
$ rpki-client -vvf rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
File: QG4t-6oOoAfdxmmT8sezCNoKGlc.mft (raw, json)
Hash identifier: 4NYF5qpDRHkSm3+S6/TBaukIANsLH/Y4Ytanxl0/onc=
Subject key identifier: 66:27:D7:35:E9:21:48:14:D3:00:D7:14:69:F8:6B:B6:F6:F1:00:AE
Authority key identifier: 40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
Certificate issuer: /CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Certificate serial: 0C6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
Manifest number: 0C65
Signing time: Tue 24 Mar 2026 18:28:27 +0000
Manifest this update: Tue 24 Mar 2026 18:28:26 +0000
Manifest next update: Tue 31 Mar 2026 18:28:26 +0000
Files and hashes: 1: QG4t-6oOoAfdxmmT8sezCNoKGlc.crl (hash: xwgSY3bzwdwoimzPGCUJXz60ehKOWDIXswv0geMPyag=)
2: 9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa (hash: QXJTF3gmhRVuHKyE6dyB12JyGZ8t4LbfInOa4El4Hps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91315C1, serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Validity
Not Before: Mar 24 18:28:26 2026 GMT
Not After : Mar 31 18:28:26 2026 GMT
Subject: CN=69c2d7cb-603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:b4:2c:a4:ea:27:88:b3:14:e1:aa:7c:d2:
2d:27:a4:40:55:cb:ef:0a:51:76:11:5b:01:91:c5:
72:93:74:70:9d:fb:8f:b7:c6:54:ec:32:1c:8e:68:
8d:48:d5:a0:96:40:98:17:68:49:32:03:7f:a5:56:
2e:5e:4f:8c:54:01:32:ce:42:1d:db:fd:2e:9c:da:
f8:c7:5f:04:de:bf:97:cc:b7:24:54:ee:d0:c4:a6:
b7:d3:02:0d:f9:13:33:a5:83:a5:60:a8:d1:0e:e0:
e9:ce:cd:b1:72:f1:47:46:c6:94:e3:fd:c3:e1:72:
a6:55:aa:6f:6c:52:82:d3:57:cd:8d:c5:13:84:d3:
5d:50:47:79:5b:6d:df:b4:d4:e9:e3:5d:28:80:0a:
72:bd:7c:62:4d:17:84:7e:7d:dc:df:f2:ac:cd:e1:
9b:90:09:0b:2f:30:d8:51:af:7d:0e:3f:ab:4d:85:
c9:b3:88:0e:eb:31:7f:c2:53:05:e4:9c:60:1e:d8:
5f:b9:2b:ce:00:19:fc:62:3e:99:a3:91:d2:59:da:
30:f8:3a:03:cf:25:33:c1:9f:a2:d5:ae:7c:48:17:
29:f1:48:78:e0:b2:a2:bc:62:52:46:48:8b:cc:aa:
20:60:f8:ff:68:b0:81:01:80:92:f7:5a:01:ae:23:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:D7:35:E9:21:48:14:D3:00:D7:14:69:F8:6B:B6:F6:F1:00:AE
X509v3 Authority Key Identifier:
keyid:40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:44:c6:cc:dc:6c:18:79:6d:a2:7e:56:3a:41:5f:d9:73:f3:
16:35:a6:d5:f7:85:50:08:ac:52:63:45:3a:e1:e8:04:14:12:
82:0a:48:b5:9d:cf:61:e9:2b:de:42:af:c2:f5:9f:fd:b7:8c:
a5:4e:eb:65:3f:90:5e:5f:4b:62:e3:fb:9c:dc:c4:3e:5b:b7:
90:ba:9e:98:87:ae:67:50:bc:68:db:d5:39:3c:eb:61:83:7b:
89:f0:1c:a1:a2:be:98:40:b6:63:82:21:74:f2:67:62:2d:aa:
43:a8:fb:d3:0c:97:7d:90:a6:4a:c9:b1:34:bc:4b:e4:78:d4:
77:d9:ce:1f:92:71:f3:04:3a:a2:af:a9:1e:d7:85:d1:f5:81:
03:45:88:e0:25:37:dc:dc:f6:b9:06:c5:38:18:55:c6:15:1e:
36:46:2b:14:09:a4:ce:2e:cd:6e:25:58:6b:9b:d2:63:2c:e4:
78:e4:0e:c3:cd:af:38:f9:c3:ff:3e:cc:05:ac:b2:45:7c:bf:
94:98:96:24:cd:f0:12:bc:e2:eb:61:31:91:b2:1f:46:76:db:
6b:4e:31:29:e4:6b:76:10:a5:15:6b:5f:ba:45:8b:c7:6c:43:
c0:f5:d5:73:0b:ce:2f:3d:6d:df:78:bd:28:09:b0:c0:b5:8a:
86:64:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:56:36 2026 by rpki-client