
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json)
Hash identifier: Bvw8tALffslKMfVI/sO1uh/FHSrE3eg1g0E2xiJAvdM=
Subject key identifier: 44:D2:EB:05:0C:11:C6:85:9D:D4:45:EF:5A:85:4E:1C:7F:41:1E:96
Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Certificate serial: 05BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
Manifest number: 05B7
Signing time: Tue 22 Sep 2026 22:46:47 +0000
Manifest this update: Tue 22 Sep 2026 22:46:47 +0000
Manifest next update: Tue 29 Sep 2026 22:46:47 +0000
Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: 3cCVSq4ZYC/nNwqLkmnuclQnYyvVH5Arwoa/IKb48jw=)
2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: 9ZEEK3IQ8UuFSqgHtrQ6O84JIh+FgFNIqrwN+9CFIi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1471 (0x5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Validity
Not Before: Sep 22 22:46:47 2026 GMT
Not After : Sep 29 22:46:47 2026 GMT
Subject: CN=6ab30557-b739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:3d:74:e5:f6:c2:d4:72:a9:1b:4e:05:ff:
83:62:78:4a:bd:50:98:b3:13:3b:40:66:59:78:07:
5e:bc:41:3d:31:86:bb:88:a2:e2:cb:80:bd:96:d0:
88:4f:e1:02:dc:ee:10:24:94:e4:18:dc:51:0a:2c:
02:d6:94:ad:6f:d5:2f:14:93:7a:13:96:72:d1:8b:
86:e6:ca:3a:42:4c:ea:5d:33:6d:cf:20:0e:05:97:
60:88:70:43:22:ba:3a:d2:a8:d9:4d:a6:00:18:d3:
6f:8b:bb:a5:b8:31:20:90:c0:ad:d2:26:7e:c0:0f:
3c:7a:a9:88:62:bc:a0:ac:71:7f:48:b9:5c:64:20:
9c:50:8f:b7:d8:bf:e1:e4:9c:93:7a:76:0f:f3:06:
31:47:62:34:d8:f3:da:ca:9c:2e:68:61:6b:11:d2:
2f:e9:2e:b0:20:bb:d4:d7:ac:b9:f2:95:8f:fa:44:
52:2c:e9:52:d4:34:d4:b8:19:ec:92:dc:c8:78:f5:
8d:38:e6:13:c6:ff:19:53:5d:56:4f:20:11:24:b2:
1a:66:92:8d:0a:f8:1a:cd:55:37:c7:9f:a5:c3:ee:
0a:ff:5f:0f:f7:3b:30:91:44:6a:a2:90:e0:64:15:
c7:bf:b3:11:06:03:b7:14:5c:ab:46:b0:bd:da:7b:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:EB:05:0C:11:C6:85:9D:D4:45:EF:5A:85:4E:1C:7F:41:1E:96
X509v3 Authority Key Identifier:
keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:51:3b:69:01:6a:ec:a3:60:2c:fc:87:d0:6a:f8:62:f3:0f:
99:84:52:e4:38:a5:90:c6:16:04:64:e9:3b:1f:28:f0:6f:f5:
64:ea:f6:cb:98:85:a9:ee:a5:9a:08:a6:0a:6e:b4:23:60:cc:
7a:b2:f7:eb:7d:88:f7:69:a0:55:0f:dc:2e:53:1e:5f:ad:70:
52:ad:1c:31:bc:c7:e0:01:d1:a3:81:f1:76:6d:2f:51:84:0f:
34:f6:70:48:72:58:ff:64:63:22:f9:3f:0c:77:ce:99:01:e8:
80:a9:89:c1:c6:66:d0:60:a2:14:3d:15:39:b3:fc:43:3c:66:
8a:30:e6:70:dc:8e:37:40:86:d4:18:d7:4c:45:a9:9c:6d:c8:
a4:bb:37:df:0c:4b:56:e3:bc:2c:c2:28:d6:77:9a:b3:fb:c9:
4e:95:87:8c:e3:01:82:bf:ad:a8:bc:c5:6e:5e:7f:25:ad:e8:
2f:19:d4:72:8d:c3:1b:d7:70:99:08:1f:2c:64:8c:17:77:f3:
c8:5a:1a:be:d6:b8:9c:e4:0a:87:ef:98:24:c8:69:51:d6:db:
55:eb:5b:04:24:ff:55:9d:8a:0d:0c:fa:02:7f:1d:59:fd:90:
fa:a1:b0:99:95:d8:a6:26:b5:57:5b:a9:94:83:e6:9a:79:52:
c6:6d:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:19:08 2026 by rpki-client