
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier: RbLQrjvJT0VchoBvHmFW091CyL+N/6QS0S7+0aESDqo=
Subject key identifier: CF:56:05:59:92:25:5A:30:17:E0:A2:F5:94:6C:C9:96:23:E3:94:6B
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number: 01BB
Signing time: Wed 25 Mar 2026 03:09:21 +0000
Manifest this update: Wed 25 Mar 2026 03:09:20 +0000
Manifest next update: Wed 01 Apr 2026 03:09:20 +0000
Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: cppQC3XfRSCsoCwjxZtiqKmHuHAzsqUtYV5XzFQxvZQ=)
2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Validity
Not Before: Mar 25 03:09:20 2026 GMT
Not After : Apr 1 03:09:20 2026 GMT
Subject: CN=69c351e0-d1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:bc:de:6c:a7:9d:e0:aa:3a:68:58:8c:e1:
6f:f8:41:34:0a:83:6e:ad:cf:01:fd:d0:a0:9b:b4:
5f:86:0e:16:8f:e3:15:e8:e7:71:ba:09:b6:d8:85:
62:69:e0:bf:b1:03:ad:31:cf:b0:e3:cc:72:83:09:
66:34:61:6d:05:38:1f:2e:f9:17:21:85:ca:99:55:
ff:db:96:65:e2:ea:a1:d1:ea:ac:f9:a1:01:1d:88:
4b:db:66:7e:40:f4:3b:3c:91:a8:4d:0b:b5:46:5a:
9c:f9:d0:45:e8:4f:d0:55:74:f2:1d:d1:02:ac:27:
c4:7e:11:e3:e5:c9:72:6e:75:ab:e6:a7:2a:0d:68:
e4:38:06:ef:62:49:92:6d:dc:ef:b4:f4:6a:26:e6:
d3:9d:1d:d3:8b:bb:a7:a5:11:b4:02:43:04:9c:94:
07:5b:a5:3f:cb:cf:35:4d:f4:56:90:48:86:ab:35:
6b:31:b6:c6:04:4a:9f:61:d8:18:cb:e9:44:d9:9f:
94:47:e8:85:e1:b6:8a:e3:60:4d:26:f3:94:14:db:
c7:9f:7a:6d:45:8f:03:7a:5c:33:8c:ce:5f:a1:a0:
7e:9d:2f:d3:b8:ef:b4:a4:bc:a2:32:68:f1:a8:09:
d0:53:ef:4a:fa:5c:ad:4b:5e:d3:4c:78:42:60:83:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:56:05:59:92:25:5A:30:17:E0:A2:F5:94:6C:C9:96:23:E3:94:6B
X509v3 Authority Key Identifier:
keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:1e:67:e6:aa:c4:48:ae:32:31:a5:8e:2e:2b:e2:1a:0d:47:
d3:60:62:cf:fd:62:a9:aa:ae:f2:10:cb:a7:8d:53:f3:a9:70:
07:b7:8f:87:9b:1d:61:6a:43:ab:93:67:a2:f2:2c:8b:7d:c0:
3f:30:cb:f5:01:e6:9e:5c:4d:88:c8:85:32:8e:c8:13:9e:5d:
af:22:7d:fd:fc:8d:98:b5:b7:55:0d:07:2e:13:36:87:52:bb:
aa:d0:b3:22:72:02:cb:af:47:10:89:cb:c9:2a:96:d7:51:83:
8d:e7:ce:9d:b8:27:d9:cc:73:27:ab:1c:8b:89:aa:55:1d:2b:
f2:4a:64:a4:d8:c6:d2:43:8b:41:27:11:8c:89:34:78:5e:bd:
15:e0:ed:be:5d:19:68:23:ee:65:9a:27:ab:2c:50:20:2e:37:
89:28:f0:5e:84:4a:2d:6c:08:de:f3:b1:8d:df:78:d7:6c:07:
94:76:a7:79:db:fc:43:3f:7a:58:37:5b:ac:98:3d:cd:08:07:
5f:1c:69:fc:b2:53:b7:40:d7:cc:70:7d:86:77:12:31:3c:c5:
03:a1:ad:fb:7e:cd:ce:f0:ad:2b:76:7f:3b:24:15:7c:b7:cc:
70:56:54:76:60:64:f0:50:e6:59:ff:d0:00:cc:f5:bf:e3:0b:
ed:2a:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:13 2026 by rpki-client