
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier: xsPYMrrsNssynAbt6YCkUw806FD6JOvHJE59B5VKvi4=
Subject key identifier: 72:57:3A:C8:58:1D:7B:C3:3B:22:DA:9D:E1:5C:60:20:BB:69:61:91
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number: 01CD
Signing time: Wed 25 Mar 2026 02:59:48 +0000
Manifest this update: Wed 25 Mar 2026 02:59:48 +0000
Manifest next update: Wed 01 Apr 2026 02:59:48 +0000
Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: nXIuXEbZjvi1ZFYoVg9l0G871gEEychjSHLvwYyWhhQ=)
2: 294325DC699711EEB317603DC4F9AE02.roa (hash: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Validity
Not Before: Mar 25 02:59:48 2026 GMT
Not After : Apr 1 02:59:48 2026 GMT
Subject: CN=69c34fa4-71a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:12:dd:c0:e0:df:ee:22:f6:e7:c5:af:aa:
99:e4:7f:56:8b:db:2d:a8:48:ec:85:62:5a:8e:de:
12:ee:c5:e5:b6:a3:e5:fa:ac:c6:1d:c1:d5:8e:45:
a4:19:b0:b9:19:cd:92:24:be:25:09:34:13:dc:6e:
8c:0f:0b:92:5d:e1:c7:0d:b1:26:c8:bd:2d:30:3b:
ae:1f:d4:de:7b:01:f4:f0:b2:34:88:8a:4c:14:06:
7f:b6:42:7d:a7:29:ea:e0:a0:f7:eb:66:7a:60:08:
bd:1f:fd:53:b0:6d:38:44:92:32:0e:25:17:95:5d:
6b:17:f2:66:5e:52:bf:0d:8e:fb:16:f5:9b:65:19:
39:68:06:f9:82:0f:b4:51:08:b6:df:20:28:51:ee:
e7:51:69:b8:f9:6a:00:59:4d:72:9b:a5:17:fd:95:
04:fa:61:5e:a8:6f:fc:c4:ec:77:77:33:53:1f:76:
7c:c6:8d:59:cf:a5:de:9b:de:73:1d:ab:71:c1:4f:
ef:3a:d1:cd:93:db:02:3a:06:2b:9e:d1:c7:d7:9e:
80:e0:84:a8:dd:6c:a9:c2:4c:89:3b:b7:16:2e:66:
7b:03:71:b4:6a:25:40:39:d6:8c:a8:26:d3:be:30:
ed:2b:12:30:90:5a:72:46:e3:60:f7:0e:17:2b:eb:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:3A:C8:58:1D:7B:C3:3B:22:DA:9D:E1:5C:60:20:BB:69:61:91
X509v3 Authority Key Identifier:
keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:75:67:f4:7e:6e:59:5f:b9:d3:dc:47:ee:85:ea:ce:e0:c6:
cf:25:24:b5:68:a0:91:05:c5:9d:2d:6e:13:a1:be:c3:39:87:
5c:9e:b5:91:0b:09:cd:fc:3c:cc:9c:20:f9:20:a7:7f:af:4e:
40:02:50:15:65:da:43:60:2e:18:cb:b5:f9:02:e2:79:83:57:
08:60:61:f7:66:6f:74:4c:e3:ca:96:df:34:d2:6c:e4:f6:fd:
21:48:28:81:e5:24:b9:c9:39:8d:01:93:9f:c7:8a:13:36:32:
a2:d4:31:f3:d7:21:9c:ce:c1:89:c9:22:6a:91:21:10:bb:b7:
42:e0:55:71:f5:ae:b0:40:03:a8:15:05:0f:d6:13:ac:44:8e:
e6:d8:09:35:97:74:27:46:13:08:86:a4:fc:63:a9:dc:16:28:
d9:6a:eb:65:24:84:d1:a9:76:4f:b6:0f:71:a3:51:5d:e6:ad:
4d:8b:ac:86:98:2c:84:7c:6f:b0:ef:a2:e8:67:d4:ac:14:ab:
91:73:03:6f:a4:b1:5f:e1:9d:0a:51:3e:15:ba:02:9a:f7:8f:
b9:27:eb:d5:9f:4e:ae:9c:13:a9:b3:d0:b5:8a:af:ad:ef:bf:
5a:56:70:b6:27:c4:3c:5f:ff:c6:fa:9b:11:9f:a3:d8:4b:43:
3a:3d:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:29 2026 by rpki-client