
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json)
Hash identifier: aLj1rib+Rff2Q64hs+PwnuQYznLvKIbeoJt/LJRJGx0=
Subject key identifier: 49:C1:F6:92:82:F1:37:E6:CB:80:EB:A8:4F:E5:E2:08:81:8C:7D:DD
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
Manifest number: 9D
Signing time: Wed 25 Mar 2026 06:34:49 +0000
Manifest this update: Wed 25 Mar 2026 06:34:49 +0000
Manifest next update: Wed 01 Apr 2026 06:34:49 +0000
Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: 4ambGnSmUyTKf2DrCtvJOVe9AMUWxRb+0MD946CIG2A=)
2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: TIY6gyAp3NwOI0omiLD20nrzYuDIOBYf89hc7GdDNuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Validity
Not Before: Mar 25 06:34:49 2026 GMT
Not After : Apr 1 06:34:49 2026 GMT
Subject: CN=69c38209-9a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:20:e0:66:99:cb:f0:c1:cd:5d:f9:2a:04:
63:af:42:a4:28:30:3f:9f:07:57:5d:d1:91:6d:2e:
fc:87:1e:62:49:ee:66:28:3e:99:99:b8:25:54:70:
ad:a5:67:88:6d:40:f2:ef:ba:6f:a9:db:be:d3:01:
95:2b:92:09:41:b6:76:93:ac:6c:12:57:02:69:c0:
21:97:41:45:a8:aa:df:db:fb:fb:20:2b:e4:7f:c6:
3e:73:fa:97:9e:71:0c:98:d5:f0:1a:1f:84:d6:08:
38:da:75:2c:d1:99:d0:5a:2a:1d:cf:89:e1:07:bf:
50:0f:ff:92:2a:c1:55:ff:43:04:09:f8:32:56:04:
7a:56:ae:cf:26:9d:2c:2a:7b:a6:f7:f8:39:53:3c:
bb:57:6b:3c:1a:89:1e:b9:06:d5:4b:e6:b2:22:9d:
07:16:23:d9:62:d1:2f:c6:e6:2d:a0:0c:df:4e:c8:
5b:c8:ab:6e:71:2f:1c:e6:d7:0d:14:05:0e:de:33:
f0:c9:b0:20:77:5d:98:5d:ca:6f:d8:34:25:23:68:
04:ca:64:c2:57:26:64:98:dd:d3:d4:41:90:a7:a4:
30:6a:69:cd:34:70:d0:3a:ca:21:4a:23:ae:68:e1:
0d:47:0f:7f:84:1d:e4:e4:02:18:40:b9:75:9e:c5:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:F6:92:82:F1:37:E6:CB:80:EB:A8:4F:E5:E2:08:81:8C:7D:DD
X509v3 Authority Key Identifier:
keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ac:ac:de:10:09:37:97:9d:3e:45:d0:fc:c1:fb:0c:43:5e:
e0:a2:74:98:57:6f:d1:43:e2:b3:02:20:5f:4a:32:57:e1:fb:
6c:19:59:3b:af:f1:70:97:5a:67:56:3b:69:75:25:8f:bf:45:
9f:c3:1b:0b:eb:82:a7:25:ed:c4:8f:a8:11:37:ab:bf:fc:1c:
a7:b6:e9:7f:b7:cb:66:f7:a7:5e:4f:49:0b:20:f0:72:c5:e0:
78:76:2c:5f:4b:de:1b:b3:72:94:06:5e:5e:50:5d:68:28:19:
55:11:b6:a3:f7:f4:a7:5e:89:b9:45:06:66:34:0f:9d:6a:22:
f2:d9:93:33:3d:33:b3:30:d0:5c:7a:83:51:27:49:81:54:18:
99:2e:47:c7:d4:cd:bc:f2:9f:29:ac:ee:f6:a5:cf:e2:5b:9f:
e1:1a:b2:c9:4e:9d:96:ae:c6:52:0c:d0:83:06:dc:ef:fe:34:
96:30:0c:68:9a:9d:a8:d7:e0:a9:ba:36:7b:1c:52:d1:3e:ac:
ef:36:d6:36:77:69:3f:44:28:74:03:49:b5:94:d5:e4:ee:40:
25:56:c5:f9:85:48:a1:a9:e6:5f:3a:f5:2f:41:89:79:c5:19:
6b:43:7e:f1:01:44:16:9c:80:74:67:d0:f5:8d:bd:8d:97:f0:
b1:42:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:51 2026 by rpki-client