
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
File: mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json)
Hash identifier: GHodnuEIM0yS56szxF/TZf6DiPueJaV2mKIsqY08gpM=
Subject key identifier: 7F:96:ED:98:75:BB:FC:5B:B5:92:52:D8:C3:55:DF:56:BA:AB:A6:93
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
Manifest number: ED
Signing time: Sat 03 Oct 2026 07:08:46 +0000
Manifest this update: Sat 03 Oct 2026 07:08:45 +0000
Manifest next update: Sat 10 Oct 2026 07:08:45 +0000
Files and hashes: 1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: xF0Qzm+l4LiUtU6QrcY/JfapJRzDVK1HiQHDDKiqma4=)
2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: dbHPkMuEOzuqpzoFmdsmiLtbpvTBxHiZw5BwSoqb+aQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Validity
Not Before: Oct 3 07:08:45 2026 GMT
Not After : Oct 10 07:08:45 2026 GMT
Subject: CN=6ac0a9fe-e46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:07:f2:87:a0:65:9e:e8:9e:1f:e9:f8:2c:
ea:bf:33:ae:78:d0:dc:31:e3:0c:c4:df:4a:c1:f8:
59:1a:e6:b1:92:d7:54:a9:2e:13:99:45:88:01:51:
d9:e0:f9:38:b2:cd:a0:72:0c:dd:a5:e5:69:ef:60:
cf:5f:a7:28:94:e3:90:2e:bf:55:5d:93:85:c5:9c:
4a:f5:1c:28:b4:5a:d4:ce:19:c5:74:57:6e:e6:10:
90:ac:3a:a4:e0:38:3f:17:4d:6b:12:54:ae:5c:e2:
57:8b:a2:8e:45:41:c0:c2:81:3d:bd:88:62:6e:bd:
e2:e8:ca:da:16:09:42:61:91:d9:29:73:b6:5a:80:
96:94:16:84:1d:3c:71:78:ec:e1:15:70:a4:b3:84:
bb:64:d7:28:9a:7f:bf:6f:da:d7:31:fb:60:9f:79:
8f:04:94:7a:40:16:18:b0:0f:d2:d9:19:6b:e7:20:
5c:b1:be:b9:4e:c1:2b:5d:a4:64:78:e3:17:b0:cd:
8d:39:83:c1:8a:08:27:2e:ed:3e:46:61:e0:c5:6c:
c2:4a:a6:72:a9:f5:83:32:3c:56:ee:6a:ae:f1:2a:
df:8f:af:16:2f:e0:c0:76:77:c4:61:2c:e6:d6:08:
fa:7a:fc:16:ca:e3:6d:da:34:7b:f0:e7:c1:30:00:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:96:ED:98:75:BB:FC:5B:B5:92:52:D8:C3:55:DF:56:BA:AB:A6:93
X509v3 Authority Key Identifier:
keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:29:8e:eb:5e:99:16:8c:a5:56:95:7d:f0:9d:95:a7:ee:
8d:3d:1c:fb:34:cf:1a:97:98:a6:02:9f:28:5c:ff:a7:f4:65:
71:79:8f:dd:e1:81:9d:d7:26:71:e4:ba:65:90:58:a1:35:56:
e4:80:e7:20:5f:b0:80:7c:7d:00:63:57:68:db:3d:99:f5:af:
3f:93:eb:fa:e5:ce:59:35:ac:45:bc:f0:be:c9:87:fa:88:cb:
33:af:7e:01:e2:c5:76:4f:2c:2a:a4:d0:a4:d4:55:3d:ed:a3:
25:fb:de:d2:44:c2:b9:db:f4:71:89:bf:5f:fa:cd:cd:63:5e:
10:d1:6e:09:8f:a3:f2:da:4a:2a:5a:07:da:8a:fb:18:27:e1:
5b:ed:89:8c:8b:c6:84:a1:31:49:33:ee:6f:2c:74:c7:16:92:
01:72:dc:2c:89:e4:c5:33:ca:eb:e3:6a:02:fb:d3:06:0c:c9:
bd:88:16:3a:7e:06:e4:54:7d:07:87:dc:f0:9f:9d:43:79:45:
ae:cc:9b:f2:10:d8:13:86:c3:b4:0b:97:52:3e:0e:3d:d5:83:
5d:9f:29:12:2b:cf:d1:18:dc:0c:f6:33:8f:c6:ca:0e:26:10:
0c:11:96:be:3d:09:b6:13:12:61:aa:29:e0:d3:68:73:14:56:
72:ec:df:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:51:08 2026 by rpki-client