
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier: Gb8qptGpQpiEOJ/kgmUwYNHTzouylr1fvVzozl/mv+M=
Subject key identifier: D0:B9:4E:96:CA:34:AB:5E:1C:0A:ED:0B:FA:87:A8:61:3A:44:66:46
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number: 0152
Signing time: Wed 25 Mar 2026 04:23:57 +0000
Manifest this update: Wed 25 Mar 2026 04:23:57 +0000
Manifest next update: Wed 01 Apr 2026 04:23:57 +0000
Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: LNJ3b1ohL8e4PQTCSJqsF0MGbbd2jtj2mIOq1ltLXfg=)
2: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: FcyMfOj2hcMJUJHyK83l34d3Lj+tu/xZiBykgdbj9QM=)
3: C06D45B6961611F0870D4413C4F9AE02.roa (hash: hIpv58h7Px9PA6uLUl6YRPJ1ini2ySNj91INQdwC5XY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Validity
Not Before: Mar 25 04:23:57 2026 GMT
Not After : Apr 1 04:23:57 2026 GMT
Subject: CN=69c3635d-cf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:db:63:15:ec:46:e0:b4:f8:71:f7:6f:33:
22:de:b4:5a:d6:38:6e:32:6b:8b:1b:36:ba:e6:58:
3e:c0:51:23:35:cd:24:04:13:a2:a9:df:34:41:3a:
6d:0f:b8:12:66:fe:ca:e2:2d:b7:07:88:27:3a:31:
2e:10:7a:85:75:53:aa:f4:cf:92:44:4c:54:4c:c8:
f7:2a:ac:8a:13:b7:37:10:d6:f0:4d:81:af:a1:e6:
73:94:e4:47:d1:30:ff:d7:45:64:29:fb:76:b7:75:
f6:7c:f4:90:ba:3b:40:2b:3e:92:d0:7e:7f:8d:f1:
89:48:3e:fd:86:01:7a:27:01:4a:0d:d4:64:34:e2:
04:05:cd:5d:8d:22:70:3d:ab:d0:67:f2:7f:fd:60:
cc:1c:58:f2:9a:98:47:b1:c8:04:a6:22:10:81:a8:
54:a1:a9:9f:ed:1f:23:ac:0e:31:1c:b6:00:2e:ec:
b5:78:86:1a:c4:ff:17:12:47:2f:6a:89:9f:28:3b:
96:f8:8d:f7:93:f6:c4:ab:d6:5d:3c:c8:eb:bf:e7:
c7:c4:3b:47:9f:66:29:f6:35:33:bb:8c:bb:06:9f:
11:cb:99:4e:21:31:4f:b6:94:81:9c:fa:4b:40:e1:
0a:28:e2:f6:89:d6:7d:66:3b:10:4b:99:db:64:af:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:4E:96:CA:34:AB:5E:1C:0A:ED:0B:FA:87:A8:61:3A:44:66:46
X509v3 Authority Key Identifier:
keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:46:f9:7b:c1:14:46:87:0d:d8:0b:12:e6:b2:6c:27:c7:bd:
00:60:2e:92:af:b6:32:b8:37:92:15:f6:d9:c9:2b:ef:6f:26:
b8:63:f3:33:ac:18:55:10:5c:7f:fa:d2:b5:db:7a:b5:b8:79:
89:d3:95:3f:4e:74:43:f1:21:c2:41:0b:b6:46:08:f2:60:cb:
61:0d:2e:77:b1:cb:45:6d:b5:40:15:e9:fb:f9:dd:9a:62:f0:
52:d1:cb:fa:6e:08:aa:2a:30:23:3d:a3:cf:db:d9:5d:44:14:
81:98:e9:03:32:7d:02:46:a0:f6:78:c5:25:d5:28:38:ab:ea:
f5:17:6b:86:15:3e:07:c9:e4:d5:3f:52:0e:ac:30:7e:ae:56:
09:64:53:64:fa:79:28:bb:7c:a0:a5:28:a5:5e:1c:fa:cd:df:
29:b7:b9:b2:ee:aa:01:db:7b:b3:2a:76:07:5a:03:19:70:58:
8b:c2:25:9e:78:9f:14:59:04:57:30:50:c2:36:0a:33:81:6b:
22:4d:34:89:38:25:14:f8:f8:2d:d5:72:0b:e4:4d:1a:17:4a:
63:bc:96:bf:46:fb:56:a8:92:2b:d0:1f:27:c2:a6:53:ab:3a:
22:dd:50:07:ae:8f:03:d1:ff:77:ba:a2:34:86:da:ff:7b:eb:
34:13:ef:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:04 2026 by rpki-client