
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json)
Hash identifier: SRcOSVgawAMVE4TxLfWs7Xi28x62JKc+NccrGvLd5BU=
Subject key identifier: FC:54:7F:19:20:24:49:8D:C6:E4:F6:3D:12:F7:E4:15:D7:DE:C0:CE
Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Certificate serial: 0842
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
Manifest number: 0830
Signing time: Tue 24 Mar 2026 20:42:54 +0000
Manifest this update: Tue 24 Mar 2026 20:42:53 +0000
Manifest next update: Tue 31 Mar 2026 20:42:53 +0000
Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: IgN4CMICE9qpri87qtOnwiV7krDTKpoL0LHAJeUlKjY=)
2: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: YumOATI/4NppEFAS3vwXFXSjDtb9xmsE1aBFsK6y/JI=)
3: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: Gz3paIMkIc2ePietK++Ou+oRymIz2aw9Ky+sSIACdH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114 (0x842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Validity
Not Before: Mar 24 20:42:53 2026 GMT
Not After : Mar 31 20:42:53 2026 GMT
Subject: CN=69c2f74d-2644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:34:20:41:ec:3a:60:61:13:57:b8:31:b6:
61:31:11:c5:78:38:9b:d3:31:40:7c:38:7b:c9:23:
27:6d:7d:a9:3d:3c:cd:3a:02:bc:b5:b5:99:aa:bb:
6b:1f:f8:9a:e5:69:36:eb:80:e8:22:ed:f7:29:93:
27:27:b9:05:e6:6b:ab:ab:04:bd:9f:1a:9d:01:65:
76:98:69:d4:da:cb:3a:1b:b5:93:a6:5f:44:72:c3:
6b:a0:65:61:a1:d1:e3:10:19:a9:be:ca:48:0d:9f:
79:6c:18:a7:4d:7e:81:99:a1:d4:28:24:02:4f:58:
52:09:b4:64:9e:f0:4d:03:76:5f:55:73:89:7c:57:
8d:93:3c:15:e3:17:f4:c0:1c:cd:89:62:e5:da:b3:
a9:fd:da:ab:4c:b9:52:d3:f5:2f:8e:04:9d:c0:75:
8a:82:56:31:ae:ca:0c:c0:ec:f1:03:c4:39:71:f3:
30:c7:ce:b0:3c:4c:ad:9e:c2:db:36:50:33:c1:37:
ae:85:53:df:af:8c:94:7a:9f:ba:4c:a7:ae:ba:f3:
ce:44:24:30:59:01:56:fb:d4:7a:89:9f:43:61:cf:
ad:76:8d:62:a2:3a:ef:89:d1:ad:2f:44:b4:a6:14:
60:56:76:cb:5c:45:97:06:10:90:7f:9b:4e:5b:1d:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:7F:19:20:24:49:8D:C6:E4:F6:3D:12:F7:E4:15:D7:DE:C0:CE
X509v3 Authority Key Identifier:
keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:53:48:fc:28:49:bf:0a:6f:14:d0:ae:99:9e:3a:12:34:eb:
63:7a:0b:b1:1a:52:5b:43:d3:f4:eb:99:c9:c2:83:dd:22:3e:
10:85:75:c4:bc:1e:7d:e1:e4:a1:49:dc:1a:21:e2:ca:b7:ff:
81:10:80:b0:45:d7:d2:1e:d3:d9:ca:85:da:7c:4b:10:8a:85:
92:ad:a2:de:a9:4e:f7:4b:0f:49:0c:be:5e:0f:28:2e:69:a9:
45:ce:f1:84:70:0c:f5:57:32:13:25:de:5b:dc:3e:71:d3:64:
13:eb:aa:1f:ed:f5:ec:43:ba:8a:de:c9:ed:39:7d:d9:60:14:
b1:b6:54:f6:aa:4c:b7:69:52:f3:6e:95:00:35:0d:c7:20:fa:
8b:97:ee:b7:7e:90:91:32:ba:62:11:b4:21:9b:2e:f4:41:54:
6b:c4:6c:5c:ef:87:fc:48:d2:62:4e:61:3b:bf:ab:28:2d:4b:
92:7b:46:5e:5d:36:c1:d1:0a:ab:7b:2f:81:86:1b:c6:08:f4:
d8:fd:8a:98:63:96:8e:cf:00:fc:66:58:ed:97:e5:b4:cf:44:
ee:48:1b:38:84:d8:1c:ca:70:dd:02:a1:15:ac:43:98:bb:94:
91:37:1d:f0:82:c4:6c:6c:14:d0:6a:6a:32:89:8e:92:1f:08:
d4:36:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:56 2026 by rpki-client