
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier: nb3cd0NOyvKyrTZhePLjJvM7Z3Udoa4mFvomTSPyGac=
Subject key identifier: A1:AE:0F:CA:10:EC:FB:43:1E:35:1B:69:BA:76:C5:7D:72:46:8F:88
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial: 35AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number: 35A0
Signing time: Sat 14 Nov 2026 14:58:29 +0000
Manifest this update: Sat 14 Nov 2026 14:58:29 +0000
Manifest next update: Sat 21 Nov 2026 14:58:29 +0000
Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: mYlByDsbt9yE454xfKMvN4mAeNdziPj1hAXhZbLeDf4=)
2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: fM9Ygytwj129H5NzvpnGbz9FPKEIaP/JBHZZectYeJQ=)
3: v1xtMR54ekuDn4r5wtgrvOTr2YE.asa (hash: kV7twXJrtxJmXDA+tl8S41Q4+TVoeE0RO87ddCo+mxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13738 (0x35aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Validity
Not Before: Nov 14 14:58:29 2026 GMT
Not After : Nov 21 14:58:29 2026 GMT
Subject: CN=6af87715-05f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:23:23:d0:16:69:5d:92:68:59:4c:fc:d2:
a4:16:ec:c2:90:1c:6f:f0:77:63:b9:27:c3:ec:28:
0c:04:6c:23:a2:f6:5c:a5:04:7f:49:96:d1:98:82:
9d:77:dc:8c:85:fb:18:52:c9:38:88:42:ed:b9:af:
45:a0:40:02:2b:65:f7:3c:db:8c:a4:b9:98:b6:66:
cb:30:9c:48:8f:e3:5a:cf:48:9e:f7:e1:e5:2a:8c:
6b:1f:83:ce:cf:e1:07:76:54:d1:90:00:81:78:0c:
d3:d5:d8:57:90:fb:f3:03:b8:b2:bc:3e:19:47:68:
ad:9f:70:cc:a9:7d:08:74:ab:c0:f2:71:a1:56:a6:
5f:14:2e:3a:f9:0f:c9:21:5a:2b:99:50:a3:5b:9b:
97:ba:07:ca:5b:d3:97:07:38:5d:f2:e1:f0:b1:85:
02:60:d0:93:20:8c:e3:88:fa:bc:1c:a2:81:1d:13:
c7:d3:f9:70:ad:35:45:c6:a5:5a:5c:31:41:97:3e:
16:7d:ce:90:2c:c0:0c:5a:6c:84:29:8e:40:76:c5:
c4:06:84:ee:78:8d:ee:6b:72:4d:55:98:b9:5a:26:
15:cc:9f:be:31:02:cc:99:ce:22:33:fb:2d:f0:a5:
e8:6e:2e:f2:1f:c8:7c:b9:a1:c6:62:a3:ef:81:0a:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AE:0F:CA:10:EC:FB:43:1E:35:1B:69:BA:76:C5:7D:72:46:8F:88
X509v3 Authority Key Identifier:
keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:53:79:c8:92:88:09:42:a2:a6:59:12:3d:a8:ed:75:be:db:
96:4b:ee:ad:62:42:84:7f:a4:70:9c:65:56:06:1c:fa:17:ea:
61:23:0d:9b:60:59:c1:f7:55:8d:5b:39:85:2d:ba:e4:36:5e:
20:57:33:58:97:fd:2f:02:fe:4d:37:b6:26:d0:80:53:2c:41:
50:86:48:4f:fc:9b:af:b7:ec:bf:2f:c1:95:89:ce:17:75:af:
54:f3:87:d5:43:27:00:bf:ae:18:f0:cc:0e:ad:f7:5d:aa:c7:
15:68:03:45:c8:76:29:f4:ec:f3:5f:e6:24:96:b7:7f:0d:e5:
38:0f:08:4a:9e:e6:df:f1:51:5f:9c:f2:cb:54:ed:39:48:ae:
8c:02:bb:df:0d:ff:35:0c:13:33:72:9a:b0:53:72:f1:b4:dc:
d7:2e:b6:a1:3f:11:39:04:aa:5a:a8:bf:1b:62:b6:a9:ec:63:
6d:79:dd:c4:71:ef:b9:47:a3:1e:81:a7:c9:38:60:36:33:9b:
3c:ba:73:38:f5:ef:d1:ce:ce:bf:67:2d:5b:8b:7d:9f:18:4a:
ee:08:7d:58:70:cf:f7:50:c2:b7:e8:c5:2f:00:2d:48:1d:ec:
a2:cf:42:65:2f:84:9a:4a:b3:c7:5c:66:3b:6e:91:03:b2:e2:
31:19:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:20:16 2026 by rpki-client