
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
File: QwISXvsUnkUVYMdJW31DzZ6az_c.mft (raw, json)
Hash identifier: 7mom3gC06LFDAPyinvucu2cIHYra+vf2XWkgrc9tb6s=
Subject key identifier: 88:23:A0:CA:AD:0B:53:70:08:3A:01:5E:52:FE:11:5C:29:10:53:31
Authority key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7
Certificate issuer: /CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7
Certificate serial: 0754
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
Manifest number: 0749
Signing time: Tue 24 Mar 2026 21:29:03 +0000
Manifest this update: Tue 24 Mar 2026 21:29:02 +0000
Manifest next update: Tue 31 Mar 2026 21:29:02 +0000
Files and hashes: 1: QwISXvsUnkUVYMdJW31DzZ6az_c.crl (hash: thmH/K43qD8f536AVnpa46GwFQP99u5UtuIdhEopFms=)
2: 8BA860DC616D11F0AD24140DC4F9AE02.roa (hash: sRoeLUhbPjJYbE25LlrvkNaHsVWYDP+5T54uV9J9yk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl
rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AD0, serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7
Validity
Not Before: Mar 24 21:29:02 2026 GMT
Not After : Mar 31 21:29:02 2026 GMT
Subject: CN=69c3021f-a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:40:5c:62:3e:5c:05:fe:11:16:50:e3:96:
ec:9c:4c:01:be:0c:6b:79:b1:3d:de:35:52:f7:17:
7b:e6:58:bc:4a:88:b5:62:bb:0e:d6:ca:c4:ae:64:
85:e3:60:37:9a:a8:65:93:e4:ea:db:14:31:c7:95:
70:5b:9b:0d:a1:75:5a:ab:1f:cf:e7:53:7d:9b:89:
ff:6b:3c:16:71:66:b4:5a:ff:f2:9b:48:04:9a:ed:
28:f4:9a:b3:00:4d:b0:76:e8:48:75:26:5c:dd:bc:
a9:0f:77:5f:c0:eb:6f:94:db:84:ca:43:27:53:d6:
ea:48:6e:00:4d:e5:f8:26:bf:41:cb:95:8a:28:c2:
45:5b:e4:07:a8:5f:0f:d7:3b:d7:14:a2:dd:3a:84:
2a:ce:2b:b3:45:12:e8:ce:67:b5:b9:ff:a4:54:a8:
ba:b9:7a:56:0e:0a:90:ea:92:a1:db:2c:d1:6a:be:
de:e8:b4:7d:4a:64:20:72:fe:6f:4c:d7:ee:d9:0e:
de:a8:2f:1f:d9:e9:83:23:4a:87:b2:e0:35:a7:02:
18:cf:21:e8:e9:eb:54:c0:a3:ac:9b:8d:ce:7b:99:
6e:19:b8:e8:52:9f:85:2f:67:0f:b2:39:50:13:7b:
bb:c6:24:11:6f:b2:0d:23:9f:8e:ca:3e:37:f5:95:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:23:A0:CA:AD:0B:53:70:08:3A:01:5E:52:FE:11:5C:29:10:53:31
X509v3 Authority Key Identifier:
keyid:43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e4:cf:f9:f4:f2:64:da:3f:6c:b2:fc:bb:87:ea:b0:f2:53:
3d:10:ce:4a:09:92:d7:6c:9d:c1:06:71:81:4b:30:57:b9:e8:
1d:97:c0:7e:ba:f1:18:d2:6e:a7:65:74:6d:08:bb:dd:bc:cc:
92:02:32:63:c5:3f:6e:0c:90:3b:33:4b:d8:1a:56:0c:66:2e:
75:b5:89:19:0d:6d:cf:55:03:49:ae:4e:64:14:74:d1:51:b8:
42:1e:f5:e9:40:6b:9f:30:03:13:16:87:b5:05:d2:ad:93:7d:
c1:dc:04:55:98:a8:5a:13:f0:71:56:d2:31:e0:fc:69:a7:3c:
06:29:f7:c7:be:ca:9b:73:35:c9:89:1f:27:d4:b0:d6:a3:52:
6e:00:a0:63:f5:7b:e3:16:5c:af:78:2a:7c:82:bb:79:2f:eb:
91:0f:75:da:7a:d5:14:b2:2f:ff:bb:a3:97:26:9f:ae:68:63:
b9:0f:3d:6d:7c:cc:a0:7c:8a:dc:b4:2e:9d:91:44:52:58:50:
88:dc:75:3e:3b:08:80:8e:77:ec:c8:89:84:05:78:44:e7:1c:
df:d1:30:d7:1b:fc:25:52:9b:7f:91:ad:6c:3b:45:06:a9:6e:
f9:2e:ab:a4:55:ef:04:95:8d:c0:48:6f:cb:54:5d:2f:e0:6d:
a0:0f:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:14 2026 by rpki-client