
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier: zSvBdnPIf5jjtDvpqpCuhzGTQJuB6Za1TISNNe1H8AI=
Subject key identifier: F1:7C:44:BB:F5:E8:C0:EE:7E:B8:74:16:DB:C5:F2:55:E2:20:FC:65
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial: 02AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number: 02AB
Signing time: Mon 21 Sep 2026 01:30:25 +0000
Manifest this update: Mon 21 Sep 2026 01:30:25 +0000
Manifest next update: Mon 28 Sep 2026 01:30:25 +0000
Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: /drBYEsNXSw9XYJgmV3Ev+j+Wfkr1YpfYebmgahXy5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Validity
Not Before: Sep 21 01:30:25 2026 GMT
Not After : Sep 28 01:30:25 2026 GMT
Subject: CN=6ab088b1-56a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:98:74:90:7a:89:d7:41:79:60:6b:54:8a:
e4:04:cf:7f:d6:31:23:0f:7b:cb:5a:f5:7c:46:f2:
37:13:21:eb:54:73:ab:da:97:5f:43:49:bd:ab:54:
28:74:1f:ef:d0:bc:2c:af:29:ab:a7:92:60:e3:99:
8b:21:c0:8a:b3:a7:94:0c:96:15:d9:50:92:a5:8b:
b7:67:68:94:94:69:92:ba:5d:4d:1f:d9:f7:85:df:
3e:39:88:df:c9:c3:91:38:fa:46:2a:d0:68:c5:0a:
7b:87:42:91:8e:65:a8:2e:9c:35:3b:17:2a:8c:ef:
68:85:1a:06:32:04:82:6f:8a:db:50:ec:bf:d3:07:
29:92:82:12:88:a4:c1:f7:ea:b2:d5:58:39:1d:e0:
fb:fa:4f:ca:f9:c0:91:ca:7f:2f:ad:13:44:1c:21:
63:c3:36:e3:8f:1f:40:a7:71:54:ab:7a:38:60:4a:
a5:d1:06:3b:44:2c:48:97:26:56:04:30:fb:38:b3:
5a:03:28:56:29:9b:bf:9d:6a:a3:ca:b7:93:02:48:
ff:97:be:2b:a9:20:41:83:e5:70:48:43:02:6a:51:
85:8c:2c:af:09:73:59:6c:d0:73:2a:28:a0:6f:b9:
75:44:f5:e4:ab:c7:2e:3b:a9:e3:d0:0a:6d:96:33:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:44:BB:F5:E8:C0:EE:7E:B8:74:16:DB:C5:F2:55:E2:20:FC:65
X509v3 Authority Key Identifier:
keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ab:c3:63:4c:24:74:c3:b9:b8:ba:f3:af:06:13:42:a7:f7:
33:d9:11:69:64:71:eb:13:fd:43:2e:95:c0:be:f5:18:48:49:
5a:68:f3:70:25:4d:05:3c:a8:fb:1e:31:2d:20:26:79:1b:30:
ae:39:f8:92:d4:03:41:9a:aa:37:20:33:19:12:d1:89:cc:87:
45:d3:79:ee:b3:0b:b6:6f:d1:f7:8d:b5:8c:04:ee:85:f3:fb:
63:23:3f:f1:2f:19:f8:8f:ec:f3:e3:1c:f2:78:ec:b5:30:b0:
6a:6f:95:0a:29:75:b3:9c:09:04:d2:9d:91:b6:8a:b7:67:85:
5c:71:1c:f5:db:cd:95:78:74:82:3b:b1:58:00:47:2e:27:f9:
3d:0e:88:d9:55:dc:df:21:29:0b:69:7b:c0:26:3c:7e:a8:e7:
3f:d4:e0:67:48:7d:17:38:71:c7:31:7a:43:5b:d1:28:12:7f:
b5:5d:88:c9:56:7c:f2:bb:21:d0:fb:44:d9:56:4b:98:bb:4a:
7b:49:3e:7b:2c:eb:ca:bc:8f:66:23:cc:ee:e6:8e:af:02:63:
98:ec:01:fe:f4:4b:b8:9c:73:2f:80:c0:f5:38:6f:86:ac:bc:
d7:02:66:6b:ce:8a:8e:98:5e:5e:84:6f:fa:0a:28:e5:8c:45:
d3:19:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:08:22 2026 by rpki-client