
$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File: qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier: pFnJJr+RyXbMUtjHSiO+vkNR9ATknSxDPwUtp3ZPKw8=
Subject key identifier: F5:3E:9E:B9:BA:CE:37:38:47:F5:34:A1:39:47:E2:3E:D1:89:FC:EA
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer: /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial: 2D6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number: 2D30
Signing time: Thu 26 Mar 2026 15:31:56 +0000
Manifest this update: Thu 26 Mar 2026 15:31:56 +0000
Manifest next update: Thu 02 Apr 2026 15:31:56 +0000
Files and hashes: 1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: NS5wfXhcVn/S/MHK1aZUnKcxp2vtYZsFF0oZDq90zT8=)
2: 8FFA11F41B4A11EFB2A0D360C4F9AE02.roa (hash: o3Mwhp/lGZJZN6p8Sqo/StNY796IswQpJX8T7rJIJpo=)
3: 70FD3F6A5B1811F0B719DE67C4F9AE02.roa (hash: C09oV5jQIUq6pmxrsM/hlngK2BpYRakMeU6YGhYQJhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11626 (0x2d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Validity
Not Before: Mar 26 15:31:56 2026 GMT
Not After : Apr 2 15:31:56 2026 GMT
Subject: CN=69c5516c-a78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:fc:56:61:1a:1a:f2:ee:56:dd:b7:e5:f4:
bc:af:33:2e:e3:62:c2:6f:92:b4:8f:c0:81:da:ab:
3b:f9:61:0e:f6:e9:fe:cb:a7:4c:e9:14:ee:9b:94:
49:94:a1:0b:c2:f9:d3:3b:b4:7f:f3:30:39:81:ba:
fd:15:2a:ca:8a:90:65:5e:7c:bf:2e:4e:e4:b6:ed:
b6:fb:c6:31:c3:9f:8d:e2:4b:7e:01:e7:a6:8d:b5:
0d:51:48:51:7e:bb:b0:60:78:28:ab:d1:c9:57:d5:
5d:80:fb:0b:24:27:43:b9:9c:cc:c8:e1:1e:78:45:
f8:57:0d:fb:f5:44:58:e2:b2:d9:55:8d:0f:98:e5:
28:19:9f:ce:68:e3:26:58:db:2e:85:f5:9c:0a:a9:
9b:72:52:01:8f:45:e5:51:23:14:41:03:e0:69:27:
4a:f4:43:0a:0f:b1:46:6f:5e:00:2f:1e:f0:f2:28:
b7:27:61:be:7d:7e:b0:81:c8:e5:cf:ee:4c:bd:42:
7b:3b:a6:f1:55:64:64:99:45:b2:ed:e5:29:dd:64:
f5:12:3e:c4:f1:23:39:07:83:2d:42:73:b3:04:d6:
2e:f0:f6:ce:92:6f:5d:e0:34:09:2c:3f:59:b9:9a:
da:ca:0c:7e:f0:d0:b5:de:e7:10:ad:60:71:c3:13:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:9E:B9:BA:CE:37:38:47:F5:34:A1:39:47:E2:3E:D1:89:FC:EA
X509v3 Authority Key Identifier:
keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cd:cf:38:ae:54:0d:23:33:79:ec:69:87:e7:ea:28:d9:ef:
91:25:d5:14:ea:8b:98:07:ef:48:d4:10:06:45:a7:56:d2:ae:
00:cb:35:b1:bf:be:9d:1e:36:79:0a:90:46:55:3e:56:e6:59:
fd:dc:de:aa:30:05:9c:64:e7:4c:3c:49:7e:42:bc:39:06:d1:
aa:49:b7:cb:1f:c9:20:1c:67:48:45:75:68:0e:7f:b8:9c:85:
21:f5:cc:7a:4a:32:f6:f9:00:0f:8a:34:6c:27:ff:e9:df:4e:
87:14:14:a1:4a:56:b7:5e:db:c5:5a:86:9e:27:4e:8d:83:5c:
54:73:08:4d:27:a6:78:94:fc:ed:81:d4:6f:2f:6a:14:86:95:
2b:73:4e:ee:73:4e:00:ba:48:67:ac:8c:1d:bc:9a:35:f9:ca:
11:40:ab:72:d2:78:6c:44:43:72:60:83:fb:4a:10:c2:30:12:
0b:a3:1f:38:8b:ed:d7:ca:ad:56:e1:5d:4e:aa:f4:da:66:8b:
fe:77:18:c7:20:9f:cb:f2:e2:da:24:5f:3a:82:91:dd:f7:68:
81:f1:33:7c:16:87:c5:aa:e5:cd:d9:43:ba:74:d4:6a:55:eb:
31:56:56:c7:5d:fc:02:f5:05:10:bf:d0:01:47:e0:5c:9f:b0:
ee:a3:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:08:14 2026 by rpki-client