
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json)
Hash identifier: QiYynefS/PswceFkRTxvgvBUTbm+95zTRfh3eln/Jh0=
Subject key identifier: CE:D6:9B:62:B2:64:BA:26:3F:18:F6:15:99:94:43:CF:1D:A8:60:56
Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
Manifest number: 018E
Signing time: Wed 25 Mar 2026 03:42:43 +0000
Manifest this update: Wed 25 Mar 2026 03:42:42 +0000
Manifest next update: Wed 01 Apr 2026 03:42:42 +0000
Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: KhptDhPpvJ7KZYO4ONk9br+wmI6NS0/Y+U2Ohi2CCwk=)
2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: CY7sgHFLl+nOK7TpwFje8AHE3rJopUk0iaEHtQoJM00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Validity
Not Before: Mar 25 03:42:42 2026 GMT
Not After : Apr 1 03:42:42 2026 GMT
Subject: CN=69c359b2-d45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:ca:e4:32:0d:2e:dd:8c:72:dc:02:3e:e1:
a7:dc:5c:65:1c:be:99:7e:0a:42:b9:aa:d2:60:14:
2a:2c:d7:b7:95:c8:75:79:29:67:7a:6a:70:ee:95:
65:4d:d6:29:ed:b2:b4:16:9c:bf:b0:78:33:04:03:
ad:3d:1b:a5:6c:87:05:1d:e7:f8:45:32:e6:90:ad:
67:a0:ee:b6:2c:dc:69:37:b2:85:dc:e4:0e:56:9f:
b2:14:d0:c1:d7:90:ef:be:c0:ab:d6:85:2c:b8:6c:
a9:7b:39:28:7d:bf:98:f0:28:ae:5e:30:a4:e8:54:
e5:a2:e8:97:9b:d3:a7:e5:82:36:5d:a7:82:41:3e:
de:25:2d:fa:24:2a:fb:cb:97:be:a3:1e:24:92:67:
71:72:86:36:9f:a2:73:62:4e:08:66:62:00:29:dd:
9c:06:5c:b0:ea:3d:5a:14:70:bb:73:f3:02:31:20:
af:eb:50:f4:29:b2:ab:35:32:ee:86:97:93:6a:c0:
f9:ed:90:92:a9:4a:5f:3e:38:04:53:bc:c0:56:a1:
14:e8:2b:08:db:55:37:3a:94:77:22:2c:c3:2b:40:
90:cb:b9:22:93:f2:51:1c:09:69:1f:fb:77:fc:bd:
d5:d7:b1:36:cf:ac:37:94:3f:c8:39:5b:34:38:ac:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D6:9B:62:B2:64:BA:26:3F:18:F6:15:99:94:43:CF:1D:A8:60:56
X509v3 Authority Key Identifier:
keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:53:64:32:0f:b7:38:ed:5c:b1:98:94:f4:96:e9:80:83:50:
bb:19:3e:ac:2f:0c:2a:a9:8b:3f:ce:ce:6f:65:65:5a:17:27:
92:21:2d:a5:51:01:a9:f1:b1:b8:25:74:6d:b1:a1:53:fb:28:
cb:78:40:fb:9c:36:ff:29:d0:a6:2b:3c:77:8b:cf:b5:55:22:
ba:6d:6a:94:d4:8f:2f:e3:b3:c2:c3:46:e6:75:e6:be:37:e4:
2b:b6:96:29:34:53:76:45:5b:d0:2d:d5:32:63:29:08:c5:4f:
cf:69:ec:f5:09:bb:67:a2:9d:be:7b:d4:d9:0b:18:33:15:6e:
d0:ef:86:6d:b2:a1:a4:1f:14:36:5e:3d:cb:56:ab:3b:40:a6:
65:c9:6e:d7:08:77:07:86:2e:a3:fe:ea:55:da:c5:78:1b:87:
ad:f0:6d:ef:96:d7:8c:48:55:98:15:12:2e:33:b9:4f:0b:8f:
e0:e9:e3:4b:5c:31:80:8b:d4:23:ff:69:0d:ac:24:d7:a2:dd:
26:b6:b2:12:a3:aa:2b:4f:9f:ee:e3:e3:17:34:5a:45:c6:13:
34:84:9b:36:44:f4:ce:20:1b:39:1a:4b:3e:0a:92:05:e8:2c:
c8:d4:cd:6a:8f:3b:ff:57:80:2f:e3:ba:11:c6:07:79:53:bf:
7d:b8:68:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0
M0I3OUJEOTMwHhcNMjYwMzI1MDM0MjQyWhcNMjYwNDAxMDM0MjQyWjAYMRYwFAYD
VQQDEw02OWMzNTliMi1kNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptLK5DINLt2MctwCPuGn3FxlHL6ZfgpCuarSYBQqLNe3lch1eSlnempw7pVl
TdYp7bK0Fpy/sHgzBAOtPRulbIcFHef4RTLmkK1noO62LNxpN7KF3OQOVp+yFNDB
15DvvsCr1oUsuGypezkofb+Y8CiuXjCk6FTlouiXm9On5YI2XaeCQT7eJS36JCr7
y5e+ox4kkmdxcoY2n6JzYk4IZmIAKd2cBlyw6j1aFHC7c/MCMSCv61D0KbKrNTLu
hpeTasD57ZCSqUpfPjgEU7zAVqEU6CsI21U3OpR3IizDK0CQy7kik/JRHAlpH/t3
/L3V17E2z6w3lD/IOVs0OKzOFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7Wm2Ky
ZLomPxj2FZmUQ88dqGBWMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB
MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w
LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALFNkMg+3OO1csZiU9JbpgINQuxk+rC8MKqmLP87Ob2VlWhcnkiEtpVEBqfGx
uCV0bbGhU/soy3hA+5w2/ynQpis8d4vPtVUium1qlNSPL+OzwsNG5nXmvjfkK7aW
KTRTdkVb0C3VMmMpCMVPz2ns9Qm7Z6KdvnvU2QsYMxVu0O+GbbKhpB8UNl49y1ar
O0CmZclu1wh3B4Yuo/7qVdrFeBuHrfBt75bXjEhVmBUSLjO5TwuP4OnjS1wxgIvU
I/9pDawk16LdJrayEqOqK0+f7uPjFzRaRcYTNISbNkT0ziAbORpLPgqSBegsyNTN
ao87/1eAL+O6EcYHeVO/fbho4w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:34 2026 by rpki-client