
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
File: QuOGLXRTXCypqrN6cZW1keruIeU.mft (raw, json)
Hash identifier: /o4kqYYOSet4G1UHubEpgzDwFWsj7T2qxebqws6W6eE=
Subject key identifier: D3:0B:AB:5F:FC:EB:1D:6B:E4:20:70:15:5A:D5:5E:28:CD:7C:AD:1A
Authority key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
Certificate issuer: /CN=A91580E4/serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
Manifest number: C3
Signing time: Wed 25 Mar 2026 06:12:14 +0000
Manifest this update: Wed 25 Mar 2026 06:12:14 +0000
Manifest next update: Wed 01 Apr 2026 06:12:14 +0000
Files and hashes: 1: QuOGLXRTXCypqrN6cZW1keruIeU.crl (hash: 5aNgqKh7nnsiOA4nETHDm5AK3n/4j5U8JyGJ6X2TS3k=)
2: DE48485AACF611F09C3A4F81C4F9AE02.roa (hash: EhLtjwLZ+Dr7EEwEpRzlBMOlnmocFIjRr9S90aPLAzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl
rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Validity
Not Before: Mar 25 06:12:14 2026 GMT
Not After : Apr 1 06:12:14 2026 GMT
Subject: CN=69c37cbe-81ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:b2:13:55:2a:d4:f2:c2:b0:08:0a:d2:e1:
ce:f0:1b:c9:6b:d4:f7:b3:06:26:77:c5:36:d0:02:
22:72:b2:a6:87:0c:08:12:ef:23:ac:94:52:74:45:
64:cc:07:59:c7:9e:b7:18:bd:b6:69:78:e7:b5:8f:
05:3e:3e:f6:1a:46:71:f4:19:ff:0d:39:cd:fc:79:
7b:a9:c2:ce:f4:43:a7:6a:d7:0c:60:d6:71:27:3c:
6f:4f:dd:86:dd:ec:7b:89:b8:7e:dd:7a:14:24:4c:
46:f7:cc:f7:b9:ae:c0:d4:34:be:b5:4d:8b:6a:32:
dd:eb:2c:dd:32:97:03:52:72:fa:5b:96:4d:8f:a1:
a6:90:86:8e:8c:0e:9e:d4:fc:00:fc:38:54:6b:49:
60:01:46:7a:44:f7:da:60:c2:d3:3b:9f:6f:5e:7f:
17:d0:64:70:42:b5:29:b6:f0:89:29:1b:9d:16:8d:
da:15:b9:36:d9:ad:54:af:42:dd:0b:fd:ba:2e:5f:
9e:80:ae:a2:fb:e7:ae:8e:15:fb:cc:24:f2:9a:92:
c4:25:59:91:21:67:64:aa:21:26:5a:c6:e6:da:9e:
b3:f9:7e:e3:52:23:1e:e8:21:dc:4e:5e:25:f9:2c:
37:dc:24:52:2e:30:ab:47:01:bb:b1:3d:14:0f:a3:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0B:AB:5F:FC:EB:1D:6B:E4:20:70:15:5A:D5:5E:28:CD:7C:AD:1A
X509v3 Authority Key Identifier:
keyid:42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bb:fa:2d:41:c4:4a:41:70:eb:49:b2:5b:70:cc:bb:a5:9b:
02:8e:e0:4f:0e:58:bc:da:e0:fa:54:fe:5e:50:c2:39:6e:1e:
e6:9f:ef:d0:22:57:5c:a7:b6:a9:e7:eb:fc:a6:4d:e1:4a:43:
c0:ef:44:c2:8d:01:4d:8c:29:89:be:42:6a:46:5c:5a:e5:c8:
a5:b4:0b:4d:6b:70:2e:94:d1:4d:d3:be:36:fa:c1:13:e2:de:
4b:1f:a5:e1:ac:e6:e2:ba:bb:f1:e5:54:87:da:d3:2d:c4:da:
22:6d:ac:60:67:85:87:01:05:b4:eb:3c:5c:51:9f:1d:da:84:
8e:43:a5:0b:c7:bc:f2:48:da:ce:70:6b:a2:03:04:c5:7a:f2:
6b:e3:b0:1d:d9:96:84:4f:3d:b0:2a:fb:c9:92:7e:f4:f4:b1:
1b:8d:1b:7a:a0:a1:55:83:83:f6:32:08:6f:ce:74:fa:68:65:
b1:11:87:8b:22:58:e9:57:f8:20:7f:d2:9b:da:00:24:38:e1:
8b:72:32:62:26:3b:f1:70:07:21:c3:37:17:73:12:18:e6:c6:
c4:dc:31:64:f8:e1:6e:79:68:94:06:f3:ed:eb:a5:45:bd:26:
1b:85:4a:6a:d6:c4:1e:64:2a:33:64:f1:ff:da:a5:43:2a:e8:
d2:0c:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:51 2026 by rpki-client