
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json)
Hash identifier: c9/IFxiKfJUVTAYPU6yMGIx5oUqtzoIOGCGoOeh+TJw=
Subject key identifier: 45:19:04:F2:77:15:06:0E:F9:35:73:AD:7E:90:7F:EA:EC:2B:09:1D
Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Certificate serial: 0D20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
Manifest number: 0D14
Signing time: Sun 20 Sep 2026 18:18:17 +0000
Manifest this update: Sun 20 Sep 2026 18:18:17 +0000
Manifest next update: Sun 27 Sep 2026 18:18:17 +0000
Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: nRSCr9eDNUAHSItkaJH9+e6fj7TU7CEb1kePhCL8NnE=)
2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: t0uncGishM2Tsr9xzVJil2k3Roy5Hv6NFxmghAYpdGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Validity
Not Before: Sep 20 18:18:17 2026 GMT
Not After : Sep 27 18:18:17 2026 GMT
Subject: CN=6ab02369-dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:e4:12:5a:59:06:ef:7a:f2:06:4e:df:b9:
1c:11:d4:5f:4b:d5:e1:2a:16:21:0d:cd:68:da:07:
de:f1:1f:8a:df:ea:fd:33:8b:85:01:ab:97:21:39:
6a:39:b8:d3:d8:67:e0:11:8c:b6:c6:8c:ec:19:bd:
fd:25:22:f9:2c:d7:5d:5e:d6:99:67:34:e6:b4:84:
ff:e3:ec:16:c2:a6:8b:c2:d6:d7:bd:ff:50:4e:e9:
b0:fd:ac:dc:df:89:d4:38:a0:36:7c:f0:d8:24:83:
42:dd:46:7f:c1:4e:e7:7c:f2:a1:bc:e7:a1:12:70:
75:78:1d:47:4d:bc:15:cf:ff:3c:66:85:54:71:21:
35:79:91:13:6a:ea:1f:6e:9a:1e:c4:41:36:ed:aa:
c1:5c:a3:41:e6:41:a2:53:6a:26:1f:cb:69:62:07:
d5:5b:fa:83:04:57:02:6e:f4:73:d3:a5:d6:4d:f5:
47:2a:4b:2c:82:5e:77:45:3f:fd:8b:3c:fe:51:f2:
5c:33:1f:10:dd:22:ca:f1:5c:32:44:a3:12:38:70:
91:7b:b1:83:3d:f7:a2:cf:07:88:fc:30:08:08:37:
fa:a2:a1:e0:aa:88:0e:e1:ac:86:12:ff:ca:31:e6:
a4:69:64:16:23:31:75:5f:d8:62:22:d3:b7:bc:79:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:19:04:F2:77:15:06:0E:F9:35:73:AD:7E:90:7F:EA:EC:2B:09:1D
X509v3 Authority Key Identifier:
keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:4e:c5:d1:1b:70:bf:e1:0e:01:60:ff:c1:3a:38:c7:d5:52:
dd:8b:e1:f1:f6:04:11:9a:f7:9f:15:de:88:56:1e:1a:9a:d0:
45:d6:3d:89:0d:15:3e:09:22:e3:f9:6f:b4:8c:48:61:f7:f3:
fb:49:1f:81:17:6d:13:06:30:65:4d:d8:84:c7:71:96:7b:51:
bb:71:04:29:d5:74:26:70:73:f3:21:ce:cc:70:aa:68:e6:3d:
0b:98:a4:1f:cd:9c:1a:c6:5e:b2:18:4d:7f:35:08:d4:ee:50:
68:f3:44:cd:62:6e:72:3f:cd:a7:0f:2c:41:47:19:f1:68:a1:
bf:5b:c9:d8:58:ad:b8:c9:ab:59:97:90:ed:e0:d1:88:28:bc:
17:94:59:1d:e7:1c:67:be:11:d1:8b:de:60:af:11:b5:7e:37:
af:0f:e2:e4:80:ab:37:8b:69:59:55:7f:03:b7:9d:1b:d5:7c:
f0:a6:50:01:79:a3:1d:d3:84:dd:46:a4:55:33:66:9c:3f:25:
d7:b7:65:09:6a:a9:a0:8e:34:71:e7:4c:f7:dd:e8:21:0c:3f:
2d:98:64:6a:f2:73:1b:1f:8b:69:a0:ab:bb:69:cc:a4:eb:85:
d9:a6:10:5a:4b:87:26:5e:f5:fd:bf:93:94:6f:f6:33:9d:2d:
3c:db:fc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:41 2026 by rpki-client