
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
File: Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json)
Hash identifier: zNCCjIf//aR5rDvVswKx/TycN/GnTNr4XWduf2SgSio=
Subject key identifier: F0:7C:0E:00:D6:73:EA:72:C1:3E:03:13:F9:6E:15:41:EF:D4:A7:C5
Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
Certificate issuer: /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
Manifest number: D1
Signing time: Wed 07 Oct 2026 07:12:44 +0000
Manifest this update: Wed 07 Oct 2026 07:12:43 +0000
Manifest next update: Wed 14 Oct 2026 07:12:43 +0000
Files and hashes: 1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: 35hIogp6tlXTmCLt9H0sJwaN+lC1gvaGfzoy8xnvJo0=)
2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: cPnYWMNQVMlUCzK+IYFg8KOYZlfdR0D1X+BkfCqpA3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Validity
Not Before: Oct 7 07:12:43 2026 GMT
Not After : Oct 14 07:12:43 2026 GMT
Subject: CN=6ac5f0ec-4a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:fb:ea:af:ce:58:ff:51:0d:6b:07:48:62:
3e:88:07:83:2a:5a:3f:0d:f2:58:4c:17:18:05:09:
3a:df:ff:fa:23:65:bb:00:cf:cb:02:e9:bf:4a:aa:
e1:8e:a4:77:37:7c:cc:83:32:a8:d2:d1:25:a2:68:
dc:ad:99:c4:f6:64:28:d8:cc:b9:49:a1:1b:a6:8e:
33:3a:c9:7f:76:ee:62:0c:8a:b4:52:a2:6d:f2:b0:
c4:0f:ea:12:be:95:b7:c5:fc:1a:00:71:7f:a9:19:
50:0b:b6:fb:b3:a2:09:2e:6c:bf:32:c6:0e:5a:53:
cb:85:a4:b6:21:bb:45:2d:07:19:f8:9b:ec:34:f6:
cf:98:0d:84:6c:1a:c4:07:e0:17:62:c9:cd:9f:28:
77:5c:f8:41:58:0c:54:07:9d:bb:ff:35:47:ca:95:
bb:d2:7a:15:08:c5:f0:8e:c1:9b:06:a5:ea:5c:9f:
0d:60:02:77:0c:9f:9b:24:59:62:2c:dd:4c:3f:cf:
89:ce:cf:e0:18:7a:b7:ed:b1:62:c0:cf:93:d5:63:
a8:d9:a0:d8:df:54:c3:5e:2b:d1:c6:44:e8:a8:f4:
fc:d5:40:76:63:bd:9f:b2:c9:a5:c2:2a:a1:05:d7:
6a:93:6c:a9:94:9d:4f:c2:c1:15:05:a6:00:e0:0c:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7C:0E:00:D6:73:EA:72:C1:3E:03:13:F9:6E:15:41:EF:D4:A7:C5
X509v3 Authority Key Identifier:
keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:0c:2f:5c:c4:9b:b1:69:24:dc:ef:b8:5e:03:f7:5d:79:91:
87:9e:81:c8:ca:1c:46:c9:ea:c7:cf:e0:27:ba:2d:2a:fc:7b:
fa:87:90:fa:1e:bc:c9:3e:94:71:b6:ab:22:7e:2e:14:d0:8e:
61:0d:b4:5c:f1:3a:f3:2c:d4:c7:97:fd:b9:ed:ed:e5:e5:8b:
77:a9:fd:d3:ba:24:12:53:df:dd:9d:45:ac:81:1f:11:59:01:
c7:6f:6f:df:ac:23:ce:f5:d0:2e:07:4c:97:bc:71:e5:36:e5:
c2:a9:0c:c2:8b:1c:a9:b4:4d:2b:44:6a:32:f7:e7:bd:0d:7f:
4c:27:1f:de:c2:41:9b:d3:3c:98:3c:fa:70:f7:41:ad:b9:e8:
e9:7c:23:8c:ea:9a:1f:ba:9c:2f:58:4e:35:ff:0b:7a:59:67:
81:d4:3d:d6:d8:8d:de:0d:1c:5c:31:9a:f4:da:da:a4:96:83:
e5:73:c9:b7:78:2e:75:cc:b7:c9:e7:76:a4:41:1b:d6:6d:81:
55:c0:b2:2b:0d:3e:82:8e:a0:fa:94:84:71:bd:e3:38:94:3e:
0b:21:38:1a:7e:1b:35:67:ab:18:6d:c5:75:07:49:e6:a3:5f:
ea:32:14:cb:61:0c:68:c5:8e:f0:4e:73:61:ca:9f:cc:c4:64:
b6:a2:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:30:23 2026 by rpki-client