
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json)
Hash identifier: BIhvojvni0pmh/rFAMTjH7nxZfB86qrRPKC179A2+MM=
Subject key identifier: 42:E0:04:C6:8D:2A:D1:3D:5A:B2:1F:BE:19:8F:78:EF:3E:A1:AB:60
Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Certificate serial: 0C16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
Manifest number: 0BF6
Signing time: Thu 26 Mar 2026 18:48:32 +0000
Manifest this update: Thu 26 Mar 2026 18:48:32 +0000
Manifest next update: Thu 02 Apr 2026 18:48:32 +0000
Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: MTNmBt9Mos5wgwuZuSnuWjG6x7uXMf5Jr+ZUq7yE1kQ=)
2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: FPfgp7Al/sAnJcpnbzxEl6750GjZ2NbI2QBuF/gjvuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl
rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3094 (0xc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Validity
Not Before: Mar 26 18:48:32 2026 GMT
Not After : Apr 2 18:48:32 2026 GMT
Subject: CN=69c57f80-8281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:93:35:b8:bb:ad:48:09:1d:e7:b1:e3:ff:
df:a5:b0:c9:d1:d0:c7:5c:e3:72:d7:1c:ac:ac:37:
74:c7:8d:d5:67:39:05:e0:2c:f2:c8:77:37:f0:9e:
40:cc:a7:a7:4c:e4:25:d3:b5:b5:a5:1d:6b:87:62:
c8:a1:d4:d1:69:ea:f0:0e:c7:db:1b:71:ad:23:30:
7c:28:dc:c1:df:4b:bd:9f:b3:f1:92:f5:91:6a:76:
a3:fc:55:cd:65:f9:09:55:6d:25:07:e8:51:65:03:
59:1e:1e:19:59:f6:ec:cf:c2:4d:c1:4a:23:e5:46:
89:c7:41:2c:0d:c5:ce:86:ab:7f:82:03:46:be:b1:
d3:47:a3:7e:2a:ec:98:ad:37:79:4b:c0:d2:8a:cf:
a7:4c:07:0c:d8:33:81:59:8a:84:39:a9:97:1c:c2:
7f:4d:5f:d9:03:11:cf:1b:d8:7b:bc:0d:a0:9a:63:
c8:67:a5:8d:ef:76:3f:60:53:61:0a:69:71:09:4f:
7f:0a:a2:55:d8:8c:38:76:6e:63:fc:e1:62:c4:05:
11:cf:ed:ba:64:c1:47:7b:b6:65:be:8e:20:6c:a7:
6f:dc:f0:0e:5f:46:1c:98:81:ec:93:63:56:67:26:
64:8d:ae:1d:e9:87:78:24:02:3e:60:83:56:ac:d7:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:04:C6:8D:2A:D1:3D:5A:B2:1F:BE:19:8F:78:EF:3E:A1:AB:60
X509v3 Authority Key Identifier:
keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:c2:b5:00:ed:88:a0:3e:9b:d4:de:4e:02:44:4a:09:10:d4:
23:f0:09:dc:17:89:7f:a8:24:4c:6b:c2:24:9a:30:44:ca:5f:
30:cc:a0:94:4b:4e:22:6f:28:b9:8a:4f:d7:c5:b5:21:7b:ef:
dd:a7:8c:44:a2:7d:1a:a8:5d:ab:cf:66:10:32:7a:f6:83:e7:
c1:a5:98:cd:b7:d5:2b:b4:88:52:15:17:2f:4d:b4:06:5a:d6:
7d:86:2a:e2:29:86:c8:12:5b:95:a7:65:1e:b7:4f:c4:71:8b:
ea:17:ae:6c:69:3f:84:b5:6c:18:3e:a7:5e:5a:60:70:b4:ab:
bc:04:e5:aa:10:33:15:30:c2:ee:de:8c:58:ad:ab:0b:38:26:
5c:38:66:00:60:e2:18:0e:60:86:be:3d:6b:a2:01:2e:97:b1:
da:fc:ce:66:b1:ae:ab:a2:5a:dd:31:17:93:75:e1:a6:49:96:
fe:56:77:5d:f8:f0:23:05:b2:2d:38:6d:c6:f2:1d:a8:0a:2e:
f1:84:3b:07:21:77:5e:0a:9d:16:ea:b3:88:c0:1a:b0:5e:36:
05:40:1c:ef:a2:5b:3c:1e:18:eb:fe:2e:94:04:7b:db:6d:1a:
c5:33:29:f5:ce:17:4a:1e:39:ed:49:aa:cd:1e:f2:52:94:02:
e0:2c:64:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:58 2026 by rpki-client