
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
File: QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json)
Hash identifier: 7CJuuh70PVDxjRhOCfzRf4QZNZqHdTsy9pBX7sjtDpM=
Subject key identifier: 75:C1:95:E3:9F:DE:A3:D2:4C:87:FA:2C:FA:6B:97:18:21:03:EB:3B
Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
Manifest number: 0154
Signing time: Mon 21 Sep 2026 05:16:21 +0000
Manifest this update: Mon 21 Sep 2026 05:16:20 +0000
Manifest next update: Mon 28 Sep 2026 05:16:20 +0000
Files and hashes: 1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: n2vK5feOAbfrvi+PWihqDrp2Mw6Ol+QEVKNavL4jK54=)
2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: X9jpiXNF6OhTo/yBL+rWyn/9IGUFR3BsO1wY0JKMT4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Validity
Not Before: Sep 21 05:16:20 2026 GMT
Not After : Sep 28 05:16:20 2026 GMT
Subject: CN=6ab0bda5-bdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:2a:d0:53:65:ff:2c:25:a7:43:eb:92:42:
c7:eb:66:c8:44:19:90:04:56:7a:eb:b0:64:f9:36:
6a:61:ef:6c:dd:bd:f5:e0:7f:1e:1c:d0:7b:ea:ce:
61:60:6e:77:92:5f:3d:33:47:23:55:89:d1:e5:97:
4d:a9:bf:e6:73:ed:58:3a:22:af:36:1e:e6:1c:13:
39:f0:39:38:0d:38:b2:18:94:d5:46:d7:42:e6:bd:
cd:4e:1e:60:5e:a6:ba:ec:ce:29:2a:c9:bb:be:8b:
21:ac:c8:c8:5e:e8:9a:44:fd:c6:f1:97:fe:50:7c:
e2:b8:9b:cd:35:aa:db:ca:2f:54:52:b4:f9:f9:76:
e6:95:96:0b:8c:c3:28:29:17:b8:49:df:c6:51:96:
31:38:76:1c:79:37:75:bb:35:13:d7:a2:4c:64:01:
27:a3:84:af:5f:ad:5b:76:37:30:3a:ad:37:05:75:
a8:ed:46:6b:be:25:2e:b6:1b:39:1d:6e:c2:61:94:
b3:b0:e5:01:60:0c:aa:b5:00:17:37:6e:07:02:6b:
17:33:ae:64:31:3e:fc:b7:25:42:7f:86:c9:90:ae:
0b:f0:17:7c:4d:46:a7:25:0c:71:84:a0:67:5f:40:
61:17:0b:9c:53:e3:81:60:f7:2a:3e:57:f9:7c:2d:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:95:E3:9F:DE:A3:D2:4C:87:FA:2C:FA:6B:97:18:21:03:EB:3B
X509v3 Authority Key Identifier:
keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c3:f1:58:03:4d:34:27:20:6d:2e:3b:14:54:13:32:f9:84:
6b:0f:c0:08:41:b8:59:d7:65:86:33:9d:21:b1:04:4b:bc:88:
d4:4d:17:f0:b4:67:02:23:ef:c1:63:e1:0e:78:87:06:3d:0e:
75:b2:e0:ad:3e:c8:5b:3b:d3:dc:92:03:ae:89:fe:de:84:b1:
10:96:fc:1c:1d:d3:c8:d8:03:b6:6a:e2:5c:d1:38:d3:31:3c:
ea:63:b8:8a:c7:ea:2a:3f:68:b2:41:4f:69:f9:8b:22:ce:d9:
b9:fe:c2:a6:59:11:7e:a1:7a:22:c7:51:f8:d5:8d:52:45:63:
f4:d1:c4:c0:49:f5:6f:ac:9b:b7:be:43:4e:1c:20:09:f4:62:
ee:30:c7:51:8c:71:02:a5:ce:69:d9:15:0c:d0:90:05:cc:e2:
7b:be:04:d2:2f:f5:df:2f:cf:67:84:e3:f5:ce:b3:bb:2a:56:
1d:c9:76:9c:9e:e4:47:f0:8f:fc:d0:4d:ab:d0:89:82:28:eb:
9f:f0:d4:24:37:d8:79:9c:01:bb:20:02:85:8d:4b:8a:26:fd:
eb:5c:c4:69:b1:9a:aa:f5:40:35:c2:ad:02:d0:81:95:e7:98:
b4:48:5e:2d:50:86:1b:6b:ae:8e:e2:c5:6f:7e:3a:dc:95:a0:
83:c2:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:25:47 2026 by rpki-client