
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier: PDcoAZK8TQr2lA6Rg7f8KR9eqNwBmWQXb1DDTBa2pkc=
Subject key identifier: 6E:3C:4F:64:01:1A:43:B9:4D:1E:1C:52:5B:B2:25:EF:01:53:7B:57
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number: 0272
Signing time: Sat 19 Sep 2026 02:06:16 +0000
Manifest this update: Sat 19 Sep 2026 02:06:16 +0000
Manifest next update: Sat 26 Sep 2026 02:06:16 +0000
Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: EcIbcIAdwHDVX6fHPGZeTbyN5ppc6+0ARQ8ynJWB25g=)
2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: gp5WZJBdG8buH2FoAFWLx0g28D8rX+R/fO2EnJ+4Rtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Validity
Not Before: Sep 19 02:06:16 2026 GMT
Not After : Sep 26 02:06:16 2026 GMT
Subject: CN=6aadee18-77fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:54:5a:0e:51:c3:5a:ee:9b:84:9d:02:6b:
7a:ee:2b:24:c1:48:58:46:77:35:55:4c:3c:07:f1:
62:da:6a:77:94:ee:8c:ff:5f:cd:11:91:7c:de:3e:
36:cc:d5:68:30:b0:ab:60:c6:d3:1d:d5:f0:71:29:
08:a0:6e:33:68:9a:5b:09:dd:36:bc:80:41:ea:7f:
76:97:f3:58:2b:91:52:cd:b7:5f:cc:e5:06:52:cf:
2a:ef:ca:99:00:11:79:77:93:66:58:90:13:cd:c1:
e6:6c:b5:d9:fa:a2:53:82:8f:d2:68:b1:d0:ff:38:
26:a0:1e:c1:e4:a0:12:d6:95:b0:e2:01:17:5c:6a:
d7:41:39:5e:fb:40:4e:ad:45:9f:6a:45:2e:18:e0:
62:d7:5b:01:e6:53:bd:90:f7:29:b4:d9:ff:70:de:
15:f5:3d:2c:47:be:e4:07:bd:de:03:26:71:64:0b:
e4:16:1c:b9:4b:65:4c:a4:b8:35:1d:12:68:59:c6:
cb:be:c7:0d:d3:ed:24:43:59:65:44:c1:56:bb:5e:
1d:98:05:85:d6:96:b0:0b:5e:78:dd:85:c9:32:77:
cc:e1:bb:f2:cf:ce:24:9a:60:eb:0f:04:53:9d:dd:
77:08:3a:cd:ab:b7:45:ac:53:a0:27:97:b2:91:8e:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:4F:64:01:1A:43:B9:4D:1E:1C:52:5B:B2:25:EF:01:53:7B:57
X509v3 Authority Key Identifier:
keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:57:39:d1:7f:13:8f:1d:e3:fa:b8:e6:35:f6:c6:96:fe:84:
0a:7e:85:8a:56:3d:25:19:97:30:66:cb:b9:98:a0:5d:d2:ba:
de:a5:45:0f:d7:ff:9c:5e:2f:38:6c:00:dc:43:83:bd:86:e6:
97:3e:16:82:1b:8d:fb:9a:4d:ff:94:b9:4d:8f:8a:4f:42:ed:
73:ba:60:fe:21:e0:e8:89:25:e9:d9:48:d8:cd:d1:76:35:a3:
07:ea:f7:e8:ee:6f:c9:a1:77:b6:3c:8e:46:75:1a:0b:0c:e1:
56:06:e6:99:2d:84:81:63:4e:de:81:16:0c:93:ec:2c:f2:2e:
6a:30:42:05:a3:c3:e7:39:a3:b5:06:ce:17:9e:d4:d1:b4:0d:
36:49:8c:2b:35:ad:c3:03:d6:a4:0d:de:f6:bb:31:30:1e:e4:
6e:d1:03:c6:3f:12:c5:6d:79:b1:79:34:12:ee:93:f0:04:81:
68:8d:5e:c0:6c:c8:82:25:43:68:1f:b3:9d:1d:c3:ac:be:2e:
28:fe:dd:f1:88:f3:47:96:fe:95:55:0e:ad:d5:10:93:a2:01:
f4:6d:26:0e:49:81:a2:b9:22:f7:28:2a:c2:d0:1b:46:01:be:
5d:11:10:14:e9:d2:ad:79:55:96:6a:9a:3b:b5:17:d0:45:f7:
8b:48:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:58:16 2026 by rpki-client