
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier: 1YITJrjeulAcKFtQ80OuapVPi3Z5fh6LR1V7qsISx2U=
Subject key identifier: 01:E6:33:3C:65:35:0C:3A:B5:D4:2B:2B:E5:42:74:DF:64:F2:AA:3C
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial: 0AB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number: 0A9E
Signing time: Tue 22 Sep 2026 19:23:48 +0000
Manifest this update: Tue 22 Sep 2026 19:23:48 +0000
Manifest next update: Tue 29 Sep 2026 19:23:48 +0000
Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: dWitxJdueWl9byiLSytmwe5l5a4EyrgkTmiJsKDJFME=)
2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: BML+CpNfWIhxgmjTMLZ//EdSsz/6Hi/QXJXWPhL7TSQ=)
3: -MDpMwooKlC4cQ11sxMasnukqjE.asa (hash: aI8XaEF93rscIyRJ9IGwHhTTopcBsHgO5XCQV5/Qw40=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2740 (0xab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Validity
Not Before: Sep 22 19:23:48 2026 GMT
Not After : Sep 29 19:23:48 2026 GMT
Subject: CN=6ab2d5c4-b070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:9e:0b:38:c2:77:2b:7f:a3:0a:2f:f6:00:
ef:1b:d9:da:3b:fc:55:5c:55:88:f6:12:fe:66:41:
b3:63:bf:3c:da:12:65:69:64:63:7b:f3:8b:15:f5:
b6:b5:eb:4a:d5:86:59:57:b0:bb:39:0b:33:6e:fd:
b9:c0:4a:d3:a4:4c:69:0e:5e:eb:41:3a:e8:95:17:
04:c5:87:3d:3a:a4:38:e5:9f:23:6f:60:4d:16:fa:
dd:08:01:b1:40:3d:a5:50:c1:ea:11:f5:2a:b5:28:
19:34:e6:b3:cb:18:16:4b:ba:1b:eb:a6:2b:30:a2:
5a:b2:ef:09:7a:c1:78:3f:f0:d5:c8:d8:f5:6e:97:
69:d1:f1:d7:73:f7:37:f4:15:13:af:93:c2:8c:ca:
f8:91:4d:e2:aa:e5:e6:95:08:07:a5:41:43:a5:1b:
02:e7:67:70:64:3f:c5:48:51:04:63:2f:34:d7:99:
56:69:82:54:94:3b:19:c8:5a:55:cb:21:24:35:f2:
3c:12:e9:df:f5:b6:35:66:5d:0d:98:c3:02:ae:d9:
f7:55:16:0b:35:e7:99:b7:5c:5d:b6:d6:79:8c:b7:
1e:db:d1:d7:70:84:36:8d:a9:dc:b9:d8:24:04:94:
81:dc:ef:0d:38:3a:21:00:13:25:88:63:d3:37:3a:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:33:3C:65:35:0C:3A:B5:D4:2B:2B:E5:42:74:DF:64:F2:AA:3C
X509v3 Authority Key Identifier:
keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:de:c3:24:90:50:d4:85:4e:ee:be:92:71:73:74:5c:eb:fe:
97:41:61:ab:94:25:77:3b:b0:e8:fc:04:9f:e0:5d:c2:19:03:
2e:77:f7:e3:29:7d:91:cf:f3:c2:24:d9:c8:20:88:32:0b:f0:
b9:47:1a:a0:15:b8:55:9d:78:7f:a1:cf:10:41:09:d9:57:37:
1e:b3:99:8a:d2:1a:bf:8f:c7:5d:af:9b:7a:f3:0e:12:9f:85:
b6:1c:8e:3d:17:12:fc:04:d3:b7:9f:fe:a8:46:6f:9a:f9:03:
2f:75:3a:6a:00:8e:2f:7e:be:30:31:6c:17:41:a0:58:49:6d:
b2:f6:3e:74:bd:3f:77:7c:3e:d9:a2:bb:e6:c3:8c:67:7c:92:
d7:83:6b:09:69:5d:0b:a7:40:a9:a7:1e:f2:a9:17:3b:11:39:
a5:ad:2d:86:53:d7:86:ff:8d:50:b5:c2:73:45:4f:eb:7a:17:
f2:08:bd:7d:82:69:9d:1a:78:8b:17:61:c5:58:b6:70:d4:88:
12:8d:26:5b:2d:97:27:6f:dc:cb:64:5e:aa:00:5c:bb:68:75:
8f:69:3b:05:41:25:1a:16:f9:5d:c5:f5:d2:be:da:76:e4:a6:
c6:ba:15:40:68:dd:05:06:e7:7e:c6:b3:09:90:8e:a6:9a:f0:
94:bf:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:53:46 2026 by rpki-client