
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier: bbAy+u3uQmq0J1hcXTT5U/Rxwm5OPROYip2GiguismQ=
Subject key identifier: 57:FA:A4:87:22:D1:6B:90:5D:B0:95:09:5D:60:5C:E1:D3:C3:9D:B4
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number: A0
Signing time: Wed 25 Mar 2026 06:42:19 +0000
Manifest this update: Wed 25 Mar 2026 06:42:19 +0000
Manifest next update: Wed 01 Apr 2026 06:42:19 +0000
Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: oIJL36NtTLwTlpVyGgm1l8tvPbTg8uiedz+QQ2AxWaM=)
2: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: kYrLbQFT1ZzGHGGu97W4fdlheMT2k3tj7Vb3H/0HdO4=)
3: B87594FC08B311F1954B37591C3D8C67.roa (hash: wztUnu/AtmwGJSEKvUQ+sSvPTP/4Cs6eUYir69FLSaI=)
4: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: cG6u0zgjdvCrRZeQ4usyXAcEzT17uS3cbK/qREEeINU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: Mar 25 06:42:19 2026 GMT
Not After : Apr 1 06:42:19 2026 GMT
Subject: CN=69c383cb-427c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:64:e6:f4:c0:88:b1:ab:e8:27:dc:e6:f5:
81:54:57:5c:ea:06:1d:71:98:51:2f:93:1f:94:70:
3f:fd:fe:9c:03:f8:dc:e2:d4:f1:ab:58:1a:ed:55:
70:16:06:a1:8a:83:3b:d6:87:73:97:eb:e0:71:46:
5a:59:39:85:2e:35:10:8a:26:d1:c1:a8:a4:46:7a:
86:c6:cc:c8:e2:ee:73:a3:7e:89:ca:4a:68:ac:1c:
d7:7c:50:c4:11:a8:34:6a:e3:e8:c8:6d:31:e4:bc:
e4:53:28:d1:24:54:8b:44:a9:c0:e8:90:84:68:fc:
58:86:9f:2c:3d:b9:4f:10:24:d3:28:dc:eb:fd:5e:
86:30:6a:30:d5:87:43:3a:05:24:05:52:86:d0:af:
ec:43:4c:88:fb:00:0a:0a:14:ca:20:5a:c6:9f:84:
03:7a:fc:c0:d3:33:7d:6d:ed:bf:80:da:36:9c:43:
72:c6:33:4f:aa:68:fb:a3:df:6c:d6:25:47:0c:9c:
46:2a:79:12:3b:f8:de:04:8a:ff:3b:02:20:2d:f4:
27:12:1a:f3:01:c0:78:08:fb:55:ad:47:18:f9:98:
74:fb:98:42:a4:7b:c2:28:8e:f7:38:b8:0e:87:50:
5c:f9:fc:dd:81:f5:ef:56:5b:fa:a3:96:bb:08:60:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:A4:87:22:D1:6B:90:5D:B0:95:09:5D:60:5C:E1:D3:C3:9D:B4
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:6d:d9:6a:02:e1:99:58:9e:1f:e8:ac:bd:31:2c:e0:81:c8:
60:a1:da:e8:a2:66:45:ef:fd:eb:68:9d:9a:ca:f2:d4:15:63:
35:f5:66:44:b8:23:0f:dc:0c:c8:70:69:44:43:79:8a:26:7e:
ca:d5:6f:4f:2d:17:6b:d7:17:02:9b:d4:a7:30:6f:01:51:9b:
8c:7a:02:9a:7c:cb:e7:e4:4a:c2:ac:53:3e:64:d9:9f:16:d4:
0c:cc:a7:c8:fa:93:fb:93:f8:5c:ce:df:0c:3c:dc:3a:f8:29:
b3:4c:82:5c:0f:66:91:41:b8:da:f3:27:a9:e9:ea:4a:0e:18:
d8:0b:fc:d8:63:c6:9c:01:fc:c9:3d:4a:32:8b:88:c3:ac:59:
2e:51:be:20:21:3c:71:8d:29:6a:e6:ea:5d:39:fb:25:8e:2c:
cc:55:04:75:ba:cf:c0:08:7f:7b:d7:eb:03:8e:ff:d7:08:73:
63:47:36:2c:43:b5:65:14:fd:0e:8f:26:bf:2d:ec:fc:e3:2e:
32:30:aa:af:b7:79:ad:cc:ec:4e:cb:af:29:ee:2e:1f:27:c2:
05:4b:09:c3:33:85:76:bb:cb:05:f4:42:5d:9a:57:4d:6f:e7:
6d:65:ca:c2:12:3e:46:e1:33:f1:d5:5c:f7:f3:ed:06:69:65:
cf:59:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:32 2026 by rpki-client