
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier: ZhVixGNn1rHeHR3VCyz9Ruj8MM0bwWS+quYfvTb56No=
Subject key identifier: 64:88:F2:34:B6:6F:0C:C6:C0:A5:6A:08:F2:28:81:B4:C7:AE:51:73
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number: 9C
Signing time: Wed 25 Mar 2026 06:36:29 +0000
Manifest this update: Wed 25 Mar 2026 06:36:29 +0000
Manifest next update: Wed 01 Apr 2026 06:36:29 +0000
Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: 1AxwQihMezUg0tqHpJ+AStICskZjAzb+M7Rb8L9Mb38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Validity
Not Before: Mar 25 06:36:29 2026 GMT
Not After : Apr 1 06:36:29 2026 GMT
Subject: CN=69c3826d-81f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:98:d3:07:1e:d7:ee:92:c5:a9:6d:61:0a:
d7:83:29:7f:1e:05:0f:1c:f2:b4:56:89:9e:dd:4d:
b1:bf:16:62:bb:ff:20:f8:e4:06:1d:de:b5:a6:86:
87:22:ee:5f:ff:14:dc:5c:1a:47:f5:08:bc:e2:19:
46:1b:98:83:98:25:d6:47:44:04:60:1b:41:5e:1a:
74:76:8f:1f:a3:4d:2e:1e:64:d6:99:68:a5:65:fa:
c3:51:09:44:fc:1d:ec:48:c2:d8:6c:38:2c:cc:5f:
24:fc:41:44:2b:5d:85:16:d1:8f:bd:df:51:0d:1f:
d7:5f:0b:ba:af:ed:13:af:1a:ce:e1:46:b7:68:4c:
41:2f:9f:24:d9:07:6a:a0:ac:95:44:7c:f0:45:1d:
cb:37:e2:7d:aa:fa:30:56:83:83:7f:85:34:eb:f0:
28:a6:10:61:be:17:02:f3:bb:75:08:78:28:ad:b4:
86:9e:45:06:4f:58:06:ec:b5:13:bd:e5:fd:1f:80:
8d:48:79:88:fc:95:1e:95:c9:d5:c0:f1:1a:da:77:
c6:97:e2:27:6c:5f:20:21:95:f3:f9:63:42:35:12:
ca:34:6f:89:94:07:10:d8:e9:cd:5a:33:1e:e6:fc:
a7:28:f5:4f:10:f1:6a:02:23:69:25:5b:97:c6:be:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:88:F2:34:B6:6F:0C:C6:C0:A5:6A:08:F2:28:81:B4:C7:AE:51:73
X509v3 Authority Key Identifier:
keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:2d:9e:ea:fa:a1:a2:4b:06:3c:ba:e1:cb:7f:04:af:e7:69:
e6:3e:89:9f:f1:96:23:d9:ac:10:b3:02:a0:21:d7:73:a0:e5:
74:3f:43:c4:e5:d4:2f:d0:c1:2b:f8:22:79:5d:c4:bc:8d:aa:
08:04:8f:b9:92:df:f3:20:19:6c:e6:ab:52:2c:81:bd:bc:a5:
67:ec:47:58:af:65:8f:21:a8:9e:33:92:f6:ae:31:b8:ba:bb:
7e:40:f3:11:f7:fe:a1:61:a3:07:4b:5c:2f:53:a7:98:8b:bc:
27:56:6a:9d:46:d2:ce:d1:88:a1:c6:32:d9:7c:cb:b5:cf:3a:
17:2a:79:d1:7d:74:f6:16:4a:cd:9f:ef:be:cf:62:87:e4:26:
75:1d:76:b5:24:52:ad:e9:c3:fa:95:ad:86:cd:72:58:95:ae:
a9:2d:49:fe:dd:67:f6:93:0e:c7:69:1a:42:a7:ec:fc:d9:aa:
6c:9b:cf:8a:d3:3d:23:1e:3e:3c:64:36:a0:d5:b7:eb:ea:ba:
49:09:82:76:95:28:dd:e1:4d:46:d8:d5:d0:2a:9a:8d:7f:76:
e7:db:69:52:26:7e:de:a4:d6:5b:11:80:d1:ab:44:13:db:25:
db:49:f5:db:e2:41:1a:01:cd:fd:7a:ee:b4:20:87:7c:49:83:
9a:54:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:36 2026 by rpki-client