
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json)
Hash identifier: 9MTFc0I4EAfJ+5w7O4RbIbfnizpqybt9fr/NVigP25o=
Subject key identifier: 70:4E:F2:5B:C0:67:87:87:DB:41:5F:B8:48:07:E6:0A:82:41:E6:20
Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
Manifest number: 0152
Signing time: Mon 21 Sep 2026 05:14:11 +0000
Manifest this update: Mon 21 Sep 2026 05:14:10 +0000
Manifest next update: Mon 28 Sep 2026 05:14:10 +0000
Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: Pu50yYoMC/IJrPvbCcIExAsQ7JzCR9TU9zzUnLmBOXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl
rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Validity
Not Before: Sep 21 05:14:10 2026 GMT
Not After : Sep 28 05:14:10 2026 GMT
Subject: CN=6ab0bd23-c649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:1c:c9:16:e6:17:38:b3:65:7f:92:f1:61:
c9:75:93:ee:74:d0:c7:98:37:77:31:7c:cd:b9:74:
2c:79:75:31:f5:b5:51:e1:21:02:61:ba:ff:aa:c6:
a7:22:7a:dd:d0:2c:c3:cc:ca:99:2f:79:60:d5:fe:
a6:b8:bf:4e:14:18:fe:46:5e:c1:bf:8c:07:eb:2d:
4c:2e:e7:49:05:5a:20:74:6e:e2:14:b6:c1:e4:37:
d2:ec:6f:45:01:29:1c:3f:30:98:8b:45:46:d6:b5:
06:79:a0:89:27:50:8c:24:d9:89:6e:aa:78:56:e7:
4f:d3:60:9b:f8:c3:db:0c:3b:8d:66:ff:a7:ae:e6:
14:10:5f:87:5a:ab:de:5b:02:19:3c:f0:ba:d7:56:
d9:b5:21:ce:f1:de:7d:ac:2d:fb:a8:6a:5e:ca:c3:
79:6c:e1:43:55:e7:b0:37:dd:29:01:82:51:b9:b6:
1e:b0:8d:af:a3:fd:8f:7a:f4:5a:24:88:7e:27:df:
d5:5e:0a:4e:3e:4a:16:f6:f4:5d:71:de:da:d7:51:
29:91:39:42:e6:c8:04:09:e4:35:ab:f8:67:d5:46:
d9:96:40:30:e2:7e:71:f8:39:72:a1:31:33:13:2a:
48:79:ac:ad:8f:25:90:a4:be:18:d7:f2:98:e7:79:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:F2:5B:C0:67:87:87:DB:41:5F:B8:48:07:E6:0A:82:41:E6:20
X509v3 Authority Key Identifier:
keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fb:9a:ae:db:9b:cf:34:d4:54:b5:49:38:39:93:c5:1c:84:
5a:26:fb:45:c6:ae:8d:d8:c6:90:ec:a3:4e:dc:73:21:8f:20:
a1:60:1b:b8:b7:13:5a:7d:17:a3:e9:c8:88:76:1c:0c:9d:2a:
e1:ed:0e:3f:b1:8a:0c:58:7b:51:ac:b5:3e:45:ad:f0:3e:31:
4d:66:4b:70:ea:89:94:19:ee:3a:44:3e:01:00:63:66:ce:d0:
b2:0e:cd:92:80:f9:98:24:2f:5a:90:e7:27:e0:13:ab:34:14:
27:43:76:96:86:44:9e:36:63:5d:e2:48:78:1d:b4:04:63:b6:
bd:f8:3e:38:7f:65:a7:93:38:cf:de:b8:cf:e1:54:dc:41:74:
39:f1:14:3f:92:6b:3f:97:9b:a5:bf:9e:55:2b:8a:b0:41:51:
64:91:04:e5:aa:22:67:52:bf:50:0c:10:f4:6e:94:07:a6:dc:
da:16:58:b2:6e:ec:82:96:c2:77:8f:f4:c9:99:f6:2c:41:ad:
b3:bc:c3:54:74:56:32:32:a8:ad:6c:e4:09:15:ad:3d:ef:18:
4a:5e:1c:08:eb:0b:9f:f4:c8:d9:af:23:d0:f8:7f:7b:76:49:
12:38:d9:91:ed:36:ab:f3:ab:8d:e2:dd:cc:a5:88:02:74:4f:
9f:a3:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:28 2026 by rpki-client