
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File: qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier: Bu662rSWJHQCrITGKZgUGB7n/HpGtHNX3F2J85hD5Lk=
Subject key identifier: B1:8D:DE:2F:02:36:7C:B8:4A:B1:5B:AD:4D:F2:9F:7B:F0:D6:82:80
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number: 0228
Signing time: Sat 03 Oct 2026 03:44:00 +0000
Manifest this update: Sat 03 Oct 2026 03:43:59 +0000
Manifest next update: Sat 10 Oct 2026 03:43:59 +0000
Files and hashes: 1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: lMA0viUC4xpSRju4/tlW7HdT89deawpE97aSQPUuuh0=)
2: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: X9PlsIxIK/tymRHPH3Dn2w7Nzml17MG5US4WdS+LzEc=)
3: B644549E9AB611F1A85C11C64311F970.roa (hash: ez+GxbU99kOmhCwoy0SFhe4ozBreUtL75YU8kctCjiU=)
4: 60C99716BE5811F1B65E895F6A11F970.roa (hash: 8BohF5BmLnooR913bYekp8py0UzdLhm40CmaiC5UsQk=)
5: B772717A9AB611F1A85C11C64311F970.roa (hash: d/1nKtzVJFOAvD5GcQzX2uqaT0vrUxJNjX9GjTKmfrM=)
6: 31278874AB8911F19687DFB34611F970.roa (hash: MJy/HuSKCgYrUrC5K+TJpFGAy8EQ8a7HzxGZkyrCRwc=)
7: B88F65049AB611F1A85C11C64311F970.roa (hash: xHqlLzVPPIyi+9RP4Uhd/nQXiAksoICjKZK9VptHjn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Oct 3 03:43:59 2026 GMT
Not After : Oct 10 03:43:59 2026 GMT
Subject: CN=6ac07a00-3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:cd:fd:bf:19:8a:df:82:3f:90:cc:c1:64:
ac:10:97:f7:62:59:de:0f:8c:bf:d5:2c:04:8d:27:
b6:54:15:2d:26:aa:bd:c3:b8:28:a8:38:f9:81:a1:
c1:a1:06:b0:91:61:17:4c:89:58:48:76:e0:70:90:
33:8f:b8:2c:50:d3:f0:ea:cb:43:64:66:9f:10:3a:
64:00:e9:b5:44:0c:cb:15:dd:2e:f9:5c:f5:c0:6b:
9e:6b:4c:70:92:cd:fe:b5:d1:28:33:4c:06:0e:13:
c0:4b:f7:6a:aa:93:de:8b:a9:47:6d:97:27:35:03:
76:21:1f:1a:a7:f1:03:e2:5c:4f:5a:5f:77:17:23:
bd:bc:28:be:78:0d:62:7d:c3:9f:f0:f3:bf:4d:2e:
91:da:a2:27:d9:fe:9a:3d:ff:79:bb:bb:49:5b:52:
f4:61:47:cf:ac:56:01:99:7e:f6:33:17:91:70:6f:
7a:2b:97:ce:49:33:3e:7d:50:3e:41:3c:5c:49:37:
cd:7c:ad:0e:48:99:53:ad:14:28:69:59:9c:a7:12:
de:e5:4c:5a:91:38:db:00:63:58:0f:3c:b6:4a:1e:
16:03:da:16:e5:07:a5:28:da:38:94:1b:9e:6f:ec:
18:da:09:1f:0f:92:60:11:93:67:4c:c2:a9:d7:98:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:DE:2F:02:36:7C:B8:4A:B1:5B:AD:4D:F2:9F:7B:F0:D6:82:80
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:f4:17:b4:7d:db:89:cf:ae:20:3c:cf:8f:84:eb:8f:fc:f4:
f3:b2:09:cf:a2:70:7f:72:c7:0a:09:3c:73:6d:08:f5:46:6d:
ce:e4:cc:be:f1:d1:96:7a:b3:d7:b1:83:3f:ea:c4:ac:47:73:
32:bc:dc:4c:fc:12:72:67:48:a0:1d:e2:44:85:cf:ff:c7:e2:
46:bf:d9:ea:e2:5d:c3:bc:f9:d7:b1:cc:94:6b:4d:12:80:3d:
7b:bf:ad:8e:14:f6:6a:6e:7c:85:3a:a0:ca:69:a9:3a:9a:5d:
73:a6:f2:1a:0c:5f:29:6d:cc:55:b9:a1:2a:08:01:cc:8a:12:
f2:6e:6a:f2:02:65:f2:25:76:a4:d6:22:14:2b:9e:61:f6:3f:
6b:5a:25:64:5b:d4:ea:31:1f:55:f6:4f:2c:5e:12:60:0a:d5:
db:c0:d8:72:60:dd:d3:7a:4d:98:83:9c:d8:b4:59:78:f9:2a:
be:a8:d0:fd:ae:27:43:b3:d6:34:3b:d1:90:41:5a:d2:ff:f9:
20:e8:3f:b0:ef:6d:25:44:45:46:d4:cd:f6:71:23:be:75:68:
19:48:36:be:1f:66:3e:2d:09:4c:88:64:ec:43:cf:cf:d0:ad:
3f:5c:9c:9d:d9:6b:7d:4c:15:fd:ef:c1:44:f0:a8:26:2a:c5:
41:18:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:15:38 2026 by rpki-client