
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: 9IY8bif6ZSRiq2OMmWPyn/hLZpppuaWvUb1cjwatahQ=
Subject key identifier: B1:5A:B9:C3:66:0C:FE:E0:95:9F:EB:D0:12:C5:C0:A7:84:69:E9:5B
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: 0114
Signing time: Wed 25 Mar 2026 05:13:20 +0000
Manifest this update: Wed 25 Mar 2026 05:13:20 +0000
Manifest next update: Wed 01 Apr 2026 05:13:20 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: yQpRh+YVBUBM6CB3dYlXHGftV0fv8LsGimDhfNCOutg=)
2: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
3: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Mar 25 05:13:20 2026 GMT
Not After : Apr 1 05:13:20 2026 GMT
Subject: CN=69c36ef0-0e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:10:12:08:b9:89:99:db:ef:25:f3:ef:bc:
df:c4:09:b3:14:cb:28:42:e4:9e:5a:f6:53:19:a8:
73:f4:2e:15:ad:33:3d:e7:15:48:4d:6d:f7:fb:61:
40:50:5c:b6:b7:98:25:9b:c1:dd:bb:f7:99:ed:28:
a5:62:6a:f5:63:16:2a:57:c7:c4:b7:d9:c8:18:e5:
d5:b8:10:5e:3b:9d:59:b5:53:d7:a5:46:07:42:5a:
77:0b:04:f5:a3:fa:6e:3f:ab:25:0f:45:73:cc:8d:
eb:9a:d1:50:ce:87:33:3b:d4:20:31:14:95:cc:55:
5b:9f:4f:a7:f6:69:5f:d4:8b:ac:10:8c:2a:5f:53:
ed:07:d8:29:02:bb:af:a8:71:e0:98:fa:2e:24:81:
bb:f6:73:0a:a6:3a:a8:de:ab:5c:2f:e4:99:c1:49:
08:18:f4:a4:38:0a:4e:e2:c6:a0:f1:65:17:02:33:
b7:b5:a4:b9:0e:26:4e:6b:0d:2d:ad:6b:1f:bd:65:
d8:a1:55:a7:3f:e2:f7:55:c9:16:e1:3d:c2:f4:1c:
66:e2:64:71:61:16:64:a1:bd:7b:dd:a3:7b:41:77:
9f:b2:b0:c8:df:4b:27:8c:68:93:43:19:c0:d5:a2:
25:9c:9a:d0:b8:bf:3d:d2:51:18:84:7f:e8:72:b1:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5A:B9:C3:66:0C:FE:E0:95:9F:EB:D0:12:C5:C0:A7:84:69:E9:5B
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:7a:3a:84:a9:8a:e2:64:59:01:15:d6:ee:75:b0:ad:e4:
7b:b9:ab:fe:04:bb:43:64:0b:f6:1d:3f:2b:30:22:8d:5c:4d:
e5:cb:12:55:f6:3e:b9:a7:dd:46:4e:ab:92:5c:7c:85:70:d3:
99:ef:c7:12:9b:3e:cd:a9:64:da:76:9d:97:38:22:e6:52:6d:
98:d9:f4:d8:10:c1:d3:ae:65:cc:07:13:ec:de:a2:1e:cf:ca:
b4:33:db:b1:57:58:30:b6:b0:06:ce:de:68:46:20:2b:33:73:
ad:ef:43:ae:cc:47:57:a8:57:86:14:10:2d:8e:92:95:36:c9:
3f:9a:b0:e6:c6:2c:e1:2b:74:0d:0a:12:ea:d3:48:f6:d4:5c:
4e:6e:58:a9:76:fd:aa:24:a6:b4:df:81:44:6f:94:a9:27:db:
82:36:64:50:8a:5f:ce:70:f5:c5:e0:9d:e9:b9:ee:74:9b:fc:
c4:fe:47:7c:97:10:98:b9:49:ae:c9:f4:ac:14:68:e7:1f:9c:
30:ed:14:60:3a:3d:83:73:88:76:5b:1d:ab:ac:88:f8:01:b9:
1b:5c:b8:c4:55:ab:62:77:4d:9d:4f:22:3f:ab:cb:02:28:b3:
c5:3e:0c:15:0e:49:a0:30:e6:44:dd:37:a7:49:b7:9f:18:87:
55:29:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:55 2026 by rpki-client