
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json)
Hash identifier: 8WdOSJjMa7jO4v0yokUn0uvEoQnwZh3vbNl3lC3L89U=
Subject key identifier: B0:0A:E4:04:A6:82:8C:B3:A1:E0:F9:28:30:AB:9D:FF:19:E6:3F:92
Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Certificate serial: 02EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
Manifest number: 02E7
Signing time: Thu 05 Nov 2026 01:41:24 +0000
Manifest this update: Thu 05 Nov 2026 01:41:24 +0000
Manifest next update: Thu 12 Nov 2026 01:41:24 +0000
Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: +cIKeEjncsbp2m5iaRB0BW8MqRvEIloos27switwlsE=)
2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: CcNczHQOW8yB5Q317lvbnzk6vw5R1G1tvlVbiwaOecw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 01:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Validity
Not Before: Nov 5 01:41:24 2026 GMT
Not After : Nov 12 01:41:24 2026 GMT
Subject: CN=6aebdec4-4ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:a9:92:6f:d2:87:c9:8a:a2:7e:03:a1:16:
61:3c:b6:26:42:d1:28:5e:dd:e6:bc:f0:16:ca:0d:
3e:a4:5a:1d:0a:83:37:82:a3:bc:12:84:07:8f:86:
5d:3e:e4:e3:2d:43:64:cd:5c:61:82:35:89:7e:5c:
73:71:42:49:af:ed:47:d8:19:13:06:18:1c:5d:86:
da:9a:5f:34:0e:a4:ba:ea:33:02:39:06:93:a9:b8:
07:12:f3:49:d3:ba:45:9c:20:86:12:b0:6f:32:06:
ba:ec:82:d4:53:7c:10:83:46:ed:e8:10:35:b4:ce:
d4:0a:12:4b:34:fd:80:51:d0:e9:f5:7d:c5:fb:07:
59:dd:c4:58:4b:1f:3d:7c:b9:f8:e3:20:9b:a5:3f:
5f:ee:ea:b3:5a:14:3b:1b:22:2e:59:75:d6:a1:0c:
7e:8b:35:16:54:88:e4:0b:43:1e:e5:6c:fa:db:ae:
5c:0a:fe:14:22:d3:34:3f:fa:b5:58:d2:7f:49:a4:
7a:29:1f:b2:63:c5:66:27:54:44:ab:ba:b7:22:0e:
1c:2a:e2:d5:5e:bb:91:9f:48:a8:4a:54:22:4d:0f:
65:21:f3:91:ea:b4:ea:d3:29:8b:ea:fe:b0:65:48:
66:7d:6e:ac:fa:69:a6:78:8f:fc:9e:cc:af:32:86:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:E4:04:A6:82:8C:B3:A1:E0:F9:28:30:AB:9D:FF:19:E6:3F:92
X509v3 Authority Key Identifier:
keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:dc:34:a9:c1:96:b9:2e:d1:b4:60:5f:1f:ea:d2:0c:a0:c9:
c3:21:95:37:0c:c8:f6:56:34:cb:13:86:7f:49:38:eb:c1:d5:
d3:56:97:ca:08:88:c7:f8:4e:da:51:f1:22:ce:7e:ac:b8:23:
a0:76:e4:8c:1a:0c:ef:f4:fe:7f:b5:45:d6:9c:41:04:d2:c3:
04:4a:80:42:2f:25:ec:1c:46:bb:d7:ea:e4:78:e2:fd:b2:5b:
41:da:f0:07:e4:9c:0b:c4:fb:62:24:40:e9:fb:c8:39:5e:e9:
b8:3d:d0:b2:aa:c2:86:8e:e0:83:f7:a9:23:0d:f5:30:03:69:
e8:98:f0:bd:91:a7:98:0a:48:42:40:a3:e0:b1:dc:6e:f7:db:
74:d9:af:3f:ef:b2:28:76:55:25:0e:04:ad:aa:94:88:fb:a6:
b9:19:cb:99:73:86:8e:d5:32:17:66:15:42:53:f1:7a:d4:a2:
1e:ab:16:c1:b2:b4:4b:29:17:8a:9c:9c:b3:5c:2b:72:38:26:
9e:7a:b9:4c:29:cc:39:66:68:57:f3:77:7b:3b:19:da:aa:d1:
0f:bc:0f:f2:34:fa:24:0e:6f:3e:19:30:51:cf:13:dd:b4:1d:
a6:f0:83:3a:61:30:79:13:1a:e4:cd:fc:ce:04:cb:08:6a:ac:
70:4b:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:37:13 2026 by rpki-client