
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json)
Hash identifier: Q7r+ZUYDmaFJsmi3+ydI2RlGsMIOuAbjF++2gcD+PG4=
Subject key identifier: 10:1F:6A:A9:6F:48:F5:5C:0C:6A:14:09:AD:79:5C:E4:31:06:55:CC
Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
Manifest number: 88
Signing time: Wed 25 Mar 2026 06:51:28 +0000
Manifest this update: Wed 25 Mar 2026 06:51:27 +0000
Manifest next update: Wed 01 Apr 2026 06:51:27 +0000
Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: /eQpYfuBNhjH7RXzlSrnUpssb/qKG6sOx67ctpbqofU=)
2: 4DB1CEBCF44311F08E818BA85F6F56BC.roa (hash: 28TOJyzIUoQ+gHS12Ia30yDze1P2PrrZaNrtbhDyvQI=)
3: 85B52606F44311F089BA68A95F6F56BC.roa (hash: Ex29dRzH8LkzDGimmK0Vm7ywjUej+dvGo6cnaEEBQnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Validity
Not Before: Mar 25 06:51:27 2026 GMT
Not After : Apr 1 06:51:27 2026 GMT
Subject: CN=69c385f0-7a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:99:15:59:be:e3:cd:53:ff:58:9b:e7:db:
57:e0:cb:8b:47:6d:f7:9e:ff:b6:f2:58:6d:1b:05:
d3:d2:2d:cc:3a:67:5c:00:8a:27:f4:bf:3e:52:c3:
97:62:97:3b:7f:c7:e0:6d:3a:d9:39:01:f3:85:ff:
0f:89:06:06:3e:5c:e3:d6:0c:a4:5c:dc:f8:df:73:
13:1f:16:5a:f6:f3:26:70:a9:41:90:8d:01:bb:49:
31:26:7b:62:b4:1f:2a:fe:de:da:75:2f:32:ce:09:
d4:7f:91:c9:a2:61:28:24:99:70:e7:f3:17:32:87:
ec:ff:1d:c4:3c:05:7d:e3:3a:34:a4:da:8b:5b:ae:
22:d0:53:a1:ae:19:2f:81:32:79:cb:91:98:08:a8:
49:ef:f2:73:84:da:11:45:83:fc:9b:8d:5f:64:e5:
9c:2a:d7:f4:77:1d:76:4a:fd:df:3b:85:7a:d0:cf:
42:88:da:b7:28:a6:cb:e3:7e:dd:55:0f:41:b8:a7:
5a:41:09:9a:6b:7e:20:c7:d9:51:a0:21:73:32:9f:
e6:59:7e:86:9d:fe:a0:bb:2b:54:75:da:6e:af:83:
d5:55:8d:3d:0c:28:c2:64:bb:e5:b9:c8:07:67:f1:
69:97:cc:30:f5:04:36:98:92:ba:6f:4f:3f:23:f7:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1F:6A:A9:6F:48:F5:5C:0C:6A:14:09:AD:79:5C:E4:31:06:55:CC
X509v3 Authority Key Identifier:
keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:43:71:4f:99:0c:16:58:c4:fa:a5:47:fb:08:81:36:71:c1:
19:f5:f9:82:f9:0a:fb:51:31:f3:44:93:e1:b8:22:5e:54:f1:
25:f3:9e:ba:e5:be:d9:3a:0a:49:83:9b:f7:76:a3:4d:93:72:
af:02:48:75:18:5a:1e:49:d3:01:86:84:f6:30:d3:f3:1a:ba:
e3:c5:0e:d5:d5:f8:68:4a:e4:0f:14:9c:de:d3:a4:35:12:73:
6f:46:36:1f:b5:93:b3:e5:d7:c3:6e:d2:bc:05:48:c7:f5:30:
1b:06:16:16:3e:42:70:e8:1f:37:e4:c9:f3:3c:43:01:30:e5:
b5:5b:b8:5c:d3:c6:4c:ae:c2:63:67:dc:bb:a4:d6:7a:17:79:
35:ff:88:97:47:b7:47:2a:c5:ff:44:6e:e2:c7:c3:f8:1e:12:
1d:eb:2f:ce:69:7b:89:20:cf:86:ce:18:ea:77:a3:fe:c5:dd:
60:83:08:fd:e3:73:f4:5f:eb:72:ea:85:99:8f:42:84:23:ec:
e9:c1:d3:65:91:17:b9:ff:52:15:0c:d2:15:cd:7f:29:01:05:
40:60:77:74:bf:59:6a:d0:62:9a:90:10:87:2d:52:57:dd:70:
3e:28:29:8a:f7:cf:cb:a7:ce:a9:2f:46:4b:41:71:ef:c8:12:
83:63:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:07 2026 by rpki-client