
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier: mACTRd9xQ4Z6o2LI3d+CVxQ6YTR7ZJ3eTPyNrPg/PC0=
Subject key identifier: 16:19:4C:C9:43:31:AF:03:EB:66:7A:1E:94:B1:EB:29:C0:2E:44:AE
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number: 0217
Signing time: Fri 27 Mar 2026 02:22:08 +0000
Manifest this update: Fri 27 Mar 2026 02:22:08 +0000
Manifest next update: Fri 03 Apr 2026 02:22:08 +0000
Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: JdObcOi9b1/+LeQLIM3A85/wAL+AIw6KP8nKEwoAJqk=)
2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: Z6+FwOSORTO5IhxDQLbyy7addHO+Ye/7DWvOrUrjW0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Validity
Not Before: Mar 27 02:22:08 2026 GMT
Not After : Apr 3 02:22:08 2026 GMT
Subject: CN=69c5e9d0-2e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:34:68:b2:45:c2:bf:03:b9:44:24:b7:c2:
9b:f0:5d:a2:c6:4b:b4:a3:8a:75:72:e2:34:c4:74:
70:b1:cf:05:52:6d:12:2d:f5:a1:76:1c:f8:4f:18:
71:8f:f8:ee:c1:a1:67:81:13:bd:40:cf:62:9f:e2:
0c:d5:5c:90:2b:9d:d7:2f:59:eb:93:94:19:92:c8:
29:1e:5c:cb:bb:c0:e6:99:2c:1f:72:33:d6:2a:4a:
07:51:47:fc:a4:91:8b:d3:81:54:c0:36:b6:c1:15:
43:ec:62:5e:72:f6:ab:d0:f6:82:5b:54:ea:60:06:
f0:f8:61:a8:a5:4e:08:e6:c9:53:0d:9f:70:7f:51:
e1:f3:2c:9b:d0:20:5a:d4:be:09:b9:9c:53:13:ad:
7e:33:48:13:06:9a:5b:b3:b7:91:1b:61:58:7c:56:
b1:d9:9e:7f:2e:a7:12:dc:d8:9d:92:ea:c1:82:54:
26:12:bb:18:93:63:e3:0a:63:bc:8e:77:62:32:09:
7f:b2:41:a4:35:5c:a5:2a:08:32:c4:af:f8:35:e0:
45:96:c3:f3:88:66:f0:7c:34:bd:4f:2d:e1:6d:d0:
6b:58:ed:46:d4:91:3c:6b:35:b3:b4:2e:2d:37:02:
3d:d3:73:1a:ff:03:42:9b:05:f8:13:6c:4b:a6:2f:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:19:4C:C9:43:31:AF:03:EB:66:7A:1E:94:B1:EB:29:C0:2E:44:AE
X509v3 Authority Key Identifier:
keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d4:eb:f6:43:44:4d:b6:c8:48:20:46:3d:e0:20:45:44:07:
c0:de:d2:eb:06:77:7d:b2:90:5c:84:be:05:69:8d:7f:8e:93:
12:1c:a4:4e:ab:ab:96:f7:63:dc:58:8c:1e:b3:2d:b3:a9:b1:
05:e4:b2:85:ab:f0:47:ac:48:56:50:c6:37:a4:90:8d:43:c1:
6d:e9:39:9c:79:90:a3:10:77:0b:9f:21:89:4d:06:31:0f:c1:
bb:98:b7:9c:71:e2:f8:22:b7:a3:40:3c:13:84:06:69:45:a7:
28:85:22:00:2d:b5:26:06:e6:1b:75:45:ce:04:8d:ea:aa:d5:
95:60:b6:30:25:2c:b2:09:ed:d9:55:58:b5:8e:15:4d:41:3e:
7b:e7:f1:01:c9:ce:3d:29:eb:f1:af:94:0f:ec:f6:6d:81:db:
e5:fc:07:c4:5a:b4:2a:1f:f2:62:13:4a:3c:74:2e:0b:d2:32:
59:f0:79:6a:ac:65:0d:06:51:df:76:87:8e:a9:f3:53:ad:b4:
fc:bb:13:c5:9d:18:f7:e4:ab:0d:62:6f:08:5f:d0:85:e5:6f:
c5:21:4c:91:97:86:e5:8e:d9:9d:22:25:b3:2f:c2:19:61:4f:
fe:16:b1:b2:9d:60:14:66:e9:d8:af:2f:d4:41:d6:01:ba:24:
31:8c:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:39 2026 by rpki-client