
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
File: QMhVkA6-tN3uEZyAjkWar991tYQ.mft (raw, json)
Hash identifier: sxHBIioztracI7g5PBpOE5sRFk+En2OLfM3Mhc41gzs=
Subject key identifier: 2D:E0:54:19:5A:D5:1C:6D:AD:EB:AB:2B:1D:C2:E0:5F:D0:0D:CF:54
Authority key identifier: 40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
Certificate issuer: /CN=A91D1C2E/serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
Manifest number: 0F
Signing time: Wed 25 Mar 2026 08:25:13 +0000
Manifest this update: Wed 25 Mar 2026 08:25:12 +0000
Manifest next update: Wed 01 Apr 2026 08:25:12 +0000
Files and hashes: 1: QMhVkA6-tN3uEZyAjkWar991tYQ.crl (hash: McjjUGUPXP06aI/s8a+yX3SSZoW9Q0O0nROPpG1m97E=)
2: BEBA0144251011F1AF69A29DBE833773.roa (hash: Y8leGHlEV79dvYZJq7U0DpvFPz+K4oSaAR6kvoNnWIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C2E, serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Validity
Not Before: Mar 25 08:25:12 2026 GMT
Not After : Apr 1 08:25:12 2026 GMT
Subject: CN=69c39be9-fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:c4:7f:83:84:e0:73:40:c5:f1:8f:4e:d4:
c3:40:d3:d1:64:4f:bc:ed:a1:0b:80:4c:c9:27:a4:
bf:91:ad:ca:6e:b3:05:58:8d:44:cd:03:4a:98:f6:
1d:76:2f:36:e6:e6:69:ea:3b:32:a2:b2:06:86:0a:
2c:4a:82:7e:38:74:7d:80:15:fc:77:78:9f:6f:13:
ec:58:e9:13:24:44:86:40:34:8b:83:fd:af:c0:d2:
89:8b:b2:d8:29:1f:29:b8:d3:e3:77:e8:b2:3f:96:
25:f0:02:f6:9f:d5:c6:8c:f3:97:91:54:d3:2a:8f:
a9:61:92:aa:cc:fc:6a:dc:ba:2f:ab:27:44:19:49:
42:22:4c:b1:95:54:5e:84:4b:57:cf:46:5f:d3:b3:
74:54:20:37:f6:a0:cd:1c:3b:64:50:92:8d:b1:a3:
b2:64:bc:81:06:6f:b8:6d:fa:9f:bf:03:ed:4a:7f:
01:bc:a1:d8:5a:49:5e:52:3f:5f:0c:2e:a9:c1:a7:
91:6a:24:88:1a:e5:4a:9a:58:97:f0:72:5a:df:ac:
55:24:49:70:21:d3:ff:ec:0c:fe:d7:97:24:9f:36:
08:d5:09:21:dc:ff:7f:6d:eb:31:9f:d7:31:cf:4b:
17:3e:e1:0d:aa:3a:18:89:53:10:b4:93:2e:4a:a0:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E0:54:19:5A:D5:1C:6D:AD:EB:AB:2B:1D:C2:E0:5F:D0:0D:CF:54
X509v3 Authority Key Identifier:
keyid:40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:67:75:58:a5:72:f6:5a:6f:97:d6:e2:29:a8:06:9c:cb:a5:
29:9b:dd:dc:90:bc:f0:46:d3:44:d6:b2:c2:39:f7:f1:79:6d:
41:92:e3:84:da:34:88:36:2b:cd:b8:cb:20:09:50:0a:46:1c:
04:cc:bf:0a:89:a1:94:56:c7:0b:a3:af:74:a5:3e:3b:f9:e9:
e6:59:b1:a2:9d:50:b1:64:05:cc:8d:b5:c8:bb:67:74:b1:68:
31:38:a6:f2:d9:3e:a7:b2:bd:f7:83:90:6b:f0:40:4d:3d:4f:
e9:ea:f4:f0:cd:b0:e3:ff:54:c0:af:50:ce:d5:f1:10:23:38:
c6:06:59:fb:d6:68:c6:9b:ee:e8:ec:a0:6c:9a:90:b4:02:f2:
14:70:42:36:03:fd:25:fe:4a:9b:f3:da:16:e4:ac:93:0d:95:
b1:ea:a5:b8:39:16:a4:6c:2b:b5:ba:bc:0e:26:be:a9:76:3e:
c7:d6:9d:8b:c1:40:7f:8a:81:ae:9f:33:7f:db:4a:2b:bb:9c:
da:2b:f2:63:11:71:e8:07:49:e0:42:07:e6:62:f7:83:02:e6:
7d:7b:30:0a:6a:e6:50:c4:51:5f:f5:06:90:d7:49:7c:49:f5:
18:98:71:f9:c1:f4:91:37:27:fa:b8:9a:ad:e1:85:5f:97:e5:
78:17:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:41:58 2026 by rpki-client