:06:a4:7d:27:20:06:1d:bc:32:46:24:62:43:96:6a:e6:
c5:42:52:38:89:79:cc:fc:19:3f:ec:96:1a:b4:7b:5a:cb:d3:
fb:6f:56:6b:1c:d0:9b:2c:2c:08:c8:15:cb:e7:ee:55:cc:fc:
69:e0:71:7c:a8:c3:c0:75:76:41:82:f8:95:f3:c8:82:6b:76:
1f:61:04:fb:c8:cd:8c:97:33:b0:ea:7e:70:db:81:b3:92:d3:
38:a7:a4:e8:2f:f7:c3:5a:35:a3:a2:19:d1:14:61:5b:93:d2:
92:cf:d9:07:8e:14:4e:2c:d6:8f:6b:0e:51:f5:e8:8d:4b:fe:
b1:77:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:23:55 2026 by rpki-client