
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier: iv+U4bu1h8/33t/hDyY74UkWpnwlbhPW3rslwiiB1PM=
Subject key identifier: EE:03:DA:20:95:7D:A0:AE:0C:FE:F4:54:47:7E:89:27:5F:7A:22:49
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number: FA
Signing time: Fri 25 Sep 2026 06:20:51 +0000
Manifest this update: Fri 25 Sep 2026 06:20:50 +0000
Manifest next update: Fri 02 Oct 2026 06:20:50 +0000
Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: +f6UncepMjMZu6ee6Ld4iHIpGEn4t4GGJxj9rbSpiZ0=)
2: 556882C8B64811F1AA5369556811F970.roa (hash: glYHRgDoUol4fEbX6q2WhmbX2gGQRrjMe/OOi8CvuWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Validity
Not Before: Sep 25 06:20:50 2026 GMT
Not After : Oct 2 06:20:50 2026 GMT
Subject: CN=6ab612c3-d248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:22:41:d1:d7:3e:3d:8b:52:89:f1:ea:a7:
1f:0e:9b:5c:2b:b4:2c:27:56:a6:c2:05:18:a1:5e:
89:a7:13:4f:e5:8b:01:48:6f:27:be:ef:c1:0a:bb:
fa:38:f1:a9:85:e4:ea:a5:17:53:b3:f4:0d:4f:cf:
c3:41:3d:27:0f:da:d2:b7:3d:65:39:3a:8b:02:32:
20:7a:7a:b0:1a:d3:87:e0:a6:f3:c7:7b:99:a3:9e:
99:03:fb:4c:1a:b4:e4:e5:d0:e7:83:ab:d6:1c:32:
01:4d:a7:95:ad:82:0b:f3:61:ca:34:2e:f5:ea:b0:
83:2b:8e:c4:59:7c:70:61:f9:ee:c2:95:22:d7:5d:
73:a4:53:f2:0a:de:25:45:bc:98:a9:e9:8b:01:17:
ae:e2:f7:18:ca:54:cd:79:e3:46:2a:89:21:ce:3a:
aa:f3:08:27:68:0e:bf:eb:d7:3e:dc:3c:cd:8c:1e:
89:df:bd:d2:dc:57:d3:6d:24:5f:18:ce:85:4a:a9:
a3:c6:63:6e:b8:3b:a0:97:43:cb:e7:72:1a:07:32:
9f:27:f7:99:9d:04:fa:cd:6a:ae:84:ed:a1:a9:9d:
c3:47:de:6b:f0:ee:fc:94:82:19:66:e3:57:e9:a6:
cf:1b:42:cf:4b:04:9c:b8:b1:c0:01:68:2f:f0:87:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:03:DA:20:95:7D:A0:AE:0C:FE:F4:54:47:7E:89:27:5F:7A:22:49
X509v3 Authority Key Identifier:
keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:bb:e4:70:b9:85:17:b0:72:0d:3e:1f:75:ed:95:13:d8:f1:
3e:8a:66:07:80:af:38:5f:68:48:77:cf:01:a7:49:c5:bc:50:
9f:1f:a3:57:b4:f7:1f:ff:14:a5:e6:0e:ea:bc:a2:bb:94:86:
9c:f1:7a:ca:13:a2:50:03:b6:b4:12:6b:a3:68:40:39:b1:87:
33:ee:ba:13:96:fc:27:91:bd:00:fd:7c:0c:69:e0:01:2b:29:
22:55:ab:92:08:d5:d7:98:0f:e2:80:d1:38:56:41:15:95:0f:
94:83:21:fe:80:54:e7:3b:93:cd:fc:d4:6d:a3:c3:d0:aa:b0:
04:9b:5f:78:80:18:9f:1c:96:5c:2d:dc:8e:e3:e3:dd:dd:fb:
af:e9:cc:61:43:3f:a7:e6:73:72:d8:53:dc:fa:7d:83:91:de:
29:2c:5d:44:0b:8d:95:fb:89:30:5f:93:69:03:d5:e9:55:0d:
fd:92:ad:b5:b2:92:12:77:2e:1d:16:c9:3d:f4:cb:64:28:06:
41:cd:60:1d:64:37:f4:75:2c:47:bc:1e:fb:7c:01:bd:b2:1f:
b1:8a:c2:e8:e0:14:71:83:22:a9:48:e7:b5:9d:4a:9b:6c:d8:
a5:c5:bf:41:46:05:87:fa:32:0b:3a:64:f7:81:c5:25:22:7f:
fc:b8:08:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:22:42 2026 by rpki-client