
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier: NpaRA5Ij5a/4SSppqxYyPf/qiEt+u8jSiOVdWJPaA6A=
Subject key identifier: 00:47:6E:6D:F5:12:99:12:99:60:97:D9:3F:05:63:09:6E:D8:06:3B
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial: 09E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number: 09D2
Signing time: Wed 30 Sep 2026 20:09:32 +0000
Manifest this update: Wed 30 Sep 2026 20:09:32 +0000
Manifest next update: Wed 07 Oct 2026 20:09:32 +0000
Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: JNway3nzI0N/1Kj61Q7mdPNAvz/25jrngDk+pQZ5Rxw=)
2: B7AC544A86F111F19E006003A7EE528E.roa (hash: CD98/zBc1iRMlYgaHXvEmJhl0TajGVGfTmWFNs6GIac=)
3: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: zZu8aFP4Al6GJRPpJKXmBtYypvXABswMl/UMkW8uCT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 20:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Validity
Not Before: Sep 30 20:09:32 2026 GMT
Not After : Oct 7 20:09:32 2026 GMT
Subject: CN=6abd6c7c-d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6d:d4:6c:6f:c3:4a:36:3c:d9:1e:05:b1:c6:
22:5e:46:d5:a6:98:b0:86:4d:7a:1e:22:27:60:70:
8f:a9:cf:68:96:29:3e:c7:2e:b9:09:2f:fc:f8:77:
b2:9a:87:40:0f:62:8c:a9:fa:f3:c6:e5:d0:41:6f:
07:32:70:2d:95:fd:72:67:8b:56:40:e2:c1:f2:14:
b5:bb:1e:d0:88:ef:6f:ec:82:fc:c2:b1:97:4a:ea:
45:d6:52:3b:60:3a:63:25:f8:f0:cc:54:e1:da:a7:
29:cb:7a:ef:5e:1a:5e:18:c9:dd:c9:fb:f5:37:fd:
2e:5e:44:3a:f6:33:d0:cf:3d:ec:c6:a1:6d:a5:24:
ca:55:08:3c:d5:5b:a8:37:7a:1a:0c:27:af:5f:c7:
b1:f8:1c:73:e0:9d:95:71:06:41:92:7a:82:6f:b7:
93:f1:49:5e:eb:59:b0:74:67:95:38:27:df:b4:0a:
bf:1d:de:b2:da:5a:ef:d1:2e:97:17:b2:66:2b:b3:
1b:68:d4:a7:bb:78:08:95:50:bb:63:0c:cb:dd:58:
fe:20:ce:a0:fd:4f:b2:8b:66:e6:1c:db:02:30:0e:
56:3e:f1:87:d6:c1:98:64:be:60:ab:76:67:ca:c9:
14:90:1e:b8:81:af:a2:05:ee:7e:41:83:0a:92:30:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:6E:6D:F5:12:99:12:99:60:97:D9:3F:05:63:09:6E:D8:06:3B
X509v3 Authority Key Identifier:
keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:06:d9:c6:69:eb:32:ad:e6:0a:ae:86:68:82:fa:b5:db:71:
a3:83:04:c2:50:86:14:f0:24:52:19:8c:23:ce:49:48:9e:c0:
07:0d:6c:51:eb:dc:7b:e0:bd:70:19:ed:ef:91:36:d2:d5:22:
a5:1c:a9:dd:5a:a1:ee:d6:30:be:59:6e:af:07:6a:68:f5:a7:
63:1e:85:2c:29:30:d0:1f:33:1b:21:23:34:7b:59:63:0d:e9:
8d:64:64:9d:77:68:df:f9:8e:bc:d2:6c:9b:4b:95:d8:bc:d6:
bf:7c:7c:56:3d:1e:4f:22:7d:8b:a5:00:04:e4:06:cf:37:3b:
bc:d6:a7:d6:18:65:f5:a5:c9:dd:19:86:22:2f:cd:85:0b:f8:
89:b9:7f:21:6a:db:6e:e0:78:23:d5:50:9c:1a:1e:e4:c1:41:
f1:34:cd:a2:f4:de:c3:52:af:c7:f2:6b:66:ec:bf:df:13:f4:
79:84:06:39:88:fb:79:02:55:25:6a:ae:fe:bf:75:af:30:de:
76:e0:34:48:5f:ad:c8:54:a3:0d:69:4e:3e:f2:67:ba:70:5d:
dc:5e:b2:90:43:1f:6e:cd:42:15:47:83:06:3b:1f:bc:ec:d3:
c1:2f:af:85:f3:22:42:f9:c1:7b:06:f5:a9:54:5d:50:23:2f:
fa:0a:5b:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx
OUFGQThGRDUwHhcNMjYwOTMwMjAwOTMyWhcNMjYxMDA3MjAwOTMyWjAYMRYwFAYD
VQQDEw02YWJkNmM3Yy1kMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9G3UbG/DSjY82R4FscYiXkbVppiwhk16HiInYHCPqc9olik+xy65CS/8+Hey
modAD2KMqfrzxuXQQW8HMnAtlf1yZ4tWQOLB8hS1ux7QiO9v7IL8wrGXSupF1lI7
YDpjJfjwzFTh2qcpy3rvXhpeGMndyfv1N/0uXkQ69jPQzz3sxqFtpSTKVQg81Vuo
N3oaDCevX8ex+Bxz4J2VcQZBknqCb7eT8Ule61mwdGeVOCfftAq/Hd6y2lrv0S6X
F7JmK7MbaNSnu3gIlVC7YwzL3Vj+IM6g/U+yi2bmHNsCMA5WPvGH1sGYZL5gq3Zn
yskUkB64ga+iBe5+QYMKkjAGsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABHbm31
EpkSmWCX2T8FYwlu2AY7MB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix
QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjdGNS9CRDEwQjREQ0IxQzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhw
V1NrWGFhQm5BM01acjZqOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGgbZxmnrMq3mCq6GaIL6tdtxo4MEwlCGFPAkUhmMI85JSJ7ABw1sUevce+C9
cBnt75E20tUipRyp3Vqh7tYwvllurwdqaPWnYx6FLCkw0B8zGyEjNHtZYw3pjWRk
nXdo3/mOvNJsm0uV2LzWv3x8Vj0eTyJ9i6UABOQGzzc7vNan1hhl9aXJ3RmGIi/N
hQv4ibl/IWrbbuB4I9VQnBoe5MFB8TTNovTew1Kvx/JrZuy/3xP0eYQGOYj7eQJV
JWqu/r91rzDeduA0SF+tyFSjDWlOPvJnunBd3F6ykEMfbs1CFUeDBjsfvOzTwS+v
hfMiQvnBewb1qVRdUCMv+gpb0g==
-----END CERTIFICATE-----
Generated at Fri Oct 2 16:44:44 2026 by rpki-client