
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier: 06H7i5HqxU0dkZjEP9/af/4K23Tn+urRthyMVrNQsP4=
Subject key identifier: F2:BB:18:E3:E9:AF:E2:69:39:47:C5:59:46:3E:CF:6C:C3:34:38:DF
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number: 0132
Signing time: Fri 25 Sep 2026 05:41:02 +0000
Manifest this update: Fri 25 Sep 2026 05:41:02 +0000
Manifest next update: Fri 02 Oct 2026 05:41:02 +0000
Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: F+rsMwCSDTaJyPlZUc3qOqRdwmFF1KvZvTwbtttI+/k=)
2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Validity
Not Before: Sep 25 05:41:02 2026 GMT
Not After : Oct 2 05:41:02 2026 GMT
Subject: CN=6ab6096e-16ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:5f:94:c5:f8:a1:74:77:a5:be:18:ef:37:
bc:97:b3:93:a9:09:f0:c3:23:a5:3d:db:96:9c:bb:
bd:82:88:3b:66:18:0b:60:0b:99:06:e4:19:3a:b0:
37:d2:d6:d5:d0:4d:d8:c8:29:a7:bf:9d:a5:f2:da:
bc:63:2d:e4:83:cf:b8:a7:3d:47:16:fb:30:ca:ce:
7f:9b:11:ac:e9:e2:d6:18:c2:39:18:04:70:91:01:
81:1d:cc:9e:1d:c9:61:ad:a3:a1:36:7e:bc:5c:13:
a5:22:65:ea:3d:f1:34:a7:48:5b:53:54:f9:03:6e:
07:50:dd:35:43:f7:8d:c0:c9:39:54:c4:73:34:bd:
c1:70:e9:1e:bb:cb:49:fa:cd:53:da:be:7e:b8:7b:
ad:63:63:8e:e1:15:83:6b:e5:bb:a3:f6:01:70:6a:
d3:97:c0:3f:33:ae:57:8a:9f:d7:50:0c:ed:9a:16:
2f:b3:40:2e:de:4a:40:fb:f8:8c:ee:57:87:8b:2f:
8c:c6:6b:c2:a1:27:1b:fb:96:2d:84:cc:dd:79:51:
33:76:e9:d8:a7:35:ba:0a:ad:a1:84:16:52:76:9c:
e1:03:ed:e0:af:c6:7a:4f:83:f7:32:e3:e1:95:64:
9a:8a:93:15:2a:c0:a0:0b:78:6e:68:c0:53:77:31:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:18:E3:E9:AF:E2:69:39:47:C5:59:46:3E:CF:6C:C3:34:38:DF
X509v3 Authority Key Identifier:
keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:0f:18:5e:21:f3:4f:ec:58:dd:b3:d2:54:fc:18:ea:b1:cc:
2c:4f:5e:be:3b:e4:fd:1c:31:e2:e8:f4:09:68:12:12:3d:52:
49:f3:31:02:c4:58:d0:0a:05:9d:f7:71:c8:b0:98:b4:42:38:
62:cb:70:97:ae:ea:d2:32:25:ef:a4:e1:fe:eb:be:c6:12:4a:
6f:4b:34:6a:15:f6:01:d7:3f:47:ad:0c:a0:c6:e4:fd:e9:01:
88:10:d3:96:b2:35:c4:e7:c6:a0:40:51:39:ee:ed:f1:db:61:
0a:70:d6:4e:14:3f:aa:a1:f1:3f:9a:6f:b8:22:cf:77:6e:8e:
4b:e6:c7:52:7a:5f:6e:a6:9b:d3:be:32:41:ce:2e:c9:f1:06:
a8:5d:39:79:5c:77:d9:17:af:ac:fb:08:6a:7b:ad:22:6b:e4:
6e:61:92:8c:63:2f:62:81:cf:70:78:87:ee:ed:b3:d9:5c:19:
21:31:b0:b8:66:35:a3:34:c0:19:99:33:da:3f:bb:c7:43:fc:
db:56:08:a8:76:75:96:76:19:3b:50:da:0e:3a:a4:e8:8b:3d:
bc:1e:0e:09:4d:24:0a:53:7c:11:b1:61:a9:69:90:39:a4:81:
05:13:65:eb:fc:49:59:8b:a4:08:10:ba:63:5a:45:4b:82:b5:
63:94:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:49:17 2026 by rpki-client