
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json)
Hash identifier: 2fLeXr+m7Ka/d8fh6okFTH8LcBFX4W/EkJoiJ2FvZlI=
Subject key identifier: EA:38:F8:F8:C5:D5:40:4F:1A:38:D1:E5:1E:40:CB:C9:59:52:B2:40
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial: 068E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
Manifest number: 0686
Signing time: Thu 26 Mar 2026 22:20:04 +0000
Manifest this update: Thu 26 Mar 2026 22:20:04 +0000
Manifest next update: Thu 02 Apr 2026 22:20:04 +0000
Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: ZYa5KP+oRHb97kX4kkKNmrpXYWcREIM2CSNdXzqnXrk=)
2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: fipC8fnuwGfyjeMJXsenerqMyqmtrvp5/f9MWaX5s6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Validity
Not Before: Mar 26 22:20:04 2026 GMT
Not After : Apr 2 22:20:04 2026 GMT
Subject: CN=69c5b114-6902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:cd:48:00:07:8f:6f:49:27:8c:7c:a5:bb:
3a:a1:f2:1a:5b:02:a4:69:c8:12:c9:87:cf:8f:f8:
af:44:ac:e5:74:be:f3:a2:a3:09:c9:39:47:b9:9e:
82:84:77:49:20:11:ac:24:40:31:ab:08:b0:6c:4b:
ec:11:88:e5:2f:55:42:4b:96:8c:b0:f0:84:79:ae:
38:6f:69:71:68:d5:b2:ab:d0:77:9a:70:ac:a9:46:
82:17:6b:bf:fe:4d:29:50:24:4d:cb:b2:1a:18:91:
34:02:4e:18:2e:5b:0b:1e:6f:0b:e3:bd:bf:3e:eb:
43:15:40:f0:a8:ed:a7:c5:16:7d:74:23:a0:6f:d9:
20:2b:5c:5b:75:4b:cb:3c:74:91:05:9f:94:8b:0c:
b3:54:05:04:06:3f:b2:13:a5:1f:2e:2e:07:48:d4:
14:e0:6e:ae:01:fc:92:75:55:6b:cc:b9:ab:a4:ad:
c3:dc:7b:77:fb:9b:ce:08:be:4e:61:78:bc:be:89:
25:2c:9e:ef:64:b6:fe:01:c5:10:34:f5:8b:1c:8e:
75:1d:c3:b7:96:50:ae:74:16:76:ec:38:04:8d:2c:
02:c9:e9:25:23:36:bc:90:d1:1a:78:3d:0b:95:34:
7f:96:fa:26:14:75:7d:4a:1d:83:aa:23:1c:c2:0f:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:F8:F8:C5:D5:40:4F:1A:38:D1:E5:1E:40:CB:C9:59:52:B2:40
X509v3 Authority Key Identifier:
keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:5d:c3:29:1b:ca:c4:a3:2e:14:d5:35:12:9d:9f:69:1d:ff:
37:b3:a4:90:14:53:8e:ab:99:70:36:2c:eb:f3:35:71:a6:f6:
28:04:0b:82:a4:af:ca:9f:0c:0c:8f:4a:8e:8e:dc:41:02:81:
35:d6:95:7b:3f:3d:02:c0:e4:14:38:00:60:ee:45:ed:a1:6e:
ac:d9:a5:db:43:45:60:4b:ca:d6:e7:58:f1:0f:68:87:ff:bb:
d1:ac:a7:de:64:9c:81:72:29:cb:0a:b4:0b:3f:79:6a:42:56:
e7:51:f3:d3:48:0e:22:7f:f8:21:ae:93:e0:2d:d4:ec:de:35:
8a:ab:3c:58:f8:44:28:2d:b7:c6:95:ac:ed:7c:4e:0a:84:43:
e0:a6:78:f2:cd:2f:0d:82:cf:0a:5c:00:51:dd:08:e5:0e:52:
8d:4d:da:5a:2f:e6:af:4e:ca:a8:aa:c0:7a:59:d5:1e:29:c5:
7b:93:33:09:84:51:14:35:fd:18:24:73:19:4f:3f:41:9a:d0:
c8:6a:22:43:fe:96:7a:0a:d7:0a:28:40:eb:ab:dc:a0:9f:16:
a5:8c:c6:73:ae:ca:d3:45:3d:64:d8:1f:00:61:47:a5:36:1f:
f8:f9:e5:fb:1c:1b:f6:f1:46:03:d4:19:7d:43:07:42:34:66:
5e:75:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:38 2026 by rpki-client