
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
File: qkPN2PNDwbXd5ZFqct92iMqueoE.mft (raw, json)
Hash identifier: N5VDfjtHAxgnuvzpnVeIFiXF5GWWnLLk+T1M2AUsrEU=
Subject key identifier: 92:11:98:38:29:8A:88:C7:F1:05:B5:FA:E6:49:3E:00:24:8A:1E:80
Authority key identifier: AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81
Certificate issuer: /CN=A913F772/serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
Manifest number: 25
Signing time: Mon 21 Sep 2026 08:49:14 +0000
Manifest this update: Mon 21 Sep 2026 08:49:14 +0000
Manifest next update: Mon 28 Sep 2026 08:49:14 +0000
Files and hashes: 1: qkPN2PNDwbXd5ZFqct92iMqueoE.crl (hash: acJarxoyKaYE/RGt46vC0/sJoOlMXExBsHi0gYCZZWo=)
2: 4FCEA4DEAB7411F1AEAF1A494011F970.roa (hash: k0ikLn1bTTuiT/l3ng6w+BqXHzkn74K1k/UHZrJqSe4=)
3: E907651696E111F1834D6D3B5C11F970.roa (hash: Au6HFeuLwHhTmvCTCnA87u9C1lgzZm77myw4Ir5SR88=)
4: 7A8B7F78AB7211F1A5F72F244011F970.roa (hash: CuH0XNKafF/9BTVwY8dM+Xd/rd/WtV5cKIRzyQS3nLA=)
5: C1C00A1284DA11F1A36DC6415BA30FBC.roa (hash: Nmcq4UHe3DrUnvTS7pPr090KNaayVFKp/fB14Rol1gw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl
rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F772, serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
Validity
Not Before: Sep 21 08:49:14 2026 GMT
Not After : Sep 28 08:49:14 2026 GMT
Subject: CN=6ab0ef8a-8f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:2f:7a:9c:1b:e5:6e:d2:87:de:37:db:15:
75:92:ee:d8:bc:e2:cb:51:d9:cb:90:87:59:5e:10:
62:4a:82:3f:89:e4:ea:53:bb:f9:68:ca:39:8f:bf:
92:be:ab:ac:b2:fe:75:98:b8:09:47:a7:0f:a4:d7:
95:c0:d3:0d:7b:50:a0:c4:d7:84:2f:82:7f:d3:0e:
15:1a:5a:50:b5:13:2a:3f:5e:9d:fe:2d:3b:a8:6a:
15:eb:69:6b:52:fa:28:90:9b:4d:35:cf:41:70:01:
cd:a7:79:b0:cc:6c:97:e3:4f:ba:15:90:99:5a:56:
06:10:83:66:cd:1a:e2:39:b4:cd:99:80:86:30:dd:
fd:86:b4:0c:33:ad:d1:e4:1e:82:8d:bf:d1:92:7f:
4b:b5:cb:56:c6:75:8e:94:1a:23:92:a7:5c:9d:66:
81:23:38:c5:ad:a4:a2:4a:97:5a:e3:55:3d:77:1d:
41:25:8c:20:d1:8c:84:29:60:3a:5e:e6:f3:8d:09:
dd:4e:e7:52:ee:17:4a:ac:c9:8f:71:dd:6b:fe:42:
55:ce:9f:2f:34:bf:09:3b:ac:b0:d4:4c:ee:21:28:
c9:76:76:5e:46:0e:6f:56:8f:d9:91:48:07:af:6b:
bf:ef:60:8f:16:0c:41:c3:b0:40:45:6a:4f:c7:48:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:98:38:29:8A:88:C7:F1:05:B5:FA:E6:49:3E:00:24:8A:1E:80
X509v3 Authority Key Identifier:
