
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier: Z/7TK18QZndeC6btFYOU4rL2oU7gWrm4R8hhZi+uFbE=
Subject key identifier: 67:B8:C2:8D:C3:B9:C3:BD:BA:54:40:64:C4:72:8F:D5:29:BF:D5:40
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number: 016F
Signing time: Wed 25 Mar 2026 04:11:59 +0000
Manifest this update: Wed 25 Mar 2026 04:11:59 +0000
Manifest next update: Wed 01 Apr 2026 04:11:59 +0000
Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: UC3mXw5bG7k6yBhART8Bck+ii+bPEXwYmq/YX8bkPDw=)
2: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: tpEbntANqqH62uyg72ojsNyUatPaZSI32JfG1Q2fADg=)
3: B1F23610923B11F084052A57C4F9AE02.roa (hash: YSb0tSwa/5ouwveWRMPrFfSh8tKVPTJV0n6+IuBaWyE=)
4: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: Ps4zTjFyLHJz+OVkfNbIpcjmNwEHH47lDT8mzreZ++U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: Mar 25 04:11:59 2026 GMT
Not After : Apr 1 04:11:59 2026 GMT
Subject: CN=69c3608f-0613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:39:e6:5c:3e:24:72:60:75:ec:03:ac:9a:
66:54:dc:05:29:79:c8:9f:40:ba:69:85:df:6c:21:
3d:a2:be:ac:b8:d0:81:ac:28:69:35:38:3d:0e:54:
c1:4a:86:cb:a8:c5:1b:48:d9:83:e7:2f:e5:e7:56:
6f:b2:ad:de:c8:61:96:61:6d:4b:9d:5d:5d:80:fb:
9e:01:5a:88:f0:28:ee:67:01:89:df:08:11:ac:1b:
f6:7e:27:0d:19:2d:9e:03:74:2d:b5:44:99:f5:c2:
8e:ae:e5:c2:aa:9a:5f:43:65:a6:da:98:42:88:51:
95:a8:1e:b3:09:95:44:d6:85:ec:03:b0:8b:f5:28:
0a:02:a0:57:74:2f:6b:18:de:b0:7f:4a:9a:60:c1:
be:57:92:59:6f:61:27:9a:ba:2b:98:3b:b4:1c:43:
0e:88:58:0c:68:1c:43:86:d9:18:f8:dc:ed:60:af:
d3:a6:46:51:7f:fe:81:d0:58:cd:cc:c1:53:0c:2b:
18:7b:2e:77:d8:c6:8c:54:a4:63:09:f5:e6:f8:7e:
a6:3f:4e:78:ea:90:8e:87:52:d2:08:b1:b5:a2:36:
31:24:43:92:41:7e:2e:5e:bc:7c:dd:3a:c9:d9:19:
e9:74:df:1c:05:e3:cd:b3:0c:b1:a8:12:62:8b:54:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:C2:8D:C3:B9:C3:BD:BA:54:40:64:C4:72:8F:D5:29:BF:D5:40
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:96:ef:f5:e7:9a:0e:04:a2:03:a1:b9:ea:b6:3c:50:12:75:
e6:81:e5:06:6a:e7:36:88:1a:dd:28:44:45:67:91:9a:b3:b6:
4e:af:81:46:8f:39:f5:0a:7d:c3:61:3f:56:d7:0f:b1:44:87:
e6:26:e5:7a:ea:7c:f3:60:86:8b:70:42:94:67:25:a2:1b:ac:
7a:b4:bd:e9:e1:30:42:b0:de:ed:b5:f1:d8:8c:57:b5:6b:35:
9a:f9:b0:4c:15:53:43:bd:a4:5b:9a:b5:ff:14:f9:a4:54:38:
d8:b1:b0:ff:af:5c:fb:15:40:68:a3:2e:22:10:b8:01:eb:e1:
45:f5:bc:65:a8:6c:d4:c6:a4:c7:2e:fe:fd:a9:87:19:99:39:
7d:6c:df:0b:28:dc:69:5e:fc:f3:03:19:19:9a:38:db:bf:2d:
14:0e:39:36:40:e9:11:d8:c3:41:8d:65:a1:eb:75:b5:42:6c:
27:73:86:a6:21:38:5e:88:fa:b8:45:14:82:f6:4f:df:f8:80:
39:57:f2:6c:6e:b2:39:2e:5a:7c:11:6b:1a:4a:b7:1f:df:c0:
a1:60:05:eb:53:09:96:fe:80:72:de:04:8a:08:a4:94:e1:be:
57:9e:4b:48:8d:a3:c9:f8:78:e5:89:8d:3a:b5:ec:a5:0b:27:
32:7b:da:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:30 2026 by rpki-client