
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json)
Hash identifier: qIB9fYUFqRkVlhfneXnUVVBcwVUfwaCNDH0aPKPCEGI=
Subject key identifier: F6:71:98:E0:39:9B:9E:61:D5:8D:FA:07:67:6B:54:8F:7F:58:5D:4C
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial: 06E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
Manifest number: 06E1
Signing time: Sun 20 Sep 2026 22:06:57 +0000
Manifest this update: Sun 20 Sep 2026 22:06:57 +0000
Manifest next update: Sun 27 Sep 2026 22:06:57 +0000
Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: khu/DVMUgC9Tz9t1x31LwyQQHI/tBukuB4GVY9Dp6TQ=)
2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: fipC8fnuwGfyjeMJXsenerqMyqmtrvp5/f9MWaX5s6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Validity
Not Before: Sep 20 22:06:57 2026 GMT
Not After : Sep 27 22:06:57 2026 GMT
Subject: CN=6ab05901-7711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:41:f1:e2:73:82:82:ec:be:b9:28:17:b2:
e8:79:19:84:32:3e:a5:a1:70:cb:54:74:e8:57:0b:
5e:4d:22:96:d5:c4:b6:db:ad:14:46:59:ac:ff:a7:
02:3b:c8:97:03:20:31:51:98:38:06:cd:75:1b:3c:
e9:6d:e7:b7:ea:0b:1e:0f:8e:44:78:71:dc:b4:f5:
7a:92:fa:b2:ef:c8:ce:f9:52:fd:67:01:0e:26:23:
fa:ff:4c:f0:1b:6a:5b:ac:3a:f4:49:46:a5:6f:25:
0a:0f:02:00:34:75:1a:ae:5d:f7:06:7b:a3:38:0a:
6f:b4:d1:c8:6b:b7:a5:70:c6:29:40:1b:1c:8a:9b:
19:ec:8b:12:98:3d:37:e8:70:ed:35:be:a6:11:e9:
ff:20:c0:b8:04:cb:0f:e4:cc:55:83:b3:a0:24:fe:
36:6e:7f:15:5b:8a:e1:85:2f:92:57:0a:ef:3e:10:
a0:01:43:ce:99:c7:22:84:38:41:bf:81:0e:4a:d1:
bd:54:02:02:7a:07:bd:ca:b7:41:ad:c7:ab:42:de:
62:91:f4:fa:69:82:04:ce:f5:32:68:2b:96:25:46:
43:66:78:0a:d5:27:8c:f0:7c:cc:fa:90:7b:45:f2:
fa:f5:a6:c0:05:a6:67:10:88:63:3c:67:02:94:76:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:98:E0:39:9B:9E:61:D5:8D:FA:07:67:6B:54:8F:7F:58:5D:4C
X509v3 Authority Key Identifier:
keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:07:03:96:16:a5:98:b7:ec:fc:a8:e1:22:e4:77:b6:48:b1:
7d:9c:1c:57:b9:ec:9c:d1:f3:4b:37:51:ba:93:37:8e:f6:cc:
54:6b:ca:cb:54:e7:80:3f:31:fd:20:32:f0:89:5c:d4:58:42:
e7:5a:99:da:04:65:ed:e4:41:cf:54:e6:78:ed:3d:45:a1:8e:
15:7a:94:89:1f:e8:24:1d:be:e9:24:80:a8:79:db:ba:83:d9:
bb:07:36:36:c3:39:08:51:d8:56:5f:96:d3:89:2a:ed:5d:32:
9f:64:65:19:c1:9d:aa:40:59:b0:ea:57:5b:89:e3:78:7f:85:
7a:54:62:50:34:3b:24:3a:55:de:4f:15:67:38:9f:5a:67:43:
3a:38:f6:ba:30:06:92:78:23:ce:0d:0f:20:0b:46:71:ca:c6:
5b:75:6d:34:73:56:6e:c8:c5:a6:9f:a1:bd:9e:35:4b:fc:a4:
73:fb:74:65:1b:84:c3:14:91:3a:59:77:36:db:4e:b1:85:16:
75:e0:28:48:05:26:35:c5:dd:14:33:95:54:d5:a4:24:79:36:
a5:09:8a:40:bc:d8:6e:b1:eb:dd:33:29:3b:66:c5:fa:9b:f1:
18:fc:02:60:ee:57:81:31:3e:b9:15:67:c5:ff:56:b4:61:bf:
95:06:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:06 2026 by rpki-client