
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json)
Hash identifier: NClf8tO1uDpp5EkakMp5H32rx6LQRQU4vMVKWpb2GkI=
Subject key identifier: 75:38:72:BA:FC:AE:C0:5D:23:33:E0:8B:F8:BF:FF:10:69:52:B3:24
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 0887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
Manifest number: 0832
Signing time: Sun 20 Sep 2026 21:17:45 +0000
Manifest this update: Sun 20 Sep 2026 21:17:45 +0000
Manifest next update: Sun 27 Sep 2026 21:17:45 +0000
Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: NvXF/KnUMl2r4AWp+UCVeSBV9uCSGEcGhLBbHbkM6Jk=)
2: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: yqzH+VRJDdIn8v1i8jejnoTV03RvjOrdo0NsV1Hhxj0=)
3: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: LJbta/JJVJ23WgZ0akF5Ov55pEZeCXuRcU1xDJv2re0=)
4: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: R34hnb67EtA7MxdkNi5WSU1aixEiNDr681Fh+Yd4Kag=)
5: 8BF305A2F44711F0849EF3E6616F56BC.roa (hash: 8FXTDQ3pdrB9lI0tc6cwlsOBLuq+7Ubnrq4d6bTJfQo=)
6: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: iWVOHg6QDBIqMpA3MO5LObP6AHCPSfyjRAL55UZ4G0g=)
7: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: QGlHH+ju7tlOXYuuHHLFlLqQaIyiEhbULfPuUxMjGXg=)
8: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Sep 20 21:17:45 2026 GMT
Not After : Sep 27 21:17:45 2026 GMT
Subject: CN=6ab04d79-88cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:d3:da:ba:2e:40:44:06:f0:f3:ea:db:ef:
ca:40:c9:74:52:20:61:33:22:00:eb:90:9a:57:e0:
7c:0d:68:e2:22:6a:5a:0c:4f:e2:f4:99:c7:88:ec:
ed:31:14:ae:3d:63:92:aa:37:96:f1:ae:a3:68:db:
c6:31:57:dd:35:aa:99:40:69:59:6b:5a:86:95:c0:
c5:18:b1:96:93:65:b4:47:e1:3f:4f:ac:0b:8b:9c:
cf:19:7f:f4:1f:94:a6:dd:c7:2c:28:90:c0:5c:33:
e1:21:19:af:a5:71:26:41:fd:a5:be:17:9c:56:75:
2b:d6:02:3b:dc:c2:91:bc:fa:b8:d8:43:7e:cf:c1:
4e:b1:66:ac:9d:9d:62:d7:65:92:dd:9a:ab:28:fe:
2d:88:39:c7:0e:fd:91:e8:63:38:fc:b7:f3:72:3c:
8a:37:cb:71:b2:ec:32:83:58:91:d6:30:94:0b:0d:
08:19:10:cd:9a:9b:26:c1:47:95:9c:71:c4:ab:df:
3c:4d:27:17:7a:85:c0:e5:c1:18:c3:91:b6:53:23:
5f:b1:4a:25:a5:dc:19:f0:30:49:5e:a9:a5:c7:a6:
9f:b8:1c:2f:52:1e:2e:a1:38:a1:81:14:ae:db:41:
58:9a:39:34:ad:26:22:32:29:44:c1:67:d6:8a:8e:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:72:BA:FC:AE:C0:5D:23:33:E0:8B:F8:BF:FF:10:69:52:B3:24
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:4b:40:83:95:01:61:c4:03:1f:71:e9:20:f6:16:00:f5:83:
a1:a4:8e:43:59:ba:99:6d:2f:a2:fa:88:d3:9c:f5:ef:08:95:
ac:75:b6:21:77:dd:01:ad:87:d7:9b:92:15:48:36:f1:f0:cb:
79:0d:97:04:19:8e:f3:1a:41:d3:b3:60:b3:fa:84:52:c4:be:
46:18:7a:32:08:72:ae:fd:77:d1:b7:1e:17:ba:14:f0:b7:e4:
84:d0:a9:ee:4c:ab:c9:84:30:5e:a0:5e:c1:47:9a:b1:d5:55:
07:95:c5:40:45:37:9f:ee:43:98:49:2e:1c:76:6f:92:4c:1e:
e7:01:b0:84:f7:73:8d:2b:6b:7b:16:3a:58:6c:5a:b0:77:2d:
60:60:75:ef:d2:73:32:da:b8:de:45:e1:19:05:20:68:4f:45:
a2:75:74:41:f3:91:9d:ad:62:a5:eb:29:0c:bc:25:55:ff:62:
4d:f7:b5:89:00:9f:b8:9f:d4:35:2c:eb:1e:1e:1a:00:c2:90:
a3:6f:fc:ab:28:3f:1f:ca:e9:c7:14:8b:ec:33:1b:85:79:a0:
2c:2c:2d:16:f0:60:b6:74:1f:25:11:60:5d:f2:e7:15:e7:56:
2d:51:28:3d:81:aa:38:8d:a9:f0:85:58:0e:14:00:60:ef:84:
77:5d:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:01 2026 by rpki-client