
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier: vZGn6dJb4GJ+36CIGfL1w533caqhP+rf3+o5PaPL7RA=
Subject key identifier: B6:1F:8B:CA:6D:47:47:B9:0E:75:59:C3:B6:F3:51:9B:E8:5E:06:6D
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial: 1E6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number: 1E5F
Signing time: Thu 26 Mar 2026 16:03:39 +0000
Manifest this update: Thu 26 Mar 2026 16:03:39 +0000
Manifest next update: Thu 02 Apr 2026 16:03:39 +0000
Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: h7/JTOvd1IzrTtT0kdG8SHO/LFQif2unb6Tad8E+iH8=)
2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: 9fJ1ri6IaNU9VtWg8Hqy+rRwD5x8nCDjNKKvvrEFZII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7787 (0x1e6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Validity
Not Before: Mar 26 16:03:39 2026 GMT
Not After : Apr 2 16:03:39 2026 GMT
Subject: CN=69c558db-6794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:27:f3:ee:44:a4:44:9c:b2:e9:5c:df:a0:
24:64:73:43:eb:76:3c:63:0a:9b:cd:70:db:ea:e5:
7e:b4:46:61:16:75:fd:39:b3:b5:ca:4b:f3:dc:99:
3b:55:60:bb:d2:5f:4e:52:0f:f5:18:00:89:eb:b6:
b0:14:81:9b:b8:0c:7b:13:bf:80:fe:b7:5e:17:e1:
a2:58:9f:b5:16:25:9e:ae:f0:68:39:fd:1c:18:78:
d7:95:a7:2b:fd:4f:b9:d5:c2:32:4c:8c:6a:15:44:
8f:c4:ba:02:80:2b:5d:88:fa:e7:10:00:cf:87:60:
ef:12:21:5b:90:a2:8f:6b:3e:d5:80:a7:80:d5:52:
9a:1d:55:69:85:df:b0:89:e9:2c:41:85:57:94:04:
52:8a:a6:d4:e9:b2:17:e6:42:2c:21:74:c9:52:6f:
c3:1f:8f:a5:62:99:7a:f0:f8:83:34:22:53:a7:6a:
97:90:92:f5:06:da:0c:21:c4:bc:66:3d:2f:7e:88:
5f:aa:c7:02:f7:2d:f3:9b:c5:95:0e:14:4f:f3:fc:
be:eb:90:a6:0d:ea:12:b7:2b:39:a8:52:5a:5c:7e:
2b:4a:72:13:ca:86:ca:0f:a0:ad:d7:ec:b3:14:ef:
f7:9d:17:cf:da:d0:b9:5e:d7:ea:2c:71:51:4a:15:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:8B:CA:6D:47:47:B9:0E:75:59:C3:B6:F3:51:9B:E8:5E:06:6D
X509v3 Authority Key Identifier:
keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:19:ed:64:6c:41:91:c5:62:ad:2c:1d:23:e0:44:3e:ea:d0:
10:68:c2:57:0a:b2:7d:6b:0a:25:04:53:2e:2a:1d:7e:c2:fe:
12:e1:c9:a7:f3:89:65:68:86:51:46:12:dc:0e:1a:68:dd:94:
ba:89:36:be:80:5a:f3:7f:1a:88:73:bc:fe:16:cb:ee:a4:09:
6d:59:48:a9:16:ee:87:7e:4e:68:04:66:ff:43:d0:4a:ee:51:
38:d6:e3:62:6e:f8:85:30:76:f7:63:94:5e:0c:b7:a8:fd:fd:
6f:4e:3b:7a:4a:42:89:64:fd:5c:3e:8a:bd:b6:df:f3:f7:78:
72:c6:74:68:e9:6a:54:9a:43:27:34:69:4d:3f:b0:6e:68:d9:
95:d3:1f:fb:8f:83:da:30:06:69:09:ae:46:48:b6:27:6b:f3:
bd:08:6a:64:e4:51:cf:b8:bf:b5:03:8d:e9:1b:c3:99:52:a6:
2b:64:fd:05:48:58:ec:d9:54:b3:f6:fc:ff:85:5f:f9:6a:75:
1f:f1:36:15:a5:d4:9b:69:90:2d:f4:cc:ac:f5:e0:ca:fe:ca:
c1:0d:2a:f3:33:21:7e:fb:f9:4b:1a:43:fe:d9:be:e5:af:26:
f1:47:82:2e:75:53:71:af:cd:b2:aa:c6:9d:a6:ad:68:d4:c7:
fc:31:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:20 2026 by rpki-client