
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier: M2C39+pNF+3d1g/IZuUXnSx7P5+IZ5JyW2ifNdGFA1U=
Subject key identifier: 7B:65:21:76:59:54:74:FA:4E:B1:33:ED:1F:0C:0E:F9:AB:91:F2:84
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number: 0801
Signing time: Tue 06 Oct 2026 21:23:40 +0000
Manifest this update: Tue 06 Oct 2026 21:23:40 +0000
Manifest next update: Tue 13 Oct 2026 21:23:40 +0000
Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: E8MbhZA8NoL4B5H7i7z0TxLsEIcZKN87XSMJSifB/9g=)
2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: EF9uieKoaY19hPq/K/Sub8whVe1rvynhE+WooVi1n/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Validity
Not Before: Oct 6 21:23:40 2026 GMT
Not After : Oct 13 21:23:40 2026 GMT
Subject: CN=6ac566dc-b445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:6f:e9:a8:20:71:b4:d0:a4:58:1c:23:eb:
a6:c4:ed:8b:45:21:a8:ae:75:0d:ff:e2:39:0f:08:
29:08:e3:e7:00:f3:a7:1c:24:b8:7d:04:46:06:4b:
3d:a1:a7:1d:68:54:22:4a:ed:27:9f:fa:fd:4c:4a:
73:ba:95:98:31:6e:6b:4c:b5:72:f3:c9:e5:11:81:
ad:5f:5f:da:bd:8e:52:ec:94:03:a9:a7:9a:c1:99:
dc:0f:ef:90:4a:03:a7:25:1e:d2:20:f5:c1:46:94:
4d:69:be:ef:aa:d7:65:e4:6a:40:e2:37:f1:09:67:
f3:7f:f2:c9:2d:8a:90:b4:c0:e4:22:cd:c8:1f:0a:
bc:24:2f:d4:17:b1:d3:35:66:1b:59:f2:3b:52:9f:
6f:c3:e9:d0:49:5d:3d:83:96:d6:ef:c4:c0:4b:81:
4e:72:a3:f6:83:c1:0e:93:b9:fb:87:ca:02:e8:8f:
64:4c:89:8c:fb:ff:af:89:df:04:a6:b0:07:e8:9e:
ac:36:c4:88:2b:4b:75:c2:ec:bd:6a:1b:57:b1:e6:
8b:01:b7:99:9e:25:64:78:c4:eb:d5:2e:9e:77:3b:
a0:07:d8:54:a2:d0:ad:53:69:50:9b:b6:50:e9:75:
3f:16:78:2f:a9:5a:f9:d7:73:75:c4:e9:46:eb:02:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:65:21:76:59:54:74:FA:4E:B1:33:ED:1F:0C:0E:F9:AB:91:F2:84
X509v3 Authority Key Identifier:
keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a7:36:d1:01:b8:52:d2:16:10:fb:5e:dd:70:e5:1f:30:ca:
03:37:30:48:7d:5b:88:6f:d2:18:92:ec:1e:dc:c5:b4:ca:b3:
03:c1:57:78:18:a1:22:08:91:fa:5a:bc:dd:8e:87:ab:09:d2:
74:b1:32:4a:e9:40:fa:80:cd:37:e6:88:97:8f:26:3f:c9:5b:
8a:67:b3:71:6a:51:12:28:05:c6:db:d4:67:08:ce:98:5f:70:
4b:f7:c9:e7:92:92:b5:18:06:61:0d:bc:d7:ef:89:bc:a5:15:
eb:45:a8:af:ef:51:12:c1:a0:a3:fc:f3:a3:9a:8c:7b:9f:39:
f7:0c:f1:7f:2f:5e:87:12:34:23:02:3b:4c:41:88:64:63:33:
6d:53:f3:65:6d:c7:e0:a3:e0:98:d5:ef:9b:66:ae:65:a5:12:
f1:74:79:89:86:05:1e:cb:29:34:7d:2e:46:6d:c8:22:61:46:
1b:51:14:06:bc:bd:e5:32:b1:a5:46:aa:8e:10:83:50:48:d7:
aa:b0:4b:c0:cb:77:55:aa:66:94:b0:e9:f1:27:56:13:d9:7a:
f8:05:9d:bc:11:30:87:fb:29:1d:14:24:bb:e3:99:5b:6c:1d:
2a:c1:52:50:8d:8a:52:60:f6:ac:57:36:54:18:73:b0:c2:fb:
69:99:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:32:27 2026 by rpki-client