
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json)
Hash identifier: mE/OeX80rcZxtyqch0mTaaxw3Jo81Bx+6KcMdHpwuos=
Subject key identifier: BE:CF:FA:44:FF:AB:2E:01:5A:C8:04:4B:B6:23:C5:30:E2:7D:B5:AB
Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Certificate serial: 0D2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
Manifest number: 0CF5
Signing time: Sat 26 Sep 2026 18:35:06 +0000
Manifest this update: Sat 26 Sep 2026 18:35:06 +0000
Manifest next update: Sat 03 Oct 2026 18:35:06 +0000
Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: gjJpxCgh6L5v+tdUe6YUcqkHhsnM1XkC5adH2PxdNEg=)
2: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 5CBCbCNQtmal7jhPIzguEfXdAdwnlI8iW5BfKYZoqfQ=)
3: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: SfWNeHYlKEHJjQq9z0QaxJLCeo+JKRmDXRkMpUqc0wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3373 (0xd2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Validity
Not Before: Sep 26 18:35:06 2026 GMT
Not After : Oct 3 18:35:06 2026 GMT
Subject: CN=6ab8105a-113d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:35:3e:d9:1d:87:1c:8b:7a:eb:83:a3:9e:
02:6b:6a:2c:ac:6f:cd:e0:45:11:61:4a:33:5e:f1:
95:72:75:45:f1:d5:a3:71:8c:cf:1d:8b:ea:3e:3b:
49:47:6e:d5:57:13:3f:62:65:d8:56:41:1b:80:31:
9f:bd:e8:ae:8d:72:81:e1:59:d5:fa:10:a9:21:df:
9c:84:97:54:4b:9d:08:2b:20:1f:36:90:c6:f3:cd:
4a:c0:da:2f:25:d1:d2:45:42:da:a5:71:7a:7a:e3:
c3:07:ea:e1:fd:cb:c6:1b:4a:c8:ef:2f:9e:b9:b8:
48:ef:fd:08:f2:f5:c1:db:86:51:4f:08:a8:5e:79:
38:75:04:ea:e9:6b:a6:f4:51:22:68:63:6b:9e:1b:
4a:33:8d:77:a6:d9:b9:37:a3:3b:2c:67:41:59:4f:
70:46:1f:83:f4:06:2a:01:9a:eb:a1:3c:c4:ba:77:
18:34:c1:00:5d:ed:68:9f:c9:78:84:dd:22:b5:40:
bb:7f:85:7a:7a:16:07:68:a3:b8:0a:73:8c:6c:5f:
8a:c6:11:ed:40:a5:a2:2a:83:d9:29:92:9e:6c:79:
13:6d:3d:0c:e8:fd:2b:9f:6a:f1:68:0f:d6:ce:c6:
bd:1c:4e:96:f8:2a:04:e4:71:e6:9d:0e:5d:b7:1e:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:FA:44:FF:AB:2E:01:5A:C8:04:4B:B6:23:C5:30:E2:7D:B5:AB
X509v3 Authority Key Identifier:
keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5b:07:0c:3c:1c:e2:5d:ac:b9:1b:8b:cf:50:75:88:23:16:
7e:27:99:8c:5f:9f:7b:8d:16:7f:96:be:bb:80:c9:4e:5a:ed:
f5:7f:91:7e:f5:a9:06:1a:f2:2f:12:b6:24:55:37:56:78:87:
7a:cd:51:91:74:b3:d7:b8:cb:93:fa:02:fc:d0:25:e8:6a:68:
45:25:17:2a:74:ca:18:f2:34:78:42:7f:b1:92:ec:36:f2:1d:
5c:a5:f9:7b:61:5b:44:3b:a8:45:91:18:df:ae:47:a8:1c:3a:
35:ab:40:d6:99:64:a8:90:35:78:6f:47:1a:64:bf:57:cb:77:
77:15:08:98:8c:96:70:49:94:c0:f1:5a:ba:27:be:2c:c6:fe:
da:d2:ea:fb:d2:91:ec:7d:7c:00:89:29:f9:ab:76:78:44:7d:
75:bc:9c:90:4f:56:e0:39:66:1f:77:93:95:02:59:23:23:e7:
92:03:03:32:f7:28:f5:44:d6:eb:e3:54:7a:c4:d2:fd:c0:90:
26:c9:9c:cb:f3:28:ae:5b:3f:d7:55:21:cd:63:16:d0:25:d9:
d5:8c:33:55:ac:06:77:1c:9f:07:e3:99:77:ad:4f:60:ba:e4:
29:1d:12:4e:1d:df:fb:16:ca:96:51:ba:cb:93:49:e8:5e:ff:
f5:13:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:47:22 2026 by rpki-client