
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json)
Hash identifier: Lju7e+qCBAAqrupTeSzWD3ezzkbuihKbtiAT/rKcbbo=
Subject key identifier: 80:C8:1D:A7:44:31:4C:58:6B:0F:12:C8:71:1D:CA:79:38:8A:77:8E
Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA
Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
Manifest number: 0189
Signing time: Wed 25 Mar 2026 03:47:36 +0000
Manifest this update: Wed 25 Mar 2026 03:47:36 +0000
Manifest next update: Wed 01 Apr 2026 03:47:36 +0000
Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: 0HG2Rv6h8Rg0+Kw/KZTk0nb6GNrVXC+CE++oigaez/Y=)
2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: 7o8MZ2l9kJsHLTcNTqkyLIW4uWykvkFJiEWSx8KB8XY=)
3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: HXxWYnff/fgeR5wMRkICKjOsvZw/QuWoeLfmhHd+VHU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl
rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA
Validity
Not Before: Mar 25 03:47:36 2026 GMT
Not After : Apr 1 03:47:36 2026 GMT
Subject: CN=69c35ad8-e54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8c:b4:61:ef:98:11:94:94:4d:e3:9b:00:ee:
25:21:20:89:66:2f:1f:65:d2:9d:8f:da:e2:4d:8e:
2a:87:ae:5f:04:ce:ff:40:b7:e9:a7:24:96:d4:1a:
7e:66:52:8d:33:a1:f4:ba:d7:ea:40:ec:09:57:61:
9e:3d:1e:12:32:94:95:5e:70:64:e1:18:40:5a:7c:
f3:a4:c1:e8:b1:c3:dc:c9:93:f2:52:7b:3b:f5:60:
7a:14:03:e0:bc:e2:7d:c1:70:21:83:b6:fa:3d:9d:
ad:41:2d:59:1f:c1:a9:b6:df:7e:e8:73:89:2f:4f:
f0:fc:85:ad:24:1e:4a:be:93:01:e9:5e:95:5c:85:
1b:de:ef:80:81:34:0f:d8:34:1b:fe:ad:69:6a:92:
c1:2f:c2:cf:55:73:c8:73:37:c5:e1:ed:4c:ef:ef:
04:14:ce:24:2d:90:11:aa:ae:e6:a1:48:2d:73:45:
44:97:bd:0a:f0:19:d2:67:93:28:57:bf:d6:c8:1e:
03:a5:44:6c:30:74:f8:f6:e8:7e:18:13:57:05:08:
80:1b:fc:f8:87:89:5c:20:4c:a2:42:dd:66:56:32:
4c:be:7e:74:13:82:a7:49:34:56:38:60:23:2a:4a:
81:5b:f4:27:0b:4b:56:63:91:05:a6:36:7a:6a:60:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C8:1D:A7:44:31:4C:58:6B:0F:12:C8:71:1D:CA:79:38:8A:77:8E
X509v3 Authority Key Identifier:
keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:27:3c:a7:17:6b:41:44:19:6f:bf:0f:24:fd:29:a0:0e:cf:
37:d4:44:02:e4:6b:30:32:86:d2:c2:55:da:fe:2b:ef:26:34:
82:a5:38:95:52:0f:f8:dd:7b:c0:e9:bb:92:97:00:c7:50:8d:
28:99:6c:0e:80:33:ff:6f:7e:ab:e7:d0:21:06:5a:29:a5:f4:
de:3a:51:e5:b0:f2:1d:f3:f6:9e:74:f8:fe:ce:b3:c5:d5:d0:
2e:8f:7c:1f:84:35:0e:bd:a3:f0:b5:db:f0:cc:66:d0:7f:34:
58:07:41:86:c1:a1:9f:55:8f:5f:61:c3:00:e4:24:17:fe:92:
d6:28:8c:36:11:c0:07:49:ad:2a:8b:da:07:a8:f3:29:d2:b1:
ac:5c:6d:be:5c:d5:1d:e4:11:17:a6:a6:75:ce:49:6d:40:25:
7f:db:c6:7b:0f:c7:c1:8d:cf:36:62:ac:00:03:ad:20:bf:51:
2a:3a:2c:5e:f7:42:5d:7f:6a:11:b7:c1:c6:b7:00:f7:4e:d2:
ca:ce:3f:47:11:24:1c:b1:1e:c5:78:52:23:53:7d:6e:80:a3:
aa:f9:24:63:f4:6f:e6:41:b2:57:7a:be:89:87:71:a8:9f:d5:
0d:26:72:0f:a2:25:2d:8a:55:07:c9:b1:0c:ad:09:c2:b5:1f:
3e:1e:a4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:00 2026 by rpki-client