
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json)
Hash identifier: go2g19qfxbbwNqNKOY5c9jZ6Gp4xBcaPs0duWSYZI+U=
Subject key identifier: CC:1D:A6:E5:E0:35:61:AD:F3:41:13:27:A6:66:3D:2E:65:D5:51:D4
Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Certificate serial: 055F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
Manifest number: 0558
Signing time: Tue 24 Mar 2026 23:04:21 +0000
Manifest this update: Tue 24 Mar 2026 23:04:21 +0000
Manifest next update: Tue 31 Mar 2026 23:04:21 +0000
Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: 2Ov9pJ+Srz3qtqI4owbf6reMNYewDwWy6D7DO64nazk=)
2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: caAFkHTlhWluO59jeavUVW/7IbtAmxOVURoDRMIZiDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1375 (0x55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Validity
Not Before: Mar 24 23:04:21 2026 GMT
Not After : Mar 31 23:04:21 2026 GMT
Subject: CN=69c31875-5517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:4c:8d:33:43:71:0c:d5:72:d9:43:50:06:
b7:24:bd:e7:2a:b9:12:81:98:36:6a:bf:64:4e:4e:
c8:e8:01:67:45:82:0f:82:d4:d2:a4:64:5e:fe:0f:
07:fa:01:32:bf:31:e7:5c:1a:13:c3:f3:b9:1a:87:
24:c8:8c:ee:8b:73:36:a3:05:f0:83:3d:76:90:15:
ac:2d:4e:a2:80:2a:3d:cf:1f:1b:0e:87:6a:8a:05:
8e:6f:ff:30:12:5e:5b:fe:91:03:2c:00:a5:55:28:
c7:69:de:7d:95:56:05:91:2e:3a:0b:3c:9d:be:45:
17:9e:6f:ad:34:3b:97:2d:ee:ce:55:1c:db:a9:89:
a3:96:45:8f:1c:23:d1:85:d0:bd:a1:f0:8b:1a:c8:
4e:82:65:36:57:c7:69:68:30:87:c7:db:81:cf:a8:
6f:a1:dd:5b:0b:57:e8:91:e8:e5:59:f7:73:6a:d5:
59:76:49:21:24:06:24:e0:b2:79:49:d5:1e:f2:a6:
3f:0d:64:2d:e3:0f:da:25:e1:58:fd:34:3a:93:f5:
5b:0b:fc:40:1e:48:0f:e9:2b:cb:26:af:d6:76:f1:
11:fc:96:e0:3f:1a:38:9f:70:a0:a1:41:e0:a1:ce:
97:ea:8e:98:10:0f:df:ce:37:99:58:32:8e:63:1c:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1D:A6:E5:E0:35:61:AD:F3:41:13:27:A6:66:3D:2E:65:D5:51:D4
X509v3 Authority Key Identifier:
keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:4d:e1:2a:ae:c8:22:e4:32:7c:84:15:73:27:30:ab:70:57:
97:a8:00:9f:3f:37:84:f6:7f:f0:22:e1:ef:1d:ab:78:98:ca:
a6:c1:00:ac:0e:30:08:89:09:7f:73:07:6b:4d:e3:1e:49:13:
20:b6:b8:72:07:c9:f3:f0:e5:f5:bf:a9:49:35:05:2c:fd:33:
fb:89:16:7e:d7:26:ae:67:b4:d8:ea:4e:e7:e2:32:15:21:af:
62:8a:ed:c2:af:6a:3a:37:1d:c0:e4:aa:4b:64:f2:24:3a:2c:
47:18:db:ff:af:3b:2c:0d:b0:92:b2:0f:7e:f2:c5:25:2f:b5:
ea:c1:ca:b3:56:d8:33:e2:d2:fe:94:e9:73:33:5b:64:bb:cf:
96:bc:bd:9c:07:95:42:64:0d:c7:c7:c5:0f:03:48:ac:9c:db:
d6:6a:b5:a4:19:db:40:a8:94:0c:41:42:69:28:5e:2e:60:c4:
e0:ea:ff:c9:06:95:e3:c3:f4:73:9c:e7:cb:f7:61:27:ab:b8:
cc:ae:b1:db:73:71:35:d0:80:50:74:ae:13:f6:68:34:5b:f9:
06:e8:9c:a9:b3:75:bf:fa:42:46:fc:3b:d8:ff:69:74:38:e7:
c9:c9:04:90:97:fc:9d:4d:d4:58:e0:9e:f0:a9:5c:bc:4f:ec:
c5:e2:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:37 2026 by rpki-client