
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json)
Hash identifier: ko2bjuwyUaBoSjEpQ8McKrF7QhYAfQXawoy7yoe0SRA=
Subject key identifier: 32:A3:C6:8E:AC:55:30:E2:A4:5B:59:0E:1A:F9:16:CE:5B:09:78:EA
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial: 0BC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
Manifest number: 0BB5
Signing time: Sat 24 Oct 2026 19:04:24 +0000
Manifest this update: Sat 24 Oct 2026 19:04:23 +0000
Manifest next update: Sat 31 Oct 2026 19:04:23 +0000
Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: jU4bhGbU6e/3HR5ty/2cg1YALC60KBINTzCnggxAHBM=)
2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: o6fRayD/nqN2dEBUcuypm1nutFG8wp7LbMA0ZmrlfaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 19:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3015 (0xbc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Validity
Not Before: Oct 24 19:04:23 2026 GMT
Not After : Oct 31 19:04:23 2026 GMT
Subject: CN=6add0138-d3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:da:67:98:d0:9c:d4:1d:47:14:d5:d9:74:
cc:3c:64:44:0e:4f:34:bd:5a:96:56:ba:23:36:cc:
65:da:6f:b0:e4:f2:51:9b:93:ff:5d:ae:b8:ff:7a:
1a:aa:be:5e:6a:e9:1d:e6:7a:04:0d:14:c0:dd:df:
9a:ae:ee:c1:28:0d:50:d8:78:a4:29:cd:d6:b0:b1:
a1:c3:d8:78:16:f5:7f:d2:22:56:a9:52:ab:f8:36:
2f:44:b0:c9:2b:c4:ef:66:22:5c:9e:02:7e:11:34:
dc:b8:a0:33:ec:75:84:20:ec:33:23:88:e5:b7:4f:
0c:e9:f7:dc:4b:fd:32:b2:09:79:aa:a0:91:e2:c7:
a4:5f:0b:c4:b8:fe:52:ef:1e:97:8e:66:44:83:58:
93:f9:a8:d7:e6:b9:09:cd:99:58:73:ca:05:ef:2e:
48:07:4b:2d:44:31:9c:d7:21:20:a3:fb:1a:3a:2b:
7f:6b:3d:56:0f:61:b4:bc:c1:3c:3f:89:79:9c:83:
7d:6f:06:17:96:c0:f1:59:37:37:21:7b:db:27:7f:
a6:1e:be:94:52:74:2c:fd:65:ff:ab:1e:92:9d:d6:
32:7f:e9:1b:8c:8f:ee:de:3f:f2:fc:30:05:1b:87:
b8:7a:e8:28:17:49:f8:de:e0:d1:96:da:09:1a:82:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:C6:8E:AC:55:30:E2:A4:5B:59:0E:1A:F9:16:CE:5B:09:78:EA
X509v3 Authority Key Identifier:
keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cf:9e:7c:50:15:18:c9:62:8a:e0:08:b1:03:5e:7a:63:47:
95:06:03:93:df:6d:77:1e:ff:24:a1:ab:28:b1:9e:ac:fa:27:
54:9f:c5:bc:64:ba:60:17:31:99:6c:5f:00:28:67:c9:1b:a5:
d3:2d:6d:5b:ec:2c:80:10:b4:2f:5d:c0:2f:d2:76:01:49:c3:
0c:7e:12:c2:46:1c:9c:98:59:2c:3d:2e:7c:15:1a:c2:8d:e7:
1f:91:5f:56:6d:c4:59:f6:d4:3e:c2:8b:62:70:df:e0:03:eb:
2c:5e:40:cb:2c:27:2f:bc:8e:9f:f8:b1:6b:2d:c4:76:48:86:
07:9d:01:11:0f:af:61:ea:49:52:b7:e5:a8:1c:d8:7d:1f:31:
ae:b2:94:ab:8b:27:66:29:2e:5b:25:f7:4d:1e:ee:e9:e6:d4:
f9:9e:56:c7:97:9e:91:29:4f:0a:6f:41:6e:1a:73:d1:a5:52:
23:44:e6:5a:7c:41:e6:4b:eb:ac:9a:11:e6:70:7d:ae:30:c0:
e9:85:fd:00:ac:60:9c:cd:d8:16:2e:fc:25:fe:0b:ea:de:af:
7b:01:b0:9a:c1:a7:18:51:c2:47:f8:47:6b:0a:e7:12:fc:3d:
6d:aa:e5:84:02:25:d7:ae:3d:6e:e8:d4:49:00:0a:62:09:83:
da:ce:a4:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2
QTQyMjBGRDAwHhcNMjYxMDI0MTkwNDIzWhcNMjYxMDMxMTkwNDIzWjAYMRYwFAYD
VQQDEw02YWRkMDEzOC1kM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA18baZ5jQnNQdRxTV2XTMPGREDk80vVqWVrojNsxl2m+w5PJRm5P/Xa64/3oa
qr5eaukd5noEDRTA3d+aru7BKA1Q2HikKc3WsLGhw9h4FvV/0iJWqVKr+DYvRLDJ
K8TvZiJcngJ+ETTcuKAz7HWEIOwzI4jlt08M6ffcS/0ysgl5qqCR4sekXwvEuP5S
7x6XjmZEg1iT+ajX5rkJzZlYc8oF7y5IB0stRDGc1yEgo/saOit/az1WD2G0vME8
P4l5nIN9bwYXlsDxWTc3IXvbJ3+mHr6UUnQs/WX/qx6SndYyf+kbjI/u3j/y/DAF
G4e4eugoF0n43uDRltoJGoI+/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKjxo6s
VTDipFtZDhr5Fs5bCXjqMB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3
QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi
VzZOWXlrQnUyV0pxUWlEOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP8+efFAVGMliiuAIsQNeemNHlQYDk99tdx7/JKGrKLGerPonVJ/FvGS6YBcx
mWxfAChnyRul0y1tW+wsgBC0L13AL9J2AUnDDH4SwkYcnJhZLD0ufBUawo3nH5Ff
Vm3EWfbUPsKLYnDf4APrLF5AyywnL7yOn/ixay3EdkiGB50BEQ+vYepJUrflqBzY
fR8xrrKUq4snZikuWyX3TR7u6ebU+Z5Wx5eekSlPCm9Bbhpz0aVSI0TmWnxB5kvr
rJoR5nB9rjDA6YX9AKxgnM3YFi78Jf4L6t6vewGwmsGnGFHCR/hHawrnEvw9barl
hAIl1649bujUSQAKYgmD2s6kYA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:37:06 2026 by rpki-client