
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File: qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier: ZpFMq5pWpKoMUHlxPHt6mz3SJb7JIFDDkEp10R2SgMQ=
Subject key identifier: 00:E2:72:4C:49:02:DF:CB:93:37:A7:E6:82:FB:55:F8:3D:74:7D:B7
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number: 01B9
Signing time: Wed 25 Mar 2026 03:25:59 +0000
Manifest this update: Wed 25 Mar 2026 03:25:59 +0000
Manifest next update: Wed 01 Apr 2026 03:25:59 +0000
Files and hashes: 1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: wuVmcktreLjSZ0nuiv+i591wsRPyU8S+Foy1H8NomLA=)
2: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: NAqCvT4llBl3uhGXgqlzi3IaSpRA/zrRaT2L0Ldxrkk=)
3: E13D8940342E11EF84328672C4F9AE02.roa (hash: i946rkKnIPD36Fiz0DiuBSlPgc8OVRMaBixyXUc/SDA=)
4: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: X9PlsIxIK/tymRHPH3Dn2w7Nzml17MG5US4WdS+LzEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Mar 25 03:25:59 2026 GMT
Not After : Apr 1 03:25:59 2026 GMT
Subject: CN=69c355c7-595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:a9:1b:2c:4b:3a:7f:60:d5:c7:ab:a1:45:
9b:d6:cf:74:ee:0e:f3:71:a7:21:1f:1d:49:d4:84:
24:fa:08:34:56:ea:8f:3c:47:c7:30:5b:9a:5e:ca:
40:34:22:47:cc:25:dd:22:a7:cc:aa:6d:f0:12:b3:
32:61:10:8f:eb:a3:19:3c:1a:94:3f:68:d6:3f:ea:
1b:bc:99:0c:ac:d3:b5:d9:80:02:5c:09:71:9f:34:
97:2b:e9:16:dc:30:94:30:42:02:8f:a4:aa:24:b9:
be:31:7d:79:39:db:c1:25:9d:44:ca:7c:bf:ba:e0:
75:04:20:e9:7d:52:0c:b9:60:7c:7e:36:38:e4:02:
17:a1:42:14:8d:4a:33:35:6f:f8:7a:63:6c:0f:62:
a6:1d:43:12:84:fc:c4:78:cb:17:d5:6a:9b:4c:be:
92:d3:4d:6b:91:55:01:34:4a:b3:30:40:c5:72:aa:
a6:63:76:98:ee:13:ac:47:bc:32:e3:ac:3b:b9:62:
8b:2e:cd:0a:11:c5:00:6f:fb:2a:c8:80:7b:48:62:
5a:79:e8:93:02:2c:07:05:27:4f:6f:71:17:d9:7c:
2f:b9:2a:95:d8:da:8e:78:b0:e0:04:7e:1d:8c:7d:
c4:2c:16:c9:a3:c8:ee:bb:93:f4:91:71:9c:f7:75:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:72:4C:49:02:DF:CB:93:37:A7:E6:82:FB:55:F8:3D:74:7D:B7
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b2:7b:c6:d7:44:3c:44:1b:3f:30:09:48:32:f8:2e:fb:00:
da:af:f2:63:5a:7c:df:5d:fc:1a:f0:ba:82:3c:bf:cd:13:f9:
22:73:ac:76:01:96:c5:da:00:22:79:82:e6:a3:ad:a2:a7:88:
13:ba:46:52:7d:20:60:3d:2e:8f:11:83:86:b3:d4:12:20:b6:
0b:41:fe:0c:b9:a1:e8:e9:7c:b2:2b:4f:a0:05:71:66:6d:8c:
87:9b:ec:a2:87:30:0a:a7:af:1d:e0:48:c8:8e:b7:71:ab:43:
02:f0:e6:b1:60:cc:d4:20:d4:1b:10:df:3c:2d:dd:52:46:25:
15:b7:5e:64:12:cc:c4:76:57:c6:c1:82:4c:a5:14:34:bb:fa:
a3:f8:a9:8c:b2:44:e7:b9:54:b1:34:a7:53:50:6a:ff:01:0e:
82:d3:a0:9e:43:2b:d1:f5:c5:d6:4f:43:d1:7d:70:da:bd:3c:
4e:ea:78:7b:e6:4d:05:02:2e:e7:c3:14:0e:db:06:64:a4:25:
76:ca:23:12:3b:80:48:05:e3:b0:a1:b8:a2:4a:2e:3b:38:f7:
27:ad:60:69:6a:6a:af:f1:a5:b0:64:79:f3:6b:32:a9:85:9a:
ff:c8:5f:92:28:3a:87:c4:b7:a0:54:af:70:6b:de:06:6b:d8:
b1:00:68:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:18:06 2026 by rpki-client