
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File: 0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier: f97B4/C8BdVoXZl6cOvwKFPk0dKLvz/Rz/4u5eAoWUU=
Subject key identifier: 09:C1:26:53:F5:EF:42:E7:E7:1A:58:85:EB:D2:DC:30:5C:AB:E9:C4
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number: 0116
Signing time: Wed 25 Mar 2026 05:05:41 +0000
Manifest this update: Wed 25 Mar 2026 05:05:41 +0000
Manifest next update: Wed 01 Apr 2026 05:05:41 +0000
Files and hashes: 1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: /kYYWPHFty15VFdG44g4q1jaLULkwCB2MKypeaIFDLc=)
2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
3: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Validity
Not Before: Mar 25 05:05:41 2026 GMT
Not After : Apr 1 05:05:41 2026 GMT
Subject: CN=69c36d25-6f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:00:60:6a:a5:70:ef:3b:fc:cd:44:cf:98:
16:42:89:9d:28:69:d5:90:92:77:ca:48:b4:07:e0:
cc:50:d0:2c:cb:83:20:61:a1:eb:6c:77:13:cb:6e:
3a:d7:64:25:87:2f:c6:1b:06:d8:68:32:9d:f0:b0:
fb:52:84:e7:aa:d9:1e:72:c0:db:fe:fa:f8:89:db:
c9:76:47:8b:70:23:01:4e:ef:f9:e5:3a:90:d9:35:
13:e8:d3:c9:40:b7:ff:ae:77:99:e2:63:fa:fc:23:
a2:47:06:83:da:c0:41:6b:da:6c:21:2b:cb:c2:84:
ea:41:9e:59:1d:5c:5e:c9:ce:7d:08:30:c7:62:d0:
71:90:65:c5:18:21:a9:0f:01:18:1d:a9:af:23:b8:
db:e7:ba:b5:13:0a:62:e4:eb:9c:f2:a2:4f:74:9a:
d4:90:bd:9a:8a:7c:fb:8e:ab:bb:c2:5d:8b:1c:a5:
82:c0:86:11:09:fe:99:80:33:07:db:d5:68:b6:f8:
f5:b0:3f:9e:96:6e:1f:e1:55:bb:59:7b:56:c4:6c:
81:ec:13:ce:4d:a6:a7:d0:51:87:08:7d:43:55:17:
5f:69:9f:27:2f:ae:ad:fd:91:26:a9:a4:3d:09:fa:
f4:08:cc:a7:dc:2b:28:90:f9:a0:ee:f3:70:36:41:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:26:53:F5:EF:42:E7:E7:1A:58:85:EB:D2:DC:30:5C:AB:E9:C4
X509v3 Authority Key Identifier:
keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:b4:a4:3d:0c:31:59:70:e9:ac:83:29:f8:fc:4f:da:4c:
6e:42:f4:44:a1:73:38:a1:95:08:fa:5e:ba:39:b1:8f:c4:0d:
9c:e3:38:67:86:6e:e2:83:56:d9:c8:8b:ef:47:77:70:bb:29:
39:17:f7:67:ab:5d:13:45:18:54:9a:ba:c3:63:96:5e:2a:68:
b0:c1:88:c6:8b:a6:24:97:b5:92:69:90:d5:31:26:50:ae:fb:
25:6d:2b:4d:97:da:9e:39:72:1d:a7:ac:bc:3f:8f:80:77:1f:
7d:53:0b:b3:31:17:41:fe:15:19:7f:c6:af:20:26:bd:46:24:
7f:98:82:6e:ee:63:e2:92:f1:70:35:21:e8:8e:77:2e:93:bc:
fd:5a:8b:c5:3b:92:6b:87:31:07:51:d9:39:62:9f:de:2c:05:
47:2b:c1:21:bc:72:ee:51:e3:b0:21:ff:30:0d:02:c9:ba:ee:
5a:a3:17:ec:60:8d:0c:ce:ce:26:df:72:d2:c0:86:a0:e1:89:
b7:3d:b5:c8:52:34:fd:1f:95:75:6a:00:19:81:d8:b8:bb:e0:
17:14:d3:df:5e:3f:f3:3d:b9:82:b4:37:fa:45:6c:83:60:6e:
29:b7:a3:72:b5:a0:1a:33:8e:8c:5d:a4:77:50:8f:1e:3e:fa:
fd:4e:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:05 2026 by rpki-client