keyid:AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:37:dd:b7:2f:3b:af:52:22:ef:68:81:b0:99:50:53:66:e0:
9d:c0:c3:3c:a4:24:24:9b:3f:23:7c:c0:77:4a:d5:2b:8c:6c:
23:c3:97:74:d2:be:df:7e:c7:c1:07:31:4b:4f:56:f9:f3:c0:
59:8a:7d:9c:eb:02:9e:c3:de:38:a5:45:77:58:e2:13:86:4c:
27:11:b3:92:24:73:f0:9a:ac:66:bc:d8:c3:48:4a:43:ee:2a:
58:ed:a0:2d:74:b1:74:e6:56:d6:f9:e4:d1:47:5c:99:a2:32:
05:45:f4:14:88:cd:dc:b9:55:1c:21:f3:ec:e3:29:7d:11:4e:
1a:16:fe:ee:b4:39:ab:d8:b7:ab:d1:b7:b2:32:df:9f:e7:7e:
ab:ee:d6:fd:e0:23:12:fd:fe:ed:20:17:fa:c3:27:79:07:06:
47:e4:a9:c0:25:75:83:6a:a4:6a:b7:f5:c0:90:ef:9a:b3:3b:
a2:23:1c:77:ab:fd:1e:5e:38:1a:fc:be:80:e8:45:e3:eb:99:
c5:60:fa:d9:7c:f4:14:2a:8d:21:ed:82:18:b9:49:bd:41:83:
ff:4a:f6:41:eb:16:bc:1b:fb:ab:9f:91:57:51:18:18:f6:e8:
0e:4d:0f:df:0b:f3:55:f6:9b:84:ef:c8:26:9e:17:62:98:2b:
07:e2:5e:b8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Rjc3MjExMC8GA1UEBRMoQUE0M0NERDhGMzQzQzFCNURERTU5MTZBNzJERjc2ODhD
QUFFN0E4MTAeFw0yNjA5MjEwODQ5MTRaFw0yNjA5MjgwODQ5MTRaMBgxFjAUBgNV
BAMTDTZhYjBlZjhhLThmNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDl5y96nBvlbtKH3jfbFXWS7ti84stR2cuQh1leEGJKgj+J5OpTu/loyjmPv5K+
q6yy/nWYuAlHpw+k15XA0w17UKDE14Qvgn/TDhUaWlC1Eyo/Xp3+LTuoahXraWtS
+iiQm001z0FwAc2nebDMbJfjT7oVkJlaVgYQg2bNGuI5tM2ZgIYw3f2GtAwzrdHk
HoKNv9GSf0u1y1bGdY6UGiOSp1ydZoEjOMWtpKJKl1rjVT13HUEljCDRjIQpYDpe
5vONCd1O51LuF0qsyY9x3Wv+QlXOny80vwk7rLDUTO4hKMl2dl5GDm9Wj9mRSAev
a7/vYI8WDEHDsEBFak/HSM45AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkhGYOCmK
iMfxBbX65kk+ACSKHoAwHwYDVR0jBBgwFoAUqkPN2PNDwbXd5ZFqct92iMqueoEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGNzcyL0QwMDNDQzg4ODRE
MjExRjFCNjYzNjA2QzU5QTMwRkJDL3FrUE4yUE5Ed2JYZDVaRnFjdDkyaU1xdWVv
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcWtQTjJQTkR3YlhkNVpGcWN0OTJpTXF1ZW9FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG
NzcyL0QwMDNDQzg4ODREMjExRjFCNjYzNjA2QzU5QTMwRkJDL3FrUE4yUE5Ed2JY
ZDVaRnFjdDkyaU1xdWVvRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+N923LzuvUiLvaIGwmVBTZuCdwMM8pCQkmz8jfMB3StUrjGwjw5d00r7ffsfB
BzFLT1b588BZin2c6wKew944pUV3WOIThkwnEbOSJHPwmqxmvNjDSEpD7ipY7aAt
dLF05lbW+eTRR1yZojIFRfQUiM3cuVUcIfPs4yl9EU4aFv7utDmr2Ler0beyMt+f
536r7tb94CMS/f7tIBf6wyd5BwZH5KnAJXWDaqRqt/XAkO+aszuiIxx3q/0eXjga
/L6A6EXj65nFYPrZfPQUKo0h7YIYuUm9QYP/SvZB6xa8G/urn5FXURgY9ugOTQ/f
C/NV9puE78gmnhdimCsH4l64
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:10:46 2026 by rpki-client