
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier: adDbq8pr2gqPEE94g51EzLzud/fBqhPYgyFfDk57O5U=
Subject key identifier: 77:AE:6F:12:3E:26:D3:BD:2C:60:38:6E:50:E9:39:12:15:8A:BB:11
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number: E4
Signing time: Wed 25 Mar 2026 05:42:05 +0000
Manifest this update: Wed 25 Mar 2026 05:42:04 +0000
Manifest next update: Wed 01 Apr 2026 05:42:04 +0000
Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: jnMVygVFu9OQBHcKPZaa70+PZ+aF9bHh4iAwLDxDJw8=)
2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Validity
Not Before: Mar 25 05:42:04 2026 GMT
Not After : Apr 1 05:42:04 2026 GMT
Subject: CN=69c375ad-70c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:64:99:0f:3a:34:88:dc:01:81:3a:76:81:
0d:f1:8c:ae:9d:8b:2e:59:c9:1e:4e:4a:24:46:59:
40:5e:de:bf:b3:5c:72:78:d7:70:1c:9c:80:05:84:
2c:ca:4c:04:23:54:20:27:bf:c9:d3:ba:0a:65:57:
8a:4a:d7:de:b9:43:15:da:b1:97:a1:3c:89:26:6b:
35:43:22:10:04:86:13:f2:3c:00:0f:2b:9d:be:15:
25:0c:dc:b2:97:b0:42:bd:64:ab:fa:7a:06:bc:0e:
54:15:85:ad:b8:2a:33:cb:c1:e6:16:56:a6:0f:d0:
13:47:b9:8c:28:cd:09:96:f2:6a:cf:a1:60:63:b5:
ef:d1:63:29:36:5a:2a:35:f6:9a:38:7d:47:f0:1e:
bf:8d:f7:73:dd:00:a0:ae:ba:f6:04:4d:bb:4a:b0:
67:f0:a4:6d:af:1f:ce:fd:d7:05:1a:fc:34:09:dd:
8b:ac:d5:7a:c0:b3:47:cf:87:6b:9c:f6:72:92:cd:
32:b9:34:b8:44:c8:90:c8:11:00:d7:68:3f:07:54:
84:ad:5e:c8:d7:60:05:69:ef:4d:a8:3f:2b:20:2f:
61:60:c9:d0:f5:33:65:7e:25:dd:a9:5f:21:2c:e5:
dc:d4:d3:0f:11:64:d3:61:db:03:6a:49:28:7f:93:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AE:6F:12:3E:26:D3:BD:2C:60:38:6E:50:E9:39:12:15:8A:BB:11
X509v3 Authority Key Identifier:
keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:57:15:47:3b:68:7b:e8:ff:2e:7d:53:a4:79:e2:7c:bf:ec:
81:63:4b:2f:9d:a9:ce:ea:5c:00:12:dd:be:d3:d2:e4:73:8c:
eb:c4:e0:06:c6:51:56:d5:5b:c1:4b:11:e1:c2:5e:bd:e2:9d:
f1:52:b9:0d:3b:f5:64:9a:fe:ee:93:47:05:a3:23:31:28:78:
39:02:7b:0b:b4:f5:4f:0c:a5:fd:15:c4:54:9b:cb:97:66:d6:
8f:e5:09:05:8d:14:34:40:06:eb:26:21:5c:58:b3:be:e3:ca:
ea:60:73:54:e1:85:b8:6d:8a:f0:21:d6:c1:97:de:cf:f3:02:
e7:1a:92:66:d9:f2:9b:d1:09:2f:bf:f7:43:4d:31:b9:5a:35:
3c:8d:5c:b5:cd:43:5b:db:d9:29:50:b6:a1:6b:69:68:f0:8e:
6d:03:6e:8c:13:fa:b6:45:cf:60:95:95:11:83:87:46:23:74:
9f:49:0e:02:76:52:10:0a:b3:99:33:e8:ac:aa:ac:e3:81:fd:
71:05:3f:ef:76:f2:9f:02:a1:35:83:03:af:5b:e0:80:9c:d6:
2a:67:f2:25:33:b3:e9:44:14:3c:1a:bc:76:43:1c:60:d3:13:
fe:ca:1c:1d:b6:a1:9e:a7:f5:80:91:ff:9c:14:59:a7:93:3b:
1f:dd:d5:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE1REMxMTAvBgNVBAUTKEQzNkUxMDQyNjFGODE5RDY4RDBGNzBCQjI5QURGRThF
RjQ2M0IyRUQwHhcNMjYwMzI1MDU0MjA0WhcNMjYwNDAxMDU0MjA0WjAYMRYwFAYD
VQQDEw02OWMzNzVhZC03MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9pkmQ86NIjcAYE6doEN8YyunYsuWckeTkokRllAXt6/s1xyeNdwHJyABYQs
ykwEI1QgJ7/J07oKZVeKStfeuUMV2rGXoTyJJms1QyIQBIYT8jwADyudvhUlDNyy
l7BCvWSr+noGvA5UFYWtuCozy8HmFlamD9ATR7mMKM0JlvJqz6FgY7Xv0WMpNloq
NfaaOH1H8B6/jfdz3QCgrrr2BE27SrBn8KRtrx/O/dcFGvw0Cd2LrNV6wLNHz4dr
nPZyks0yuTS4RMiQyBEA12g/B1SErV7I12AFae9NqD8rIC9hYMnQ9TNlfiXdqV8h
LOXc1NMPEWTTYdsDakkof5MF6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHeubxI+
JtO9LGA4blDpORIVirsRMB8GA1UdIwQYMBaAFNNuEEJh+BnWjQ9wuymt/o70Y7Lt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy80RkVDMUMwNENF
RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8wMjRRUW1INEdkYU5EM0M3S2EzLWp2Umpz
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTVEQy80RkVDMUMwNENFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8wMjRRUW1INEdk
YU5EM0M3S2EzLWp2UmpzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAolcVRztoe+j/Ln1TpHnifL/sgWNLL52pzupcABLdvtPS5HOM68TgBsZRVtVb
wUsR4cJeveKd8VK5DTv1ZJr+7pNHBaMjMSh4OQJ7C7T1Twyl/RXEVJvLl2bWj+UJ
BY0UNEAG6yYhXFizvuPK6mBzVOGFuG2K8CHWwZfez/MC5xqSZtnym9EJL7/3Q00x
uVo1PI1ctc1DW9vZKVC2oWtpaPCObQNujBP6tkXPYJWVEYOHRiN0n0kOAnZSEAqz
mTPorKqs44H9cQU/73bynwKhNYMDr1vggJzWKmfyJTOz6UQUPBq8dkMcYNMT/soc
Hbahnqf1gJH/nBRZp5M7H93V6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:35 2026 by rpki-client