
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
File: qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json)
Hash identifier: XbXfR/koDV8vkvczMFxecG1jLpkeTxAIoFH5DX5RWpY=
Subject key identifier: EC:CB:D3:CC:C0:6B:0A:11:43:E2:E9:0C:A8:D2:B2:7F:4C:10:8A:38
Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
Certificate issuer: /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
Manifest number: 4F
Signing time: Sun 11 Oct 2026 08:56:22 +0000
Manifest this update: Sun 11 Oct 2026 08:56:22 +0000
Manifest next update: Sun 18 Oct 2026 08:56:22 +0000
Files and hashes: 1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: luL0O6Ny98p8Th2O3FdC1npwttG6ZAjPHWHGzwny7oQ=)
2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Validity
Not Before: Oct 11 08:56:22 2026 GMT
Not After : Oct 18 08:56:22 2026 GMT
Subject: CN=6acb4f36-7a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:d2:e9:71:c8:6d:df:9a:d5:15:8c:11:35:
cc:8d:f4:8e:98:a4:ce:8d:ec:c8:5f:52:29:85:42:
5a:0d:7a:40:ac:63:82:95:7c:eb:4d:fe:ca:52:4b:
38:f3:1d:f6:46:61:cc:8a:86:88:fd:51:d9:f2:f1:
91:17:69:ce:92:ef:a1:88:0d:99:f6:b5:fa:06:91:
5a:4a:84:88:4d:28:7e:10:66:8f:b5:2f:cc:af:5b:
bf:86:f0:c1:29:b6:88:bc:9e:30:5d:a0:b8:1c:df:
32:b1:40:af:01:ec:7c:29:f6:37:21:fd:e6:59:38:
d7:f7:2c:fb:df:17:8c:57:06:7a:81:7f:e4:9f:43:
79:e7:6f:5f:6a:9d:fd:40:66:ee:30:ae:6e:49:cf:
17:3c:46:9d:04:a2:d0:2b:8d:02:0e:26:5d:ef:2b:
d4:94:2d:82:f7:f1:44:94:ea:95:fc:41:13:8d:92:
73:78:99:a0:62:86:25:5c:3e:a0:8a:b7:16:f2:b7:
d0:0d:b3:0c:26:5c:e3:7d:b2:27:82:bb:8d:5c:ea:
c7:2f:c3:6d:0c:08:d6:cd:51:39:7e:e5:1c:e6:72:
92:93:44:32:d3:95:42:03:db:d1:ad:d4:83:44:a2:
26:e2:83:28:71:17:64:d2:37:47:78:b7:d3:13:49:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:D3:CC:C0:6B:0A:11:43:E2:E9:0C:A8:D2:B2:7F:4C:10:8A:38
X509v3 Authority Key Identifier:
keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:a1:d9:a3:9b:17:ee:e7:ce:bf:f4:2c:c7:41:fa:1e:fc:
e8:6e:76:2c:d6:29:6e:7e:d5:ba:4c:ab:cb:ca:37:05:cf:e4:
ac:3e:1b:3f:da:e3:10:98:20:36:fd:cf:c7:57:00:ca:a4:fc:
c1:19:75:52:87:3f:aa:05:96:12:1e:9f:76:7b:4e:53:89:a4:
ad:2a:6d:4b:3e:5c:61:b5:1a:38:38:66:06:82:f9:06:8c:08:
eb:bb:c3:20:57:fa:52:5a:e1:12:71:3a:6a:8f:fe:bc:7c:22:
43:3f:74:83:a9:bd:f6:6b:4e:83:e8:2e:d3:dd:6f:18:05:44:
10:69:89:f5:f4:a7:9d:96:25:de:e6:b4:7f:21:90:91:81:03:
76:59:69:32:8c:18:dc:3b:cf:e4:d8:8d:92:86:99:fe:7a:10:
c8:74:3b:64:46:00:d2:fc:90:82:15:e0:df:5b:8c:7d:23:83:
43:24:91:ee:e5:da:95:79:05:69:6b:db:e1:aa:54:f5:5a:a7:
1d:50:19:5b:a3:7b:ab:b6:ca:2b:5d:ad:03:b4:9e:7b:a1:e1:
45:a1:d7:e1:3a:b7:22:cb:c0:ae:a6:85:7d:92:a9:0c:77:4d:
b2:cb:6f:41:b9:24:e2:88:4b:60:7e:17:a0:5b:44:04:ff:67:
63:20:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:46:04 2026 by rpki-client