
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier: 4DRcdxFEL7g46WL27+Z85OWkHr7IcmSzCgCuL/lnit0=
Subject key identifier: 50:41:DB:1D:CA:0A:52:ED:8E:A1:4B:41:C8:CF:9E:12:91:5E:22:7F
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number: 0239
Signing time: Wed 25 Mar 2026 01:56:35 +0000
Manifest this update: Wed 25 Mar 2026 01:56:35 +0000
Manifest next update: Wed 01 Apr 2026 01:56:35 +0000
Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: VHRYKZc4dP40qplcVFApmJ4JOJ3Bx+U5u9VihtEwbBU=)
2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Validity
Not Before: Mar 25 01:56:35 2026 GMT
Not After : Apr 1 01:56:35 2026 GMT
Subject: CN=69c340d3-e52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:bf:24:27:be:6c:e5:91:ed:bb:6e:96:81:
95:46:ba:4b:4e:d3:45:aa:ff:8b:04:15:bc:34:f4:
c6:d9:fb:2f:c1:b4:bf:2f:8a:65:86:2f:82:71:c3:
ac:51:9b:d4:f3:18:0d:2a:4f:46:f9:91:c5:a3:92:
43:a8:0b:4b:79:8a:51:24:b1:a3:59:61:0a:6d:34:
7b:c2:2a:4f:e1:d4:7c:2b:d5:48:ed:9e:1e:45:3c:
3d:38:aa:fe:e8:03:f4:10:d0:91:b6:34:49:e0:c4:
53:5f:be:dd:fa:65:83:65:ed:da:af:a8:ad:49:5b:
88:ad:eb:02:13:0c:c1:60:83:ba:7c:9c:02:ed:78:
da:16:94:35:ca:55:e7:16:f7:d2:23:1d:97:b1:7b:
ab:38:08:ab:17:3f:b0:f4:d2:aa:36:04:ac:f4:84:
29:51:e7:a3:d8:b8:23:55:72:45:7d:d2:31:7f:f5:
2a:09:08:96:71:d6:b0:30:3b:55:89:6b:7c:0a:08:
67:52:3c:de:75:51:5f:29:dd:ed:71:e7:8e:0a:06:
19:e3:e7:8d:e0:1b:45:e2:2f:a3:cc:7a:c8:97:a2:
f2:5c:f2:1b:db:06:3b:60:46:d1:23:9f:65:4f:5a:
fa:0b:8e:99:cf:1c:00:ba:de:aa:3e:8d:64:55:9e:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:41:DB:1D:CA:0A:52:ED:8E:A1:4B:41:C8:CF:9E:12:91:5E:22:7F
X509v3 Authority Key Identifier:
keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:2a:f1:8c:8c:59:6b:3e:46:8b:1e:9c:fb:28:cb:49:4a:d6:
dc:bf:00:30:1d:f5:2c:09:7d:dc:1e:06:e1:05:05:9b:90:e8:
50:0f:b2:ab:f1:a2:8d:aa:30:50:fe:a1:ff:94:bc:49:86:b1:
4f:9f:b8:3e:a1:68:95:9a:dd:8b:1c:27:7f:cc:52:ad:ed:3f:
75:52:9b:56:f9:ad:41:35:21:46:c3:48:89:9e:a8:9c:45:e2:
df:ce:ac:0d:d7:f0:a4:5d:00:b2:5d:76:d5:b3:d5:59:bf:df:
62:38:4f:c9:4a:2a:5e:a9:7e:d1:a5:14:9b:bf:c1:79:8e:07:
a4:b1:96:01:17:77:83:08:45:58:fd:8e:2a:5c:a2:b4:40:73:
15:48:66:89:d9:cd:62:81:e9:f8:09:67:22:44:0e:7a:10:53:
be:b1:2a:5c:38:07:aa:45:f0:78:bf:fc:6a:09:a2:f7:48:da:
21:f0:bf:75:46:a2:f7:60:8e:17:63:1f:50:30:46:cf:bd:96:
17:c9:2d:cf:bf:fa:47:bb:92:8e:63:f2:75:61:6e:39:02:de:
28:dc:7e:f5:32:a3:17:fe:e9:ac:64:1e:a6:93:f6:a1:bf:9e:
7c:ec:af:d9:a5:f1:ab:33:09:f3:8d:f1:ce:8e:42:78:d1:d2:
29:28:49:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:16 2026 by rpki-client