
$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json)
Hash identifier: DFek8UauwZpDxYRIRWkpq7zur+YWBIbf7iZ9URgld5U=
Subject key identifier: EE:D2:57:0F:CD:2D:7E:66:24:D1:30:19:00:09:E7:A0:7A:BE:4A:6E
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial: 082B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
Manifest number: 0822
Signing time: Tue 24 Mar 2026 20:45:10 +0000
Manifest this update: Tue 24 Mar 2026 20:45:10 +0000
Manifest next update: Tue 31 Mar 2026 20:45:10 +0000
Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: MxecbuI0ztD7qToiIpFC9Vj7JzeYXyP0cI7kiH5WhVg=)
2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: DBVP47MzkA4zExAYz5BkJLhWa09IKcrwIj4PmXTVqgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Validity
Not Before: Mar 24 20:45:10 2026 GMT
Not After : Mar 31 20:45:10 2026 GMT
Subject: CN=69c2f7d6-928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:84:e0:4b:07:25:2e:85:fb:ee:08:79:ea:
2c:5e:f7:9d:3f:86:84:84:cc:9a:06:d1:a4:e8:9a:
af:8c:f3:52:63:0f:24:d2:f1:b3:e0:25:26:4f:61:
bf:28:d8:af:be:bb:31:66:31:5f:10:58:4d:71:04:
80:72:0e:45:85:50:09:07:9b:27:0b:1a:84:6a:3a:
f7:8f:0b:1d:4f:32:8f:d3:fb:29:f2:a8:e6:cb:c1:
fa:8e:81:96:b7:aa:d1:b8:7f:2a:49:a7:d1:c2:f0:
c7:56:6a:e8:61:45:dc:11:67:6d:73:be:81:3d:e5:
9e:b0:d9:72:88:b1:8d:d8:44:98:74:d5:ac:6d:8f:
5d:df:91:48:b4:0c:bc:45:33:b0:21:ce:b8:78:43:
54:19:d3:47:7b:1d:37:18:39:90:39:9b:bd:02:97:
37:02:25:10:78:ca:39:7a:0e:54:25:9d:7b:29:0e:
7c:88:71:26:42:22:ae:4a:bf:3c:b8:58:c5:7a:a6:
69:20:23:1b:0d:10:02:fa:57:93:01:11:3f:cf:21:
3b:d1:ab:35:b7:a6:cb:53:cf:8e:ae:c0:b4:8e:0b:
23:5f:d9:83:61:75:c5:e6:9f:13:15:a9:96:a0:74:
66:5f:2c:eb:da:08:0e:87:7d:5a:80:cc:32:1b:9b:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:57:0F:CD:2D:7E:66:24:D1:30:19:00:09:E7:A0:7A:BE:4A:6E
X509v3 Authority Key Identifier:
keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:53:fc:66:a9:77:6a:0c:40:7b:67:09:7c:10:e1:f2:36:81:
c3:6c:fa:0b:af:bd:f9:25:62:f1:a4:b7:26:0a:b6:5b:b6:46:
d9:84:c5:ac:79:11:c5:f0:34:07:ef:da:68:af:68:36:40:99:
11:5b:ba:e2:66:5c:75:fb:62:30:30:8a:b3:da:fb:b9:52:25:
d7:2a:e4:3f:7c:07:8a:5d:8c:d1:d6:92:07:28:f8:2d:7f:87:
f2:98:09:3f:2e:36:d3:48:b3:92:75:ff:78:b9:86:9b:68:50:
93:54:6b:7e:4d:85:1d:d4:44:af:fb:17:de:f2:aa:2c:9f:2f:
78:74:6b:96:19:a9:00:c0:93:fc:b7:4f:7f:14:09:9c:16:6d:
25:08:8f:be:46:7f:8e:85:de:22:a3:29:58:7c:3d:45:01:ea:
04:5d:3d:b4:28:d9:31:44:1f:ae:32:c8:59:17:05:5f:4a:f3:
be:84:81:df:e0:91:2f:45:ac:db:7a:aa:19:d9:ee:1b:dd:9a:
41:e4:75:8f:58:1e:b7:12:86:85:b5:5a:b1:77:79:aa:50:ca:
e6:cd:b8:63:61:dd:89:39:56:cb:53:5b:a0:a5:68:1e:d2:78:
2c:1a:bc:48:75:7f:7e:95:21:8b:fb:7f:c6:4b:d5:23:c0:91:
18:e9:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:54 2026 by rpki-client