
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
File: qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json)
Hash identifier: OzrVgdLAYdkvCcCDjPqp2QwOmc/HTMi16M7vp/EdNH4=
Subject key identifier: 71:BB:F8:44:73:74:D7:60:47:4D:DA:0A:22:75:90:A3:E0:2D:10:83
Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
Certificate issuer: /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
Manifest number: 015A
Signing time: Tue 13 Oct 2026 05:49:57 +0000
Manifest this update: Tue 13 Oct 2026 05:49:57 +0000
Manifest next update: Tue 20 Oct 2026 05:49:57 +0000
Files and hashes: 1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: 7k4MGHxmLsBGUXvbz/xYCyUwvoWr+O2M3WoqI4oHUBM=)
2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: aCExDuGa6YujX3JL0arcNyOR8mwam9J29+GY2ZdNl4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Validity
Not Before: Oct 13 05:49:57 2026 GMT
Not After : Oct 20 05:49:57 2026 GMT
Subject: CN=6acdc685-3ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:6b:0d:ea:f8:fd:5d:b2:10:f6:04:28:e8:
93:ae:93:f8:af:71:fe:d7:cd:8c:5a:79:dd:30:76:
53:91:c3:92:99:87:d6:5c:9c:d9:02:ff:ed:ee:7e:
af:4e:cc:0a:2e:27:f7:5f:43:55:0e:30:04:42:31:
b7:80:4a:b2:6f:6c:e3:fd:73:90:55:b1:a6:98:9b:
8d:08:3a:6f:5a:12:25:bc:fc:3b:56:4b:6d:0f:5e:
29:1b:dc:9f:8b:73:57:9b:f2:9a:1e:f5:2e:0d:11:
5c:c4:90:13:e2:f4:63:5e:5d:97:fc:b1:1e:7a:77:
cb:63:46:74:01:c5:d9:4c:b2:33:d2:f3:a2:48:d1:
31:e3:15:cd:df:0e:46:cf:d7:89:fe:e2:5c:9f:59:
14:37:df:2b:fe:a6:70:07:37:50:6b:a2:17:12:21:
98:24:19:cd:78:39:c4:c6:1f:6f:f8:f5:64:6e:66:
de:d2:ef:c4:f8:de:96:5d:b1:5c:e5:c4:3a:ff:6c:
30:71:5e:ba:e3:1e:73:94:d5:9e:40:8e:8d:89:cb:
39:17:54:7d:ef:a4:59:fe:54:9f:87:be:95:cf:4b:
14:ea:85:c4:65:e1:12:25:05:da:9b:10:10:d8:7f:
43:c7:c6:27:b2:56:15:28:76:c7:8a:6d:76:37:80:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:F8:44:73:74:D7:60:47:4D:DA:0A:22:75:90:A3:E0:2D:10:83
X509v3 Authority Key Identifier:
keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0d:ea:4f:07:74:ca:cc:cc:17:02:0b:10:78:3c:8b:a7:83:
bf:a2:eb:a2:0c:4c:d3:bc:b1:bb:16:37:db:a8:90:01:aa:e5:
74:4e:9c:ff:16:6d:da:f3:6c:c1:1c:c2:aa:4f:a3:2b:50:2e:
34:cc:2d:d2:cc:6a:f5:0b:8d:d3:b8:6f:b1:24:fe:f5:d9:56:
f8:28:1f:aa:79:2f:a0:45:e5:36:4f:e9:dc:e4:e7:1e:be:78:
74:46:85:b8:b2:14:35:bb:ff:79:e9:0d:f7:51:6e:56:76:f5:
79:ad:db:10:46:8f:eb:53:c8:42:46:ba:df:21:ff:6c:71:24:
ed:d8:5f:33:f5:24:b2:d7:bb:bb:6f:73:ae:ca:06:27:3b:47:
e7:be:a2:8a:e4:b8:46:1e:cf:7b:77:8b:65:ee:71:b5:34:cc:
c7:83:68:25:06:39:15:4c:5a:59:5c:2b:d3:c6:5f:3c:6c:4b:
4e:b8:36:0f:c4:a2:a4:7c:4c:9a:5b:10:54:c2:d0:67:4e:ec:
ed:53:86:4b:e7:12:ac:33:77:6f:84:a7:e5:c5:ba:06:40:a7:
dc:51:e4:7f:11:52:25:48:d5:f6:04:36:eb:ac:87:52:73:45:
d4:21:6d:34:38:6e:74:71:4b:98:10:2f:65:40:13:c5:d8:d1:
24:ea:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:13:08 2026 by rpki-client