
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json)
Hash identifier: 0uuMOWWAjtxFlW4Wwv51DzcIJo5MJ4CnBGWBJ6QBPYo=
Subject key identifier: DC:F9:4F:5E:D7:D4:47:9D:B6:34:7D:43:08:21:4C:ED:A8:28:05:CF
Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Certificate serial: 045F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
Manifest number: 044B
Signing time: Tue 24 Mar 2026 23:53:43 +0000
Manifest this update: Tue 24 Mar 2026 23:53:43 +0000
Manifest next update: Tue 31 Mar 2026 23:53:43 +0000
Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: 2PuBrqGPYOfg0TdGMB3v4B/5C4tPZH234u/26lYlOhg=)
2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: KtIufux/j8uZsLjUbLPfpnJOkVL/4Ue5N16JttxJrtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Validity
Not Before: Mar 24 23:53:43 2026 GMT
Not After : Mar 31 23:53:43 2026 GMT
Subject: CN=69c32407-1d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:53:02:cf:8f:7c:25:c3:af:9d:c0:ed:b7:
f8:b1:40:c9:0b:58:4a:d4:f0:c6:5e:a4:33:f6:96:
70:76:ac:aa:31:f6:c7:05:98:1b:9c:a5:13:4b:0f:
ce:28:ee:67:cd:e0:71:48:d4:0b:27:a6:85:de:80:
0c:00:44:40:d4:76:de:36:2d:f1:2e:19:4e:a3:33:
6f:b9:6c:97:e7:bd:d8:1b:58:96:96:0b:0b:aa:15:
cf:88:79:f7:2f:f0:70:1a:da:19:10:f1:59:83:14:
3f:10:c1:6c:f2:47:c7:39:c1:fe:6e:95:fb:40:8c:
a9:bf:07:d1:48:60:d1:97:98:f0:e1:2b:c0:67:79:
32:3d:42:17:e9:29:8f:4c:8f:6a:be:a9:3e:72:8d:
4b:6a:73:8a:ba:66:fe:31:c6:46:68:1b:ad:bf:24:
ef:65:9f:d1:da:cd:ba:e7:35:51:1a:68:f2:8f:22:
5f:6a:2c:5f:b5:e1:1e:90:6e:af:12:45:b9:44:57:
2c:f7:72:70:50:75:b1:7a:85:c0:57:39:51:03:57:
26:ed:09:03:3e:ae:f0:79:e7:75:6b:59:e7:df:3c:
25:15:fd:b7:2a:83:6c:f1:b4:40:34:4f:56:57:1b:
43:b0:e0:67:f9:8f:82:7f:6f:79:94:26:b0:c1:fb:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F9:4F:5E:D7:D4:47:9D:B6:34:7D:43:08:21:4C:ED:A8:28:05:CF
X509v3 Authority Key Identifier:
keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:03:2d:30:51:f2:48:7a:99:53:72:37:4f:b9:97:a3:84:
2f:9f:32:d1:99:57:7b:25:91:90:de:41:9e:da:89:30:d1:14:
d4:75:44:f6:a8:ee:e4:fb:70:58:c3:71:92:45:65:84:e6:51:
e5:46:4a:68:55:ee:e4:1f:7d:4d:a0:b6:ca:4d:f0:3e:fb:e8:
10:8e:57:d4:e2:3b:cd:67:66:79:e3:d0:9e:53:9e:dd:39:da:
57:f4:bc:1e:50:8a:95:71:44:a1:74:24:29:d0:f4:55:68:30:
f6:22:4a:b0:72:7c:81:6c:4c:44:5b:73:c6:eb:03:86:ec:b7:
ca:8c:2d:51:bd:3d:91:ab:41:82:0c:14:11:5c:71:ed:2f:ca:
37:77:48:67:24:a2:2c:3c:4b:76:00:c7:33:8a:d2:c1:4e:e7:
6e:f8:7c:83:2d:0d:ff:d2:2c:b0:d7:e9:3f:1a:c9:21:b8:97:
2a:50:29:61:9d:69:5b:8d:e1:5e:bf:5b:7a:c0:75:e0:42:ca:
b2:2b:ab:ea:37:27:79:d8:84:89:1b:1f:ed:a8:0a:c5:6d:f0:
b7:3e:de:2d:c4:d7:17:1f:1d:1f:c8:3c:b3:be:2f:f2:d3:fb:
83:e0:2d:47:84:3f:a6:4b:24:21:99:27:03:d6:02:74:78:c6:
ed:14:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:12 2026 by rpki-client