
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier: CtocLusEgFnXgSId28DYgavjWOKyaZbPaeMOLn249Zo=
Subject key identifier: 6F:14:F3:C6:3C:DB:4E:06:D8:B2:50:F1:29:95:B2:8F:6D:C2:C6:BD
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number: D5
Signing time: Wed 25 Mar 2026 05:54:46 +0000
Manifest this update: Wed 25 Mar 2026 05:54:45 +0000
Manifest next update: Wed 01 Apr 2026 05:54:45 +0000
Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: sLdFa+jPnN/qQ5LgyyuEfS7OHAB5KNsj8xHqHMlqVnk=)
2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Validity
Not Before: Mar 25 05:54:45 2026 GMT
Not After : Apr 1 05:54:45 2026 GMT
Subject: CN=69c378a5-1340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:b3:36:a2:62:29:31:91:2f:2f:60:a3:70:
93:43:9e:97:da:18:4a:20:1c:d8:ba:94:f5:1b:8d:
e5:69:e2:b4:a9:73:f7:d0:af:a0:1f:c5:e2:66:c2:
66:9f:4d:fe:c9:d1:0d:22:72:f1:da:28:a3:fe:89:
17:9b:30:95:0b:f9:79:95:c0:dd:12:f6:a4:e4:de:
d1:ad:40:48:ac:d7:ab:c2:cb:8f:97:a4:8e:80:7b:
01:da:e4:fb:61:d2:59:aa:02:bc:02:71:bb:be:a1:
ec:13:7b:11:9f:26:be:5f:b9:1a:d5:eb:12:b5:07:
99:ff:f6:65:a8:9f:3d:d4:22:75:35:ac:1f:48:1a:
5f:fb:ca:2d:b5:b2:3e:53:a3:0c:df:a1:b6:52:f9:
9f:ce:10:8d:d6:4e:b4:27:ca:64:e0:79:7b:e5:3a:
4d:c7:87:de:10:2b:26:0d:c2:3a:b4:25:8b:65:49:
2e:cb:3b:d5:6a:ee:1e:11:b9:78:c9:a3:91:9b:45:
57:19:f4:b1:ac:e5:68:ad:a6:d6:27:7d:86:2d:49:
dd:0d:9f:6e:dc:10:55:c3:42:30:f8:84:ae:bf:b0:
a8:89:ed:42:d2:28:9d:1d:ce:43:86:8d:f4:42:e9:
b1:99:19:ea:28:01:d0:3f:32:cb:f5:36:12:2e:d0:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:14:F3:C6:3C:DB:4E:06:D8:B2:50:F1:29:95:B2:8F:6D:C2:C6:BD
X509v3 Authority Key Identifier:
keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:c7:ee:c6:a3:64:37:81:74:a3:88:32:b1:97:19:4e:5e:
e3:76:16:d8:c9:a1:ef:5e:f7:55:08:4b:94:52:55:8f:71:7d:
5c:06:28:81:dc:73:0d:68:f0:49:5f:3a:eb:1a:35:df:d0:93:
12:44:17:4e:df:50:b2:c4:ee:15:d5:04:d9:93:64:07:35:65:
1c:56:2c:09:a1:e5:52:24:57:0c:9f:d4:8c:71:30:46:f6:82:
7b:06:45:da:0e:81:00:3b:50:ef:78:c6:eb:de:6e:c0:0f:29:
b7:e7:74:08:30:7d:7b:bd:29:eb:4d:35:35:1e:7d:db:5c:2b:
74:34:79:f3:2a:37:24:ef:91:a0:e1:b5:da:ed:51:a9:a1:fd:
53:52:93:51:a6:9e:08:a8:94:a1:d5:18:0f:13:d5:a5:a2:8a:
ba:e5:cb:81:ee:9d:f8:65:2b:2a:ce:a9:6d:2b:0a:ec:e0:80:
e5:95:70:ef:36:2c:9b:6d:52:04:af:22:7c:d0:7b:c8:b6:47:
6b:5f:ef:50:88:2c:c5:18:f6:0b:6c:23:a1:9e:ea:62:92:b7:
9e:65:5e:1b:06:5f:81:4b:55:a5:f0:8d:ab:a9:19:7f:4f:fe:
9b:73:67:64:58:5e:48:94:15:68:bd:43:66:21:73:b1:44:4b:
47:9d:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:37 2026 by rpki-client