
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier: O1kvXqbkGZ2bz7Hk/FK0bD8tnFXh51d3LJ2tkw1eOYo=
Subject key identifier: 84:56:7A:1C:12:D1:C4:80:0A:8B:5C:DC:71:1E:8C:D5:24:59:AB:11
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number: EB
Signing time: Fri 09 Oct 2026 07:09:04 +0000
Manifest this update: Fri 09 Oct 2026 07:09:03 +0000
Manifest next update: Fri 16 Oct 2026 07:09:03 +0000
Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: yDJzf6idjYu6flnK9AYjp+wQgXDXg/aaFAYH3TJBPlw=)
2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ol5yFCZOBiVTvk8E7fVatGRyyicC3FHaDbYq9ITTPLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Validity
Not Before: Oct 9 07:09:03 2026 GMT
Not After : Oct 16 07:09:03 2026 GMT
Subject: CN=6ac89310-d606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:a9:df:ca:e3:c2:60:82:7f:3d:b5:3d:25:
69:7f:26:f8:ca:05:4b:d2:fd:ba:b1:71:23:61:96:
79:9b:02:58:6f:4f:28:ed:2c:78:53:df:28:92:83:
64:7b:a4:5c:b6:f9:3c:ff:d5:52:ae:2d:f2:1b:80:
51:2d:e6:d7:43:64:38:82:2d:c9:ac:28:71:8d:cd:
e5:b8:ae:b8:4a:40:ee:60:65:a3:11:c7:f3:2f:6d:
32:ad:53:1f:3a:b5:57:99:43:f4:7c:44:85:f7:8b:
76:cb:f8:f0:b3:9c:3d:f4:8c:12:d9:d6:92:b7:62:
00:ad:33:f9:cb:fb:dc:59:3a:58:8c:d2:67:36:84:
38:86:5d:9c:82:37:8b:19:79:8f:a7:b2:d3:4a:e8:
ea:ad:34:96:5f:44:f0:17:1f:df:02:59:39:44:0d:
7f:20:c4:39:18:92:69:79:4c:1e:20:f3:8a:88:e0:
01:0d:79:94:40:8b:64:f9:b6:5f:21:d6:04:eb:5b:
c9:87:95:80:c2:de:24:e5:1e:ce:a7:b5:e7:a4:fb:
20:a6:bc:84:e8:32:f6:5f:c7:95:16:67:ad:04:2a:
16:bf:7a:0e:e2:c3:06:47:49:5e:e3:4c:54:af:25:
ab:9f:93:0d:a9:1f:42:b0:46:68:b3:51:6c:15:31:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:56:7A:1C:12:D1:C4:80:0A:8B:5C:DC:71:1E:8C:D5:24:59:AB:11
X509v3 Authority Key Identifier:
keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c0:13:04:9a:a9:34:5a:69:f7:9f:d3:00:84:c0:b8:10:c9:
53:7a:6a:dc:4d:52:4b:6a:52:bd:6c:6a:b1:b1:6f:8e:21:23:
69:4a:0e:61:d8:07:06:bc:14:eb:cf:03:a8:86:df:47:02:12:
bc:c4:9f:6c:94:81:1a:9f:a4:48:3d:7f:8c:7a:53:85:be:b5:
1e:1a:df:2a:45:94:ac:2c:41:a7:dc:72:3e:11:d4:08:19:6d:
7e:33:72:44:d1:59:4a:17:ff:58:5a:c9:1a:5a:83:2f:0e:3f:
ee:6c:a1:6d:a1:56:c0:db:15:29:75:8f:af:ae:a6:fa:02:a7:
50:8a:ca:0d:c5:56:a0:c3:bc:a7:b1:db:ba:e5:b1:38:23:2a:
d3:96:0b:3e:38:8f:18:18:94:a8:21:40:b4:f9:c3:e0:42:86:
de:38:69:60:29:e8:96:76:51:06:e7:90:0c:99:ab:92:47:0a:
b0:4b:e9:78:0d:e5:47:87:ca:7a:a8:25:72:ed:c0:6e:72:1a:
fb:25:1a:a8:a6:58:d7:ae:2a:36:c4:18:87:e3:a1:8b:bb:67:
27:89:00:c2:e5:b0:05:9a:d4:56:0c:71:54:4f:9b:f3:82:77:
46:70:1a:97:b8:76:09:42:93:e2:33:89:89:df:30:ba:11:41:
b3:07:a4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:37:33 2026 by rpki-client