
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
File: QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft (raw, json)
Hash identifier: BHXRuTBqQD4mBE5/RmEsJxAlAlmHmCLJnOnvgXRJ/WE=
Subject key identifier: 6F:08:84:A9:20:A8:4A:9C:DB:2B:53:1A:F7:1C:43:A7:3B:CC:D6:D4
Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
Certificate issuer: /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
Manifest number: 87
Signing time: Fri 27 Mar 2026 07:10:08 +0000
Manifest this update: Fri 27 Mar 2026 07:10:07 +0000
Manifest next update: Fri 03 Apr 2026 07:10:07 +0000
Files and hashes: 1: QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl (hash: ARCBPRQ4WLBmNNGwbgFnz9EA7zZQTlJMxHdfILJQll8=)
2: C5B717905EDA11F0A5EAB579C4F9AE02.roa (hash: vV//1EEbPUz/O65Gy1tJMCCtU1GCZgX+F9nxMGWvmXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Validity
Not Before: Mar 27 07:10:07 2026 GMT
Not After : Apr 3 07:10:07 2026 GMT
Subject: CN=69c62d4f-2a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:fa:27:04:81:98:bd:8b:ce:91:d8:ef:f5:
dd:75:06:60:e9:69:b8:dc:58:cc:a6:a3:6d:20:cf:
98:17:f2:d6:03:8d:ec:0f:ce:90:5c:3f:81:e9:5c:
eb:5c:74:a1:e7:f7:8b:fe:24:8f:46:f5:65:21:91:
78:2e:55:e5:71:db:cf:ac:eb:2b:fc:42:b0:7b:65:
6f:88:bd:e5:81:d6:4d:3e:60:97:8f:c3:f9:ba:e1:
b3:82:4f:eb:36:9d:81:82:88:8f:c1:b9:f2:7e:62:
e2:b5:09:23:95:30:30:aa:04:95:4e:a0:e7:f4:ee:
58:46:b1:80:08:3e:68:a2:0e:1f:e3:c6:b0:4b:45:
e3:ce:7f:c7:f1:a9:79:ea:61:f3:71:5d:9b:4d:e4:
dc:a1:c8:ba:79:e1:a6:bf:a6:74:b0:fa:62:d3:d0:
f8:61:2b:9e:39:d3:4b:35:bb:83:c3:b5:94:fb:6e:
61:61:73:68:1e:7c:72:f2:31:60:d8:14:cf:01:72:
71:e9:2e:79:d2:37:ce:92:da:cc:b7:a9:d2:c2:2e:
6a:73:68:a7:f2:b7:14:8f:db:5b:a8:3e:78:32:1b:
17:d6:27:ac:aa:29:0f:6d:40:9e:67:1a:34:8c:15:
79:05:86:5b:a7:54:39:c1:39:9f:a6:b4:03:ba:61:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:08:84:A9:20:A8:4A:9C:DB:2B:53:1A:F7:1C:43:A7:3B:CC:D6:D4
X509v3 Authority Key Identifier:
keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:61:e5:f4:93:d0:67:e6:9d:7e:56:83:8a:b0:5f:6b:30:44:
89:8c:18:ad:b2:6e:b5:a6:ef:21:17:7a:b7:69:ee:55:2c:b5:
1b:ee:92:26:59:b0:79:cb:25:d8:04:0b:75:80:07:ca:58:64:
5e:d1:29:e1:b5:ed:63:da:1b:63:b7:95:74:52:14:1b:bc:e9:
33:f9:61:bd:1a:45:8f:91:53:33:61:76:6a:82:8f:79:5e:cf:
a2:16:29:1e:4f:d7:c0:a3:c6:66:1a:45:16:c4:49:2c:f9:a6:
2e:e5:a5:27:84:ba:c5:00:7d:38:29:48:49:a6:1a:92:81:0d:
25:7b:69:85:f3:e9:34:66:a0:0d:4a:7e:ed:55:6a:00:65:fd:
a6:ab:eb:8e:8e:33:c1:78:a9:04:88:e2:fd:c2:23:98:6e:79:
2c:96:23:7f:ee:7a:ac:08:3e:8d:b5:45:ea:33:18:97:f3:01:
19:a4:c7:d9:6c:8b:82:85:f5:b3:a5:ae:07:cf:19:e8:24:4a:
c7:c7:30:30:d0:0a:a2:7a:d3:f1:29:bf:de:9b:f8:44:3a:cd:
86:db:3e:71:a4:7f:e3:81:53:59:79:33:11:06:71:66:6a:fb:
21:2a:7f:6b:2c:c0:f3:23:21:4b:0a:53:78:c0:1a:e8:e4:ea:
9b:83:86:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI1REYxMTAvBgNVBAUTKDQxQjQzNDkxNUE0OTE5RENFRjU3RDY5NzdDNDA0ODBE
RkMzMTEzNEQwHhcNMjYwMzI3MDcxMDA3WhcNMjYwNDAzMDcxMDA3WjAYMRYwFAYD
VQQDEw02OWM2MmQ0Zi0yYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApiP6JwSBmL2LzpHY7/XddQZg6Wm43FjMpqNtIM+YF/LWA43sD86QXD+B6Vzr
XHSh5/eL/iSPRvVlIZF4LlXlcdvPrOsr/EKwe2VviL3lgdZNPmCXj8P5uuGzgk/r
Np2BgoiPwbnyfmLitQkjlTAwqgSVTqDn9O5YRrGACD5oog4f48awS0Xjzn/H8al5
6mHzcV2bTeTcoci6eeGmv6Z0sPpi09D4YSueOdNLNbuDw7WU+25hYXNoHnxy8jFg
2BTPAXJx6S550jfOktrMt6nSwi5qc2in8rcUj9tbqD54MhsX1iesqikPbUCeZxo0
jBV5BYZbp1Q5wTmfprQDumEP3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8IhKkg
qEqc2ytTGvccQ6c7zNbUMB8GA1UdIwQYMBaAFEG0NJFaSRnc71fWl3xASA38MRNN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjVERi9FRjRBRDQ1MjVF
RDUxMUYwOUNGMUQ1MENDNEY5QUUwMi9RYlEwa1ZwSkdkenZWOWFYZkVCSURmd3hF
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FiUTBrVnBKR2R6dlY5YVhmRUJJRGZ3eEUwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjVERi9FRjRBRDQ1MjVFRDUxMUYwOUNGMUQ1MENDNEY5QUUwMi9RYlEwa1ZwSkdk
enZWOWFYZkVCSURmd3hFMDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZmHl9JPQZ+adflaDirBfazBEiYwYrbJutabvIRd6t2nuVSy1G+6SJlmwecsl
2AQLdYAHylhkXtEp4bXtY9obY7eVdFIUG7zpM/lhvRpFj5FTM2F2aoKPeV7PohYp
Hk/XwKPGZhpFFsRJLPmmLuWlJ4S6xQB9OClISaYakoENJXtphfPpNGagDUp+7VVq
AGX9pqvrjo4zwXipBIji/cIjmG55LJYjf+56rAg+jbVF6jMYl/MBGaTH2WyLgoX1
s6WuB88Z6CRKx8cwMNAKonrT8Sm/3pv4RDrNhts+caR/44FTWXkzEQZxZmr7ISp/
ayzA8yMhSwpTeMAa6OTqm4OG2g==
-----END CERTIFICATE-----
Generated at Fri Mar 27 09:09:02 2026 by rpki-client