
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json)
Hash identifier: 4Y7Orh+zDd1EPGV2FJ+o0a9Iku8VzddimsDV0sEH8zc=
Subject key identifier: B8:9E:94:E1:4B:7B:5C:48:10:F2:EF:D7:74:81:1A:50:DB:74:82:42
Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
Manifest number: 0254
Signing time: Sun 27 Sep 2026 02:41:39 +0000
Manifest this update: Sun 27 Sep 2026 02:41:39 +0000
Manifest next update: Sun 04 Oct 2026 02:41:39 +0000
Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: 1eo6bLN2ZcIEuTVoHDOl8uKMcsmmVQCOreg8SEJbwmI=)
2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: ret8DZA0fJaU/TB1w1dKPyomuzKd4IYw0TW4cHdfxIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Validity
Not Before: Sep 27 02:41:39 2026 GMT
Not After : Oct 4 02:41:39 2026 GMT
Subject: CN=6ab88263-0489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:98:dc:b6:4b:fb:5c:1e:9f:e0:c7:80:49:
30:fd:4a:60:e7:6b:01:d8:4e:56:2a:d0:9f:58:74:
de:4c:47:f1:64:a1:2b:89:27:8f:d8:30:59:af:c6:
0f:39:fc:5a:3c:0e:49:28:64:ce:d8:16:09:e7:97:
3e:8d:c9:7e:be:f7:40:c3:69:4b:0b:ad:09:29:90:
59:32:72:0d:fe:8f:79:41:23:0e:c7:06:a7:5a:43:
3c:16:80:70:87:0a:fb:fe:33:2f:a0:58:56:a5:67:
83:55:a7:f0:1d:89:a0:96:d9:53:f0:4f:26:ba:d7:
ca:09:24:43:99:53:66:04:8c:27:9d:4b:f1:61:38:
16:aa:ed:30:aa:39:1c:5d:3f:27:87:5e:60:cf:7a:
98:f4:84:85:43:eb:96:07:8e:ac:3d:24:0e:55:ca:
e5:2b:a6:4d:13:85:14:0a:b0:6c:39:f6:e0:81:d6:
cf:cd:d4:51:df:dd:c1:0f:19:53:63:19:16:99:6e:
88:d0:43:59:9c:15:85:d7:9c:ee:1b:58:06:0c:10:
1a:eb:f2:fe:a4:44:7a:72:64:a6:bc:f6:83:07:e5:
84:04:70:46:b8:7c:dd:f5:90:71:51:55:1a:f6:ae:
0a:83:8d:85:c9:c2:04:26:88:71:b4:fe:4b:4a:71:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9E:94:E1:4B:7B:5C:48:10:F2:EF:D7:74:81:1A:50:DB:74:82:42
X509v3 Authority Key Identifier:
keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:14:5f:2a:0e:07:8d:00:68:bd:8a:10:ae:7a:ae:4d:ec:eb:
a7:97:63:ad:d2:b7:5a:ab:2e:c6:a5:62:78:e8:44:ba:58:79:
67:bd:a7:5c:c6:da:a3:b4:1a:6a:be:f2:28:15:88:b5:40:42:
88:4c:25:de:95:2f:e3:10:63:85:1e:b1:c8:6d:c6:5e:ba:f3:
01:bd:d6:ca:7b:1f:39:dd:ec:7c:7e:f4:66:b3:5e:d4:73:68:
e0:de:d5:d3:59:29:d2:13:26:f2:ee:7d:01:f0:02:ce:15:ca:
69:a5:65:2d:48:64:26:89:d5:b8:80:49:d4:cc:da:f9:75:37:
56:e4:e0:d8:26:8a:ff:7a:76:39:44:da:5a:33:d6:75:6e:5b:
59:d0:ba:d4:73:ec:29:4d:0e:38:91:91:da:cd:8d:e8:c7:56:
da:1b:13:e3:e4:c2:de:29:cd:15:cd:64:76:42:c2:12:a7:5c:
7d:5f:83:0f:56:a3:06:2a:a1:4d:1b:cd:a2:d4:f6:1e:f2:9f:
00:78:24:c1:84:2a:d3:ba:11:54:23:74:46:51:57:a2:9c:a0:
4a:80:bc:df:1e:4b:b4:fd:4c:6b:61:46:f6:e7:c2:4f:03:ec:
68:cc:e9:24:c8:55:a9:79:0c:46:3d:eb:b8:80:32:8e:fc:67:
dd:b2:bc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:15:11 2026 by rpki-client