
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
File: QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json)
Hash identifier: KhD1cyBp4kE602ol5mtycODMFFTJHjJiiNeQZNWl1bU=
Subject key identifier: 08:A3:18:1B:8A:BB:25:DD:C0:4D:68:58:A1:5B:07:E9:F3:23:EF:53
Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
Certificate issuer: /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Certificate serial: 08D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
Manifest number: 08D0
Signing time: Thu 08 Oct 2026 20:35:25 +0000
Manifest this update: Thu 08 Oct 2026 20:35:25 +0000
Manifest next update: Thu 15 Oct 2026 20:35:25 +0000
Files and hashes: 1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: dcfaogrjTl0c5dVrjUEApqCIqQ6oY480sZD7mLIAf8E=)
2: 6944587246B311F090CDB927C4F9AE02.roa (hash: VJ0PaimdIk1enlfYWOaptRsWi7j1kdYlaW2W2nKmkrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Validity
Not Before: Oct 8 20:35:25 2026 GMT
Not After : Oct 15 20:35:25 2026 GMT
Subject: CN=6ac7fe8d-2b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:63:a8:bb:76:78:0c:fd:a0:0e:65:1f:b7:
c4:8d:35:a8:4b:15:87:41:22:da:0b:9f:c6:64:c8:
ee:21:7f:9f:a7:4c:a6:cf:cf:53:97:6a:91:f9:c0:
6c:72:9c:2b:3d:a6:c0:43:40:ec:87:b4:8f:df:1d:
e5:e9:83:d2:24:b7:38:38:fd:7c:f0:df:bb:22:2d:
c2:b4:f9:35:eb:8d:35:00:87:ad:0a:ba:54:19:d0:
7a:1c:9c:25:e7:9e:ff:04:70:9a:27:48:03:30:30:
e9:ad:7d:dc:15:6a:93:71:77:1c:b0:e4:70:c7:0f:
ca:a1:23:68:ef:a3:5e:32:71:db:83:57:42:a9:72:
ef:3c:9d:01:84:7e:7c:89:ed:bd:38:74:4a:9c:f4:
7d:40:57:ff:70:29:74:3c:b3:78:f7:1d:ca:19:98:
c1:f7:c9:da:fe:c4:79:0f:22:c1:d8:0b:b7:5f:04:
24:3b:95:b7:b8:1d:80:cf:1f:3a:6f:da:a8:a6:d7:
5f:96:1a:05:04:12:d4:e4:e5:33:78:a5:44:89:d7:
92:14:ac:ee:94:d7:d0:92:3e:ee:a6:25:3c:7b:ac:
bd:89:5d:2e:49:42:6d:c5:5d:7d:a0:22:38:ef:dd:
04:9a:0f:fa:4f:ea:db:8e:c9:05:e1:f4:32:96:10:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:18:1B:8A:BB:25:DD:C0:4D:68:58:A1:5B:07:E9:F3:23:EF:53
X509v3 Authority Key Identifier:
keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:39:a2:ca:f8:8e:e2:b3:18:7f:a5:78:90:52:97:53:e6:c9:
e0:fb:0c:c5:1d:6c:f0:23:11:49:ce:35:2e:a3:2d:36:9b:91:
c3:8b:8a:be:0c:6a:a1:94:0f:68:52:18:23:de:a7:50:e2:0e:
c1:f4:87:51:37:08:3d:6e:8a:8b:9f:53:f8:68:00:4d:95:6f:
b6:6a:eb:20:65:3a:96:6d:7c:ed:71:7e:4d:d6:06:11:53:0d:
fe:ed:b7:35:56:11:53:43:7e:8e:cc:e8:98:4c:4c:cf:83:d6:
e5:00:19:43:02:fc:08:65:53:af:22:70:5b:3b:d2:9e:c1:e8:
78:60:ee:c1:f0:b8:bc:51:f9:93:68:9e:0a:0d:8d:30:18:40:
5a:82:32:5f:62:2e:04:53:c5:60:4c:ef:46:64:80:ea:c8:b2:
4c:72:da:21:ea:50:9c:e1:4a:6e:64:3a:82:b3:4e:b5:64:69:
bf:21:d7:03:39:49:e3:48:13:15:2b:eb:0a:83:79:42:7d:98:
5e:1c:a0:bf:4c:c7:77:f1:87:b2:18:96:8b:f3:cf:aa:c0:33:
88:f7:a6:d0:3b:06:24:83:11:0c:76:a0:f4:82:69:85:cb:97:
1b:53:b9:0a:b0:f9:ae:6f:13:f8:23:fe:fc:12:99:03:5a:77:
83:97:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:52:44 2026 by rpki-client