
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier: s154DVMBdooc/hHdL6+dz9A2DDcOfxaDHMM9PCMIDIM=
Subject key identifier: 98:96:0F:23:DE:B4:E9:6E:8A:3F:4B:33:49:2C:0C:4B:92:56:3A:05
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number: 0220
Signing time: Sun 11 Oct 2026 03:19:24 +0000
Manifest this update: Sun 11 Oct 2026 03:19:24 +0000
Manifest next update: Sun 18 Oct 2026 03:19:24 +0000
Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: 1GNJPrHJ0C2eqykX5NGXgmHKhYJvYHvjY59FoWB3KfQ=)
2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 03:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Validity
Not Before: Oct 11 03:19:24 2026 GMT
Not After : Oct 18 03:19:24 2026 GMT
Subject: CN=6acb003c-3333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:41:c7:e6:68:5c:b8:14:63:50:63:09:a4:
f7:77:3b:12:d9:ec:a4:d2:dc:7b:bd:f0:1a:05:5c:
9d:2b:39:b0:ec:36:56:d7:89:63:6a:83:19:1c:ad:
79:43:8f:a2:12:31:fa:85:91:aa:23:b1:e9:a0:0f:
91:ec:06:d9:1d:2c:a6:8c:e8:f9:29:bd:73:6b:a5:
d3:7a:c4:46:a6:e0:86:79:b8:75:4f:fa:ff:2e:e7:
3e:8a:c4:14:8b:5d:11:09:1e:37:67:10:2c:de:e3:
47:a1:7a:c8:57:11:d6:9f:94:f2:7a:50:6a:0f:8a:
b0:df:a9:09:16:53:a8:10:51:0d:02:95:36:17:68:
ac:e6:f5:03:ce:3d:90:e9:75:2d:6b:42:8c:cb:d0:
e1:45:5c:8e:fe:5c:27:03:ed:e3:6f:ff:a0:ed:4c:
55:fd:74:c1:83:7f:20:50:7c:2d:43:53:24:46:16:
2e:3c:90:34:7d:c5:c3:d2:48:b0:93:c7:49:44:72:
1d:dc:11:08:27:fc:70:bd:2e:10:66:d8:85:7d:79:
4d:8e:56:cf:76:72:e0:f4:c3:f9:a9:91:d5:1a:6a:
66:17:25:82:b4:79:b1:05:b0:54:cc:53:b7:4a:ec:
79:b7:42:c6:5a:4a:07:1a:18:0c:42:5c:bf:bc:b1:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:0F:23:DE:B4:E9:6E:8A:3F:4B:33:49:2C:0C:4B:92:56:3A:05
X509v3 Authority Key Identifier:
keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:72:d7:67:82:03:13:94:75:ed:12:1b:8a:8d:88:ba:74:d9:
0b:1f:75:67:d9:ac:07:d1:16:c1:8a:18:b9:cc:d4:cb:a4:16:
79:4f:a8:b7:1c:d8:ce:cd:08:d1:53:a8:4f:a0:90:a7:a0:6d:
67:cc:2b:e8:6a:67:a1:22:c3:4d:f3:5f:e6:02:73:c7:db:55:
cb:0a:2c:08:9e:8c:ee:42:1b:ac:c1:bb:56:d8:26:c2:9c:5f:
4c:61:01:62:b6:72:d9:80:5e:97:8d:cf:a9:2b:7e:0e:d0:98:
0b:ca:65:7e:61:54:2d:fd:e7:d5:70:2d:42:cd:7d:25:6e:ab:
a5:92:a6:64:db:fb:72:33:da:62:df:c3:4e:ab:a7:d0:98:fb:
24:51:1c:32:aa:cb:6a:8a:24:33:45:8d:3d:18:30:c1:16:29:
82:4a:52:61:14:97:e7:2b:fb:42:06:55:9d:fa:8d:b7:84:4c:
66:30:cc:78:4e:87:6d:b2:f1:f0:17:f1:33:0f:ff:98:de:37:
9c:ff:04:69:7d:ab:f4:45:2a:67:ab:56:54:95:38:9a:69:47:
08:ff:f7:81:9e:b5:eb:13:e0:3b:e3:03:37:ab:3b:a7:ce:3f:
ae:3f:95:4d:84:c2:d7:54:ed:e6:0d:ee:02:26:86:d4:63:79:
64:c3:89:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:21:53 2026 by rpki-client