
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json)
Hash identifier: 3uB95bUNEinVGN+2TxQwExGU8ZrL8a+/RDChGOD3cXY=
Subject key identifier: 76:90:8E:30:FD:8C:81:42:AF:CA:BB:D8:20:EB:B0:56:E1:8B:62:C3
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial: 0335
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
Manifest number: 032E
Signing time: Wed 23 Sep 2026 00:39:01 +0000
Manifest this update: Wed 23 Sep 2026 00:39:00 +0000
Manifest next update: Wed 30 Sep 2026 00:39:00 +0000
Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: qiS2eosnqQkbvYakkLZWaiSYPK3VvGA6AlK0RLgOBbE=)
2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: 7veWVwTDcJIQiqB140/ZwdfOWsgZaB/7p0PlC1ugVfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Validity
Not Before: Sep 23 00:39:00 2026 GMT
Not After : Sep 30 00:39:00 2026 GMT
Subject: CN=6ab31fa4-17cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:e9:52:54:cb:f5:7e:12:72:4b:b8:ac:e4:
4e:da:46:a6:b3:45:02:b2:39:ff:0a:4f:c5:2d:43:
d1:7a:35:fd:d5:25:94:2f:83:19:cd:63:79:05:d2:
c7:ce:b1:45:ba:54:f6:2b:34:5b:59:b5:52:0c:80:
6e:7a:51:8f:3e:24:40:b8:a7:4a:12:cb:f7:87:81:
8e:0d:6e:25:bd:c7:1e:15:7a:02:1d:91:d0:09:14:
6d:c9:8c:65:4f:8b:69:0e:3b:7f:99:69:dc:6f:29:
61:58:5e:92:d9:a9:16:ec:75:e7:34:6c:bb:0a:db:
cd:b9:16:42:53:a1:e1:19:5d:1f:cd:01:a0:46:90:
8e:0e:b1:1e:78:1f:80:40:00:57:8e:51:d3:ec:77:
ff:23:29:cf:98:96:e7:e2:90:0d:78:e1:e2:7e:6b:
73:7d:27:38:11:5c:71:3b:07:b1:4a:c4:1c:7b:8a:
42:37:fa:74:a9:ad:04:84:56:29:ad:b4:7a:e4:0c:
05:96:03:f9:7e:30:ed:d5:ff:20:28:4f:e3:a3:a4:
c7:ea:00:0c:15:f1:87:e5:83:46:26:d3:f1:c5:12:
c2:b4:27:d0:c0:71:5e:e8:f2:a9:97:92:51:5b:19:
46:17:3e:60:4f:d7:06:3b:73:7c:72:13:d1:7f:3e:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:8E:30:FD:8C:81:42:AF:CA:BB:D8:20:EB:B0:56:E1:8B:62:C3
X509v3 Authority Key Identifier:
keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:c2:85:ba:da:32:32:09:db:00:aa:df:14:e4:32:67:37:
26:8f:1e:10:4f:d9:21:ce:ac:fc:12:3b:d6:d4:c1:dd:f3:49:
65:ac:04:a4:00:a6:22:8d:c4:4f:e8:39:d5:2d:27:ed:34:23:
4a:b3:58:21:cf:d7:e4:b9:e7:06:28:f1:6a:77:09:63:49:56:
a4:ff:8f:fc:e5:fc:7e:97:9d:4c:da:f2:0d:51:ff:77:ad:14:
bd:85:a4:42:08:35:9b:9c:81:cd:f8:1b:7d:a6:ea:74:47:ec:
c9:5b:74:1b:bc:2f:db:d4:7b:a4:c8:92:ce:84:88:37:bc:6a:
83:ea:a8:03:cf:d6:04:78:1a:48:f7:d5:15:59:3d:11:5e:29:
f3:e7:80:18:81:93:12:d5:df:c2:48:1f:56:33:ae:66:bd:f0:
d1:a8:5b:e8:2c:5a:d0:e9:80:98:29:3c:fe:63:02:39:72:ca:
fe:0b:aa:23:87:7a:8f:bc:67:bc:4c:3b:5f:c3:e1:de:cd:c9:
49:c4:aa:97:81:b3:65:5c:54:90:e9:99:19:6d:c8:b0:ea:dd:
41:82:f7:a3:c8:c9:f2:76:2c:ad:41:60:83:53:79:c7:a4:e7:
6e:b3:4d:1b:ae:c3:d1:df:6b:85:13:4a:53:c0:ec:85:bb:09:
3a:c0:f5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:47:30 2026 by rpki-client