
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier: GoIKIx/VbeBvPbSC4aT2V0RkGJrHN9UmKO0e1KHQIt0=
Subject key identifier: 58:70:6F:CA:62:E7:F0:BC:7A:B2:9D:98:CE:3E:94:0C:E4:3D:B1:F4
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number: 01EC
Signing time: Sun 27 Sep 2026 03:53:32 +0000
Manifest this update: Sun 27 Sep 2026 03:53:31 +0000
Manifest next update: Sun 04 Oct 2026 03:53:31 +0000
Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: +zbkci46Pj7vp6TCgtDkWoZ6gjQlQjqqxCpf8qXqlNw=)
2: 469DADAE9B1D11F199542C1F6411F970.roa (hash: 7ld5vVKkgDVk7iu8ZivqDo4KyiyF+452Quc+9rok5eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: Sep 27 03:53:31 2026 GMT
Not After : Oct 4 03:53:31 2026 GMT
Subject: CN=6ab8933c-45a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:fe:03:ad:67:cf:ad:51:87:ca:ee:e2:cf:
fc:9e:f5:2b:71:03:06:32:92:ae:0b:f8:a3:b2:0e:
bc:a5:6a:3f:82:6c:76:62:01:4f:75:f6:d1:ca:1a:
6d:4f:66:da:8b:46:b7:fd:aa:62:59:e8:6c:a2:11:
1c:63:16:77:22:54:ab:e3:7d:47:1f:56:15:5a:e5:
b7:06:80:f3:db:29:13:c1:f4:6d:b2:5a:d4:dd:5a:
bd:af:00:05:43:59:b4:77:da:f7:82:c3:05:4d:86:
0f:4f:1d:2f:97:b1:ba:ee:cf:fb:2e:31:19:e8:b4:
2e:c6:0f:ca:64:8b:df:80:9a:bb:5c:3b:60:5b:fe:
85:eb:79:0d:17:4f:2e:9b:32:88:a5:48:05:4d:39:
1c:65:3f:72:e9:fe:ed:9e:df:27:81:33:8c:71:4a:
2c:e4:ad:16:e1:6d:90:dc:2f:d6:d9:3f:e8:b8:19:
bb:26:97:6c:b3:9c:a1:05:88:1f:ad:63:0f:24:1c:
d4:6f:71:bf:ad:41:bf:5b:37:35:eb:ea:fc:b7:6c:
62:65:57:d6:17:6e:2a:02:71:c9:65:3a:7f:59:75:
81:a7:bc:3d:c4:fc:97:0f:fd:57:a6:8f:70:b1:25:
ee:88:54:87:54:40:a7:3a:59:1a:7e:3d:5b:9c:1b:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:70:6F:CA:62:E7:F0:BC:7A:B2:9D:98:CE:3E:94:0C:E4:3D:B1:F4
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:99:e6:bc:58:60:ea:c4:49:19:5c:b0:b0:a5:a0:f2:c9:da:
99:76:bf:24:8a:e0:36:e8:bb:2f:fa:0a:1d:85:a0:c8:1a:0e:
b0:ed:41:bb:30:5d:8c:e5:58:54:94:e9:89:c9:22:98:38:6d:
a7:25:f8:de:b1:3c:e3:87:a0:01:44:fd:ef:9b:d4:39:6c:6e:
43:8d:30:a7:94:cd:60:2c:63:85:7a:c5:c0:06:2d:9e:54:57:
48:69:f7:74:3b:09:73:4c:b1:de:7f:c8:8d:d1:f2:d0:18:e9:
84:d9:ee:de:99:04:c2:26:40:0d:3d:bc:54:27:98:7f:f3:cc:
d7:06:86:1a:90:c2:c3:c1:74:a4:7d:d9:db:44:92:d0:30:5f:
28:56:7a:b8:ab:8d:40:2d:f2:87:20:15:4f:71:c5:20:5b:46:
a5:32:d0:f6:fb:6e:b6:c9:a4:5b:23:7b:6f:56:72:fc:35:08:
a1:4d:e8:b7:59:f8:51:23:71:c1:8a:90:fb:d4:31:b2:50:ee:
ba:85:ed:26:04:c6:65:a8:79:9c:ff:11:f5:2d:4a:fa:21:6c:
cd:ef:42:ec:3f:db:a9:ea:14:c7:67:81:20:3e:0b:6b:64:d3:
89:27:7a:48:22:c5:04:dd:5c:3a:69:3f:c0:83:9f:62:66:e3:
80:3e:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:43:38 2026 by rpki-client