
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier: 5asciwjp3ynBot+Szsp1Udxb4I2QmzplivZQYKPmCSA=
Subject key identifier: D2:8F:6E:E8:31:29:9F:AA:5F:01:86:EE:76:80:EA:52:9E:EE:48:19
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial: 08B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number: 08A8
Signing time: Tue 24 Mar 2026 20:15:08 +0000
Manifest this update: Tue 24 Mar 2026 20:15:08 +0000
Manifest next update: Tue 31 Mar 2026 20:15:08 +0000
Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: bMCMN/DVG5b3g86zTuVSQ3fMdSLXLf8rsYJc5mFoUJY=)
2: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: tUsv3tNoQWMVfE/GiWVi84l0pY9vapkX9vPKn8R6z3E=)
3: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: D61mhla4ZKX7DfgoplRcuCG35MYNou9878EVBT40r2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232 (0x8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Validity
Not Before: Mar 24 20:15:08 2026 GMT
Not After : Mar 31 20:15:08 2026 GMT
Subject: CN=69c2f0cc-5eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:18:8d:0e:b7:17:7b:48:17:97:11:63:2e:
af:81:ff:d7:3d:ff:50:a1:a6:42:47:3e:cb:ae:f6:
ee:df:ac:83:b8:a5:1d:a1:41:56:9c:b8:03:0a:ca:
41:21:be:ee:a4:81:1e:a6:f9:ec:a3:bc:22:b1:e8:
2e:59:e4:79:53:38:0a:ac:e1:cc:68:56:aa:6b:a6:
18:43:83:b3:10:d8:a2:49:94:02:3c:8a:e3:4a:28:
e7:6f:0a:74:ad:a0:4d:ea:ab:60:03:95:5a:d7:ef:
87:75:8f:98:16:72:b5:04:d0:c9:b7:3f:42:47:9a:
e3:a2:d3:50:a5:f0:2f:31:ab:8b:f0:ca:10:6d:42:
05:74:87:1f:10:01:2a:96:6e:1f:14:2d:f8:59:45:
00:e2:4c:bf:a8:db:d1:d8:6d:32:74:4d:77:68:56:
0f:70:97:c0:ea:7f:d4:f8:32:96:96:59:19:be:09:
81:83:bd:14:c4:2b:c8:be:9d:8c:8c:21:be:01:bc:
5f:aa:52:79:d1:a8:23:c7:5b:bb:ec:ad:02:f6:40:
9a:54:7a:6c:ce:b1:92:64:a4:9a:9f:8a:5d:2b:16:
b6:de:54:db:8c:e5:95:4d:46:b7:03:5f:28:61:ee:
9d:b7:f7:ec:74:78:63:92:46:41:8a:02:14:b6:b1:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8F:6E:E8:31:29:9F:AA:5F:01:86:EE:76:80:EA:52:9E:EE:48:19
X509v3 Authority Key Identifier:
keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ec:e1:91:e1:9e:a2:21:2f:b1:d9:f9:11:9a:75:3f:b3:f5:
f7:c5:4b:6a:42:2a:e2:31:82:7e:4b:72:b1:e6:5e:2f:bd:4e:
c4:33:59:c7:0c:2e:b7:8b:bc:bf:79:87:cf:6f:d9:1d:dd:ed:
ba:b8:d2:20:13:2d:a8:a3:00:e9:7e:50:d0:66:5c:e0:ed:de:
b1:8c:89:9c:50:b1:c7:d5:19:36:70:c3:1e:d4:ca:75:30:58:
35:71:a3:35:2f:c4:bf:cb:6a:31:1b:1b:92:df:04:16:4f:a0:
94:99:96:4e:37:1f:b6:b5:25:1b:65:19:75:e1:6e:13:c0:b6:
0a:18:69:58:01:2e:91:eb:e8:6b:89:15:6c:4a:f9:fc:b0:ee:
25:f2:be:12:f5:d2:c2:28:95:b1:ba:c0:a7:ec:f3:92:f2:4a:
6f:c5:07:6e:8b:59:84:21:ec:73:64:b4:58:7a:2b:9f:19:97:
a6:e6:21:47:f9:e1:84:b8:b0:f3:67:7c:04:05:0f:c0:e9:24:
a1:6e:db:9d:ab:cd:71:d9:88:58:e1:e2:a1:a4:a9:b3:df:e4:
89:b5:22:e1:1c:41:32:06:94:25:45:e2:61:96:4c:ce:aa:67:
db:a6:da:09:a4:63:67:1c:a4:fe:79:af:1c:b9:99:32:b4:18:
02:40:89:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF
RjkwRTgyNkYwHhcNMjYwMzI0MjAxNTA4WhcNMjYwMzMxMjAxNTA4WjAYMRYwFAYD
VQQDEw02OWMyZjBjYy01ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiNcYjQ63F3tIF5cRYy6vgf/XPf9QoaZCRz7Lrvbu36yDuKUdoUFWnLgDCspB
Ib7upIEepvnso7wiseguWeR5UzgKrOHMaFaqa6YYQ4OzENiiSZQCPIrjSijnbwp0
raBN6qtgA5Va1++HdY+YFnK1BNDJtz9CR5rjotNQpfAvMauL8MoQbUIFdIcfEAEq
lm4fFC34WUUA4ky/qNvR2G0ydE13aFYPcJfA6n/U+DKWllkZvgmBg70UxCvIvp2M
jCG+AbxfqlJ50agjx1u77K0C9kCaVHpszrGSZKSan4pdKxa23lTbjOWVTUa3A18o
Ye6dt/fsdHhjkkZBigIUtrEtYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKPbugx
KZ+qXwGG7naA6lKe7kgZMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC
REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODcyQy9GMjBFNTU5NkRCREMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVf
UWhaX3Bvc3lhR2Z2a09nbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGezhkeGeoiEvsdn5EZp1P7P198VLakIq4jGCfktyseZeL71OxDNZxwwut4u8
v3mHz2/ZHd3turjSIBMtqKMA6X5Q0GZc4O3esYyJnFCxx9UZNnDDHtTKdTBYNXGj
NS/Ev8tqMRsbkt8EFk+glJmWTjcftrUlG2UZdeFuE8C2ChhpWAEukevoa4kVbEr5
/LDuJfK+EvXSwiiVsbrAp+zzkvJKb8UHbotZhCHsc2S0WHornxmXpuYhR/nhhLiw
82d8BAUPwOkkoW7bnavNcdmIWOHioaSps9/kibUi4RxBMgaUJUXiYZZMzqpn26ba
CaRjZxyk/nmvHLmZMrQYAkCJwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:09 2026 by rpki-client