
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier: g9Thkk3xAAhj3Hx6q/X/TmYuU+wioNE94pAn8mbmnz4=
Subject key identifier: 6A:BD:D1:FB:6B:B2:BC:4D:24:69:F4:84:DF:44:34:9B:0E:79:14:C2
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 04C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number: 04B9
Signing time: Thu 24 Sep 2026 23:42:46 +0000
Manifest this update: Thu 24 Sep 2026 23:42:45 +0000
Manifest next update: Thu 01 Oct 2026 23:42:45 +0000
Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: +nXG3M87+MYn9Eg+CR5sGwIcMDDwVPXcuVX5ZOosCis=)
2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=)
3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223 (0x4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Validity
Not Before: Sep 24 23:42:45 2026 GMT
Not After : Oct 1 23:42:45 2026 GMT
Subject: CN=6ab5b576-1dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:db:63:7f:d3:e8:38:92:87:51:3c:d8:ec:
bb:8b:15:f1:f2:60:86:68:c5:b6:23:45:c9:3f:fa:
fd:ce:9f:d7:56:41:29:de:d0:88:c2:75:be:bb:3f:
85:4d:25:b0:8c:a1:08:7c:4d:77:c0:8a:15:3b:43:
52:3f:d9:b8:c7:63:ce:f6:db:79:34:98:f6:8e:64:
4f:48:a9:ef:ef:71:10:e1:93:62:2e:a0:fb:ee:ba:
8e:9d:07:68:c6:a4:33:82:fd:4a:77:9b:32:6c:6c:
4a:36:a2:2c:ca:87:56:ae:c7:07:c2:9f:bd:c5:aa:
e5:fb:61:8f:9f:4b:5b:cc:04:8f:e2:26:86:99:2a:
35:3d:df:51:66:af:78:07:4c:fc:b6:e4:cc:75:3e:
23:38:ba:c1:f2:54:01:8d:8f:54:01:c2:5f:18:86:
de:40:08:ea:23:d1:d2:d4:ba:a4:45:75:4e:68:16:
0e:33:c6:ac:f9:cf:65:44:d8:64:79:52:46:e2:6d:
52:d2:ce:43:8b:08:99:d3:9b:a2:1c:9d:22:d9:c4:
09:0d:c6:08:95:c9:ad:65:63:ea:10:a2:62:9a:b7:
17:8a:62:91:01:cf:53:d5:7c:6d:e7:47:b6:90:2a:
dd:dd:7a:b4:5e:f0:82:44:03:7e:32:2a:42:d7:7c:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BD:D1:FB:6B:B2:BC:4D:24:69:F4:84:DF:44:34:9B:0E:79:14:C2
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:d4:ff:ff:0f:1a:2f:7f:c5:f1:b8:42:5e:45:25:1f:46:da:
3c:d2:b6:8d:74:8c:41:88:c5:ea:69:40:a2:df:11:f2:a6:62:
1e:d5:39:55:78:f9:16:fc:78:38:2a:45:3a:9c:2b:46:84:a1:
66:93:1c:0f:05:f9:86:c7:1e:5c:19:8e:b0:6e:5f:1a:02:63:
72:d8:5e:4b:61:84:1c:d1:09:7e:3a:5e:49:96:38:b7:90:35:
8d:42:c2:db:f8:3a:39:46:af:c7:83:b3:29:46:00:21:31:06:
07:1c:cf:7f:7b:8c:42:31:9e:06:14:a0:74:87:4a:99:05:76:
1f:69:fe:93:5e:0e:8e:ad:84:1c:92:7f:87:50:90:52:9d:7d:
f6:a8:8b:da:d5:94:b3:f8:80:16:74:a1:d8:ad:46:de:a4:2c:
9c:79:b1:ba:1a:86:09:69:ea:dc:4e:8f:8e:6c:de:a8:99:e1:
48:9a:75:8c:3b:be:8d:97:48:53:d2:84:c7:9f:37:e4:17:15:
57:b6:75:e2:98:08:30:06:94:50:32:8d:9d:a8:67:a8:a2:aa:
18:f3:ed:20:49:ad:26:23:d3:8e:ef:81:55:bb:db:50:a4:b8:
80:1b:a1:3d:78:06:8d:b2:31:9c:e4:b9:1a:14:27:57:fe:55:
8f:65:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:14:44 2026 by rpki-client