
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier: 7U1rVz2Z4k/WVbwc+idoHg+i5TQutVKJDvMsXaxlX44=
Subject key identifier: 51:B0:3A:5B:AE:79:71:3C:3B:E3:75:7F:0E:85:53:A8:24:EA:40:CC
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number: 01E9
Signing time: Mon 21 Sep 2026 03:32:15 +0000
Manifest this update: Mon 21 Sep 2026 03:32:14 +0000
Manifest next update: Mon 28 Sep 2026 03:32:14 +0000
Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: 6/8EJjdPNrFyZEUA/K2nKpbL0cIU28cBUpbZEbixu0Q=)
2: 469DADAE9B1D11F199542C1F6411F970.roa (hash: 7ld5vVKkgDVk7iu8ZivqDo4KyiyF+452Quc+9rok5eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: Sep 21 03:32:14 2026 GMT
Not After : Sep 28 03:32:14 2026 GMT
Subject: CN=6ab0a53f-2741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d4:d2:1f:86:7a:11:2a:06:47:ea:75:c1:9f:
e3:b6:b2:3a:e9:25:f1:05:7d:f8:07:3b:85:d7:d5:
bd:c7:28:0e:1c:00:00:ec:c0:9f:63:f9:de:06:23:
1a:0a:be:e0:85:64:8f:7e:64:67:06:04:13:5a:ba:
09:67:a5:e4:07:8c:5c:6d:da:23:10:18:b4:4c:8b:
7b:65:d1:03:7a:88:08:56:b7:36:9a:eb:11:45:ba:
e8:ad:c3:27:26:b7:b3:b2:c5:48:07:94:bb:90:35:
f5:ed:f6:bc:ef:51:dc:b2:b1:a6:e6:ef:95:4d:d7:
4e:37:05:da:bd:8b:64:69:55:e3:cd:19:b1:1f:fe:
9f:9c:8f:05:9f:d8:ed:90:2e:5f:52:2d:82:a8:65:
00:9a:49:95:33:95:cc:89:f2:e2:c1:8b:2b:e4:f0:
15:12:a4:9e:4f:0b:14:03:b2:da:32:2c:d9:6f:6c:
24:8c:7c:ff:48:2d:24:35:5a:89:cd:3b:e1:1e:7c:
27:e7:85:c3:8c:88:81:0c:71:4c:3e:55:99:30:cf:
48:02:0d:1a:c2:78:06:ec:31:8a:82:21:04:1c:a6:
8b:c6:5f:f3:24:7c:52:e8:52:11:7d:b9:5f:72:1b:
72:fc:d8:df:2c:41:b0:ed:40:da:a3:a2:3d:15:3d:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:3A:5B:AE:79:71:3C:3B:E3:75:7F:0E:85:53:A8:24:EA:40:CC
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e1:c9:84:a1:ac:2c:c4:a5:3e:ce:50:c6:55:10:26:51:89:65:
22:d3:f2:c0:4b:7d:83:b8:7d:89:35:8f:d4:f4:de:c2:1b:43:
ae:e9:c3:e6:d4:43:38:0e:87:eb:ac:dd:a4:2c:48:60:f8:79:
a7:9a:28:45:e3:7a:a2:90:a0:53:2c:7e:11:20:ef:fd:fa:5a:
64:34:8f:8e:95:ff:bb:42:a1:da:13:9f:c1:05:f9:cd:bf:77:
2b:a4:0d:6b:5f:74:71:f1:09:c1:a9:54:18:17:25:12:74:75:
a2:db:b8:18:6c:5c:ce:c2:4c:6c:be:22:98:70:9b:6c:74:55:
e6:2f:a7:01:83:66:7e:9f:96:4a:9e:a3:3b:dd:1b:92:42:0d:
7e:36:d1:06:a2:44:68:61:14:73:d2:76:c5:fd:25:6d:9f:b7:
d6:c0:c3:4c:f1:76:e6:e9:db:55:ce:08:19:8b:59:07:82:05:
26:c4:4b:7b:a6:fc:54:de:36:7d:17:9e:4d:71:a5:2a:14:fc:
f3:7c:a3:51:82:0b:eb:94:16:b3:c9:6c:38:81:96:ee:84:6d:
70:6a:6d:05:7d:ed:dd:85:4a:06:0f:66:ca:fb:67:5d:af:8b:
d4:dd:7a:70:a2:3a:49:52:b7:38:b0:f3:7c:b8:8d:40:01:a6:
ca:de:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:50:20 2026 by rpki-client