
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json)
Hash identifier: XNJdJXzZR9fHWTfhd02ksUGhFt7yYuH9kUK2+QlE5dA=
Subject key identifier: CB:1D:E5:7B:7F:55:C0:70:9C:47:17:EB:50:C5:12:98:96:FC:79:B7
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
Manifest number: 0159
Signing time: Wed 25 Mar 2026 04:16:25 +0000
Manifest this update: Wed 25 Mar 2026 04:16:25 +0000
Manifest next update: Wed 01 Apr 2026 04:16:25 +0000
Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: fr8cFmUiHHMdXg5PHxJZUjmHJys3mSUJyRwqO9X2vdY=)
2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: 3Wk8dYppZ9PYDGlWy8Aq6MWTQPzxpyguIWGe4yXyIMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Validity
Not Before: Mar 25 04:16:25 2026 GMT
Not After : Apr 1 04:16:25 2026 GMT
Subject: CN=69c36199-c333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:4d:3b:d3:ba:8e:59:19:fb:0c:67:24:b4:
58:3a:85:75:70:4e:7b:94:64:6b:29:54:bb:17:1a:
3d:71:6e:4f:5a:62:71:0d:8a:86:fe:1b:97:42:68:
05:8d:3f:85:d3:52:67:c4:13:5f:83:c8:de:ff:e6:
eb:37:19:b7:44:4d:94:34:9f:16:04:8e:28:7a:cb:
6e:38:b2:05:f4:65:05:14:8b:c1:27:bf:e3:21:fe:
ae:74:01:ac:6e:23:c0:fc:90:e5:59:f0:dd:e9:83:
6e:5c:3c:35:82:1e:3c:ce:87:b5:df:f8:a8:39:49:
16:52:8e:93:5a:8e:9b:2b:3a:8d:5d:b6:d4:02:de:
9e:35:d5:6c:71:33:15:d3:bb:66:de:57:ca:59:e8:
8b:3a:41:9c:53:71:8b:5d:3c:78:ed:17:71:93:88:
31:07:f1:f9:3b:1d:7a:8e:fc:f7:6c:ae:8d:eb:a1:
84:47:58:24:df:2f:16:ae:61:30:f2:23:cb:2e:3c:
ac:5a:1d:25:32:82:84:7f:85:84:bb:85:bb:fb:41:
23:52:ef:12:9e:b1:39:73:3e:80:92:66:47:7b:ec:
ef:8f:35:fb:05:c1:ae:77:2a:62:30:d1:60:11:04:
1e:0d:72:5a:c0:3a:67:06:bc:46:05:ee:73:e9:ef:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:E5:7B:7F:55:C0:70:9C:47:17:EB:50:C5:12:98:96:FC:79:B7
X509v3 Authority Key Identifier:
keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:b2:d7:74:dd:27:61:14:1c:b7:92:ef:4c:cf:c9:d7:d9:4d:
0a:74:20:f6:29:cc:40:35:f3:c1:29:75:48:07:0b:2d:e2:ab:
dc:27:1e:47:83:e3:5f:e7:10:8c:b6:20:8c:48:93:9b:f9:d3:
bb:17:a9:2e:31:4f:5c:6f:38:37:d3:68:f8:52:01:b2:53:ae:
2f:de:3d:1e:13:6e:98:3c:05:c6:80:3a:54:3b:0a:83:4b:f5:
08:dd:e9:ba:14:44:6b:a9:c4:c7:25:d3:7c:c7:1d:96:43:e7:
52:aa:d2:59:b0:ca:94:e3:ec:df:af:f8:0b:5f:f8:af:2a:82:
5a:3b:c3:4a:01:66:cd:36:99:e0:32:96:4f:55:6a:c3:2c:22:
04:5e:d9:8e:56:4d:38:04:9c:6d:31:4d:3d:9b:6b:a1:7a:a8:
ce:94:5e:7d:28:98:14:e0:a0:50:5d:cb:c3:9b:cf:0d:3f:97:
3c:7c:46:b2:f4:1e:12:67:86:28:c6:7a:36:ce:e9:55:7f:8c:
06:ea:aa:e8:34:d1:43:25:29:7e:4c:e4:02:9e:58:49:4d:32:
79:ae:9c:9c:f1:9b:1b:93:86:54:23:ae:6a:b9:20:0c:b0:9a:
94:22:02:67:e7:a5:d6:fe:3c:25:0f:a7:ed:d0:d9:d3:78:59:
7a:31:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:21 2026 by rpki-client