
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
File: X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft (raw, json)
Hash identifier: FT5o7Eh6DueRNuLIiFU60YJNy0wyBVMnX4utlNIN/UY=
Subject key identifier: F4:FE:0B:EE:82:1A:AC:9A:D0:D5:92:82:AF:23:4C:A9:F1:81:26:4B
Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
Manifest number: 76
Signing time: Tue 13 Oct 2026 08:35:08 +0000
Manifest this update: Tue 13 Oct 2026 08:35:08 +0000
Manifest next update: Tue 20 Oct 2026 08:35:08 +0000
Files and hashes: 1: X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl (hash: NToYicwyYC4CQa0JIploSyo78FUdRasymogwkFxM6/A=)
2: B1AC59CA17B911F18117E782383D8C67.roa (hash: +NS4dIto6+EmYFB1YZFztX1H1Dxs72FShVzE38yw9hI=)
3: 58EB7FEA17BA11F192FEB12A393D8C67.roa (hash: 5nbX1XIJNdumuOJIpAiDvH+g4m9L4W7smTojDdZZ4A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Validity
Not Before: Oct 13 08:35:08 2026 GMT
Not After : Oct 20 08:35:08 2026 GMT
Subject: CN=6acded3c-25f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:34:c1:89:e0:de:e7:30:96:ca:23:a9:19:
ec:1f:1a:7a:70:bd:a8:da:e1:d5:05:18:a2:9d:94:
19:04:97:65:1c:99:24:68:23:c7:65:d0:6b:7f:49:
75:a2:49:f7:ad:83:5d:de:4e:d3:fe:90:b4:35:76:
5d:3d:f2:90:0b:c5:63:1f:37:fc:55:13:80:f2:7f:
33:f9:1d:5a:c5:b7:b9:ab:f8:11:34:c4:7a:a7:e5:
b8:31:3f:30:32:f8:d3:23:3b:b8:32:b3:81:de:9d:
da:d0:40:0f:78:21:f6:63:a6:ad:77:30:7c:b1:ba:
e1:b4:08:9a:7a:2e:a7:37:8c:d4:f8:d7:22:b1:8a:
81:9a:04:10:2a:8c:f5:00:00:46:e3:0b:03:da:25:
29:15:6d:b3:75:bb:b3:24:ca:27:3f:34:a7:3f:95:
6d:23:82:34:7c:23:cc:09:86:57:13:2e:2c:a9:da:
e2:ed:17:ce:22:21:f4:d5:15:dc:77:cd:0a:bb:66:
fe:c0:bb:74:ec:2f:89:cb:6a:2a:ab:22:18:0e:08:
7d:49:6a:1d:a9:b9:7c:fa:4b:01:e7:9d:5c:51:6d:
66:cc:ac:a8:37:2d:e7:6b:d6:15:cb:12:84:43:30:
a9:76:65:40:4b:80:bc:d0:34:96:c6:48:00:42:5f:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FE:0B:EE:82:1A:AC:9A:D0:D5:92:82:AF:23:4C:A9:F1:81:26:4B
X509v3 Authority Key Identifier:
keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9c:16:ee:62:51:02:81:eb:7e:ca:51:0d:de:9f:cb:97:0b:
66:2a:88:da:91:f6:c5:87:46:92:4d:03:e1:ff:49:1a:c6:ed:
a5:84:a2:5d:13:99:e0:c7:6d:88:40:85:d5:16:dd:5f:cd:a2:
bd:93:c9:8f:aa:06:43:49:3b:8f:0a:1f:40:82:56:ab:67:4c:
d8:26:2f:74:d6:30:58:76:f2:a2:e7:3e:63:4b:45:69:d3:d8:
d6:e8:89:e9:e2:9f:e2:f6:d9:f0:b5:5b:ad:06:e0:e2:ea:a1:
af:a9:c4:41:7e:e6:3f:1d:c1:c1:cd:4d:c4:78:3b:f0:24:41:
cb:cb:86:b8:04:32:dd:c1:25:97:c7:c3:fb:36:3b:1f:6f:bc:
43:db:7c:e0:65:5d:91:b2:e7:00:61:72:a4:75:58:5e:96:06:
f1:54:17:a8:ea:11:ca:e1:98:48:6e:f5:7d:b2:2a:00:7c:08:
bc:3e:13:63:62:c1:7b:ef:a8:4f:b8:63:4c:95:ee:ef:b1:c1:
d4:9c:4f:3c:5d:14:d2:ac:17:e6:db:f4:73:f1:38:88:d8:33:
cb:83:b1:9e:02:f1:7f:c2:f0:c1:0d:3a:e2:99:28:af:32:5a:
1f:49:01:e3:c3:7e:cf:a4:5a:72:87:ef:2c:fc:63:16:b7:ec:
d2:d4:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:44:56 2026 by rpki-client