
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
File: qEIODiButOkMWHKN1D91Dc_DzIY.mft (raw, json)
Hash identifier: GrdlzcOFwgPENJrutoMb/vwbyzdk9rOaPNsmDDMJFwk=
Subject key identifier: 61:A2:E5:C5:52:4B:CD:48:B1:4D:47:44:62:09:75:E0:75:45:C6:8F
Authority key identifier: A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
Certificate issuer: /CN=A91DCF4D/serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
Manifest number: 24
Signing time: Wed 23 Sep 2026 08:34:26 +0000
Manifest this update: Wed 23 Sep 2026 08:34:26 +0000
Manifest next update: Wed 30 Sep 2026 08:34:26 +0000
Files and hashes: 1: qEIODiButOkMWHKN1D91Dc_DzIY.crl (hash: fAda8iEePE1iH0AzomMOtZse96lb8xrcvaueYznIhZk=)
2: A41A30BE866011F191F4B56496A30FBC.roa (hash: AJVM8QB8v9wW9C2GIwYSkWw279MNg5CiJGgU0E7i/bE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl
rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCF4D, serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
Validity
Not Before: Sep 23 08:34:26 2026 GMT
Not After : Sep 30 08:34:26 2026 GMT
Subject: CN=6ab38f12-c081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:48:b9:68:b6:3b:e9:f9:29:94:2c:4d:f4:
be:5f:64:53:12:58:58:58:e1:3f:f5:69:d5:3f:63:
4b:d7:b1:c6:81:c7:1d:11:aa:ba:26:2f:47:8e:a5:
e0:43:5a:13:7c:01:4e:8b:a6:c6:97:eb:a1:a3:bf:
cb:0f:75:87:d7:25:84:3f:4a:fc:72:09:69:9f:f9:
5a:1e:1b:dd:f7:db:34:4e:f5:39:2c:b7:45:9a:5e:
f5:cd:95:a9:5f:94:2e:23:60:b5:8a:f3:fd:42:96:
83:ca:97:a8:11:c8:51:9a:45:93:82:8c:0a:e1:83:
47:4e:da:9c:bd:03:9b:22:a4:48:bb:d9:06:4c:23:
f4:dd:27:be:96:e7:3a:ff:b6:b5:7e:82:6b:f2:77:
5c:2b:1b:82:80:28:51:21:01:f6:51:a1:93:45:a6:
59:b7:01:e9:ae:15:1f:35:53:0b:38:79:ee:50:9f:
b7:df:bd:34:33:e4:37:24:db:bd:43:1e:74:38:54:
af:a6:63:64:2a:73:fb:9a:16:01:80:dc:75:1c:72:
66:ca:19:34:98:f8:bd:e5:60:ee:0b:ae:a3:6c:85:
6d:7e:54:29:84:27:c5:45:1f:c6:2f:9d:73:cc:c4:
e7:05:6f:e8:75:fc:e1:a7:3e:26:15:8b:7b:94:07:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A2:E5:C5:52:4B:CD:48:B1:4D:47:44:62:09:75:E0:75:45:C6:8F
X509v3 Authority Key Identifier:
keyid:A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:e8:c3:c7:93:c6:52:9f:9d:d5:c5:8b:29:0c:2e:b3:6d:28:
75:c7:ea:87:26:9e:ba:23:a4:52:27:bd:e0:8b:46:81:00:a5:
9e:54:1e:12:15:71:5a:e0:79:d0:19:2c:d5:f0:9a:a2:c4:78:
b1:e3:15:3b:02:87:d8:b9:3b:d0:74:8b:7e:72:bc:a1:a7:98:
e6:16:7c:90:57:d9:5d:83:06:3c:a4:12:f6:1c:d9:35:10:21:
8c:5f:0d:34:05:cb:65:0b:9c:0e:50:66:75:ad:68:94:ee:23:
a1:c1:33:28:3c:2b:5e:ba:d8:7a:50:4e:63:ac:91:43:3b:59:
84:22:76:09:0a:c7:be:02:b0:36:88:20:ee:7d:17:83:e9:2e:
f9:f0:7d:c4:01:ca:88:c3:de:3e:d7:54:41:1d:d0:85:99:67:
61:11:4a:d6:e1:ac:89:47:19:3b:0d:ff:aa:14:3a:e0:ba:c1:
f3:8c:de:b2:3d:a7:9b:a4:9c:30:6d:fe:2c:cc:3c:ec:f8:b8:
48:7f:fa:24:d2:7f:2e:4a:ae:a6:9a:28:78:bd:07:be:f9:1e:
76:a0:f8:8c:78:44:1b:18:70:e6:1a:d9:25:b4:cd:3a:1a:b2:
4c:66:32:67:6a:40:54:70:4b:e4:64:b8:60:77:92:1d:51:f5:
cb:8e:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:35:16 2026 by rpki-client