
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json)
Hash identifier: LsXKOLPNvLQVpRxmdnUw2vd+5QvuIAozb+ltHh8K6xg=
Subject key identifier: 26:E3:09:24:2F:F6:86:2B:AF:11:66:C2:B3:63:4C:A8:C6:31:62:16
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 3727
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
Manifest number: 3637
Signing time: Fri 16 Oct 2026 14:29:21 +0000
Manifest this update: Fri 16 Oct 2026 14:29:21 +0000
Manifest next update: Fri 23 Oct 2026 14:29:21 +0000
Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: SApORuf8YNYSlHb3Yen2GfQAyCqZ9H4zauFcxVda+jM=)
2: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=)
3: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: rpLxYdKFNSJ5rCBHHzTbeOHhuwX5lGKEDVa6Y6/p+/g=)
4: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=)
5: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=)
6: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=)
7: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=)
8: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=)
9: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=)
10: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=)
11: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=)
12: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14119 (0x3727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Oct 16 14:29:21 2026 GMT
Not After : Oct 23 14:29:21 2026 GMT
Subject: CN=6ad234c1-2e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:dc:bd:e8:d2:91:59:17:80:f4:dc:33:6a:
d0:71:19:42:89:43:5f:e4:b4:3f:9c:87:08:73:25:
1c:da:58:e4:92:76:a3:08:77:2e:f7:87:f2:d1:d0:
72:ad:11:e6:ae:84:60:b5:71:57:c2:aa:5e:56:8b:
3f:77:dd:0c:d4:52:fa:27:b0:2c:ef:74:bd:c9:a6:
c8:87:f7:29:4c:51:11:dc:5c:b2:2e:53:3a:46:79:
cc:80:01:98:3b:23:d3:85:07:4d:40:52:97:6c:0c:
c0:2c:63:7a:95:a8:3a:56:49:5f:0d:4a:b6:67:cf:
95:db:55:6c:f3:33:9b:5f:14:53:a9:3d:1a:6b:81:
30:b0:5b:0a:4b:a9:80:ad:c1:7e:ab:e2:a8:c5:af:
2f:5d:93:06:1b:ef:bb:55:d2:35:ce:27:3b:19:27:
8a:81:7a:68:d4:da:3f:54:f7:af:bb:20:b6:ba:53:
9b:df:64:da:a5:d2:28:49:00:ee:96:7f:ec:19:4b:
78:55:13:d0:78:2e:08:0a:66:bc:72:d3:54:3e:31:
78:a9:b7:59:cc:c8:73:00:64:06:eb:db:a9:bb:3a:
19:8a:e9:6e:be:0d:8c:a5:a9:82:d5:d8:49:55:c7:
0f:57:d9:5b:86:09:f7:ab:2f:6a:aa:0f:e7:f6:c7:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:09:24:2F:F6:86:2B:AF:11:66:C2:B3:63:4C:A8:C6:31:62:16
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:41:0a:10:82:b2:15:08:aa:d0:a5:49:23:c3:00:03:11:27:
ed:da:b5:c5:77:44:28:41:67:61:fe:2d:ca:75:00:12:88:8f:
11:05:f3:3c:bd:c5:c8:31:29:ce:fc:df:20:ef:d4:ff:bc:1d:
45:da:3c:ae:20:f0:92:03:41:16:0c:c6:fb:ea:ea:a7:c0:09:
4f:e9:17:4d:cb:8e:c2:a6:b1:8e:85:9a:13:68:70:02:ef:f3:
d4:d1:8b:72:30:fb:e7:27:c4:87:63:a2:db:6f:c6:27:14:8f:
2f:69:04:74:fb:56:53:d6:80:5c:a2:a1:eb:1d:c9:36:2e:10:
07:aa:f6:e0:c7:03:38:a7:ce:e3:ec:12:3e:52:a0:7a:4a:cc:
af:12:0e:6d:98:0d:3e:18:b7:90:ab:14:1b:16:45:56:ec:ec:
db:9a:53:b3:fc:ca:e6:84:3d:26:01:f2:db:1a:21:04:91:4a:
ee:67:f0:1a:c4:5b:c5:75:59:9a:eb:e3:69:04:4b:24:53:e3:
cb:de:04:4a:25:eb:9e:db:81:35:5d:29:1d:83:90:9f:31:ea:
be:39:de:12:fe:8e:75:bb:57:75:17:bd:b3:40:c6:c4:3d:f3:
22:b6:33:4d:22:b3:98:54:e2:b8:13:4e:53:c8:79:44:1d:2d:
b0:ff:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 19:35:14 2026 by rpki-client