
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier: C2ESFE/lpY2pXMAlUFU79TflIxhVFJVx8qGRRKoKi7M=
Subject key identifier: 0C:AD:4A:34:04:E9:84:64:77:D1:31:42:B3:D2:AC:08:68:23:41:CE
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial: 0536
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number: 0520
Signing time: Sat 26 Sep 2026 23:40:29 +0000
Manifest this update: Sat 26 Sep 2026 23:40:29 +0000
Manifest next update: Sat 03 Oct 2026 23:40:29 +0000
Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: uLykDMDSXoTNQ+hT2ZJPG9Lzmp2+3IqWqn5V7zfsNqA=)
2: 65798E8A1F7D11F18F98CA06223D8C67.roa (hash: RZFsnQn6HA9v12vUgYh/78hGLqlY8AmjxFGu89yIv54=)
3: F3B1927A1E0511F1841549681E3D8C67.roa (hash: KFJazkmvnPBoQlHt7NJ9M2Eg3tsyR0kZTa+OC7vwIGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Validity
Not Before: Sep 26 23:40:29 2026 GMT
Not After : Oct 3 23:40:29 2026 GMT
Subject: CN=6ab857ed-99d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:0d:11:cd:92:14:67:43:13:80:92:fe:b2:
db:e6:0f:21:a2:6d:a8:44:09:66:c9:c1:c3:8b:0f:
6e:67:45:6a:fa:38:34:6a:76:69:29:45:31:54:2a:
e7:ec:e7:8d:af:68:0f:87:6f:9f:b7:6d:eb:37:f1:
a3:7c:70:60:e1:2a:27:aa:a1:37:e5:e7:fd:65:16:
f6:ec:39:c3:80:a7:d3:0b:4f:a0:df:d1:d6:2c:6f:
af:62:46:87:49:18:e3:08:3e:49:ef:eb:a0:11:35:
b7:17:d2:6f:98:d3:44:e9:f7:25:59:06:39:45:01:
bb:a9:eb:d3:2d:8d:f6:46:cd:41:f3:34:cf:4a:a6:
ab:e1:83:ce:79:cc:3f:bb:c9:53:d9:1e:81:1c:e5:
0d:52:71:8f:95:6e:d8:16:77:87:51:0c:77:55:65:
f2:b2:f8:8a:d4:57:1d:93:9b:79:24:09:0c:52:44:
91:66:a0:1a:0a:55:d7:68:31:ef:e0:64:5d:a0:6c:
db:f8:48:54:10:b8:43:87:f8:d9:f5:9d:95:ad:bb:
10:51:f0:37:d3:8b:5b:c7:32:d0:bc:01:d3:29:61:
69:5b:ca:06:1b:bf:4d:d8:64:cb:10:de:e0:eb:8c:
87:ed:0b:c9:08:26:5a:9a:e4:26:0d:ef:cf:3b:3e:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:4A:34:04:E9:84:64:77:D1:31:42:B3:D2:AC:08:68:23:41:CE
X509v3 Authority Key Identifier:
keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:28:03:ae:bf:b0:c6:30:aa:68:66:29:4f:10:ec:97:18:15:
d2:a8:16:46:87:6f:79:63:e4:9b:87:9f:91:31:ea:8d:ac:2a:
31:76:29:b2:42:8a:e3:9f:a3:d3:0f:62:0e:56:b2:59:1a:a2:
fb:54:40:e6:80:14:fc:71:99:28:1d:1d:ec:91:38:9b:6c:c3:
0d:05:1a:8c:1a:4a:f5:90:9e:f3:b9:37:26:88:b9:d8:a8:55:
c4:9d:8d:64:48:4e:32:a6:1f:bf:32:a2:12:41:22:c6:78:9f:
75:71:02:7d:3b:de:ef:e0:3c:fe:ca:6e:43:28:b5:02:42:a9:
7c:ff:90:54:ae:02:c6:ef:6e:ed:cf:d8:8a:81:c0:5a:33:1c:
c8:be:35:bd:b1:b8:f5:0d:f0:17:d2:c3:92:21:d5:27:36:5c:
89:44:a2:2a:ed:df:5d:72:e3:0b:b3:31:15:62:9d:ee:9f:ee:
16:37:3e:28:03:57:40:2e:ab:2d:b0:a5:9b:f1:b7:25:15:93:
41:fc:73:20:4a:e1:ea:42:32:aa:b7:d3:24:f6:59:e3:34:4d:
fc:96:e7:14:01:b0:17:4b:d9:19:11:26:aa:b0:c3:00:d4:3c:
ee:24:cc:f7:8b:97:ad:91:8f:ce:9a:ea:3c:33:6e:27:7b:25:
2a:4a:28:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:54:12 2026 by rpki-client