
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
File: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json)
Hash identifier: Tuk8AVSRDZeqD190vrT12sYl/3fUX4jCyiMKDBRKmug=
Subject key identifier: 85:BB:0E:FC:01:BC:42:92:5F:5E:15:B1:70:E8:D9:2B:24:98:94:CD
Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
Certificate issuer: /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Certificate serial: 0864
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
Manifest number: 085A
Signing time: Tue 24 Mar 2026 20:30:05 +0000
Manifest this update: Tue 24 Mar 2026 20:30:05 +0000
Manifest next update: Tue 31 Mar 2026 20:30:05 +0000
Files and hashes: 1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: H/bw+MzfBpWqb3zpDU5W3viQJLwozyFFbTATRiecuLk=)
2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: GIrtVeuGP7veqFSx6Nomw6WiVjLjba5dpZ46ETCea3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl
rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4F4C, serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Validity
Not Before: Mar 24 20:30:05 2026 GMT
Not After : Mar 31 20:30:05 2026 GMT
Subject: CN=69c2f44d-01eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:9b:9b:1d:f3:d5:19:30:da:9e:b8:89:31:
44:58:07:94:19:6b:4a:d7:24:83:ec:08:29:18:d7:
9a:ac:de:6a:8a:08:3f:90:f0:5d:97:4a:61:c6:e7:
e2:e0:7a:06:89:6a:12:02:a2:02:86:d8:1f:4b:be:
b4:1c:68:87:7d:10:c5:f5:9a:7b:c7:b6:0c:43:ee:
f6:89:ad:7c:16:0c:9c:ca:b5:5f:f2:d5:c0:4d:d4:
97:05:93:be:25:70:1f:6e:e7:95:b2:8f:e0:fd:21:
03:70:16:55:a8:22:a3:39:c8:48:bc:85:a9:42:10:
1a:68:03:06:e6:aa:16:16:77:cf:52:31:d9:08:58:
bc:17:a6:4e:b2:86:77:2e:97:46:e1:c4:87:9e:1d:
fc:6e:f3:54:76:0b:9c:cb:b0:00:0a:ed:e3:e9:a4:
ac:70:db:09:ad:cb:82:9b:dd:ab:92:ed:be:cc:d0:
65:66:af:b0:03:19:15:68:9b:66:2b:68:22:c4:3a:
d3:2e:08:dd:37:01:59:86:26:25:2f:4a:05:17:86:
f5:78:8e:94:21:ea:bb:f8:14:67:43:d4:2e:8e:99:
dc:78:09:a6:2b:b8:ec:c7:a2:aa:12:83:1b:26:aa:
45:86:98:95:4e:07:69:22:b8:bd:9e:c6:3e:ef:6d:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BB:0E:FC:01:BC:42:92:5F:5E:15:B1:70:E8:D9:2B:24:98:94:CD
X509v3 Authority Key Identifier:
keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7a:26:8c:51:d0:3c:da:e4:28:17:38:30:44:af:b1:91:9a:
ca:22:aa:c1:db:91:09:fe:dd:c6:1b:28:c2:29:f8:90:bd:46:
bc:bc:e1:fe:b7:f9:b0:0e:f8:b1:18:d5:a5:bb:91:9a:2e:fa:
2c:34:43:10:5e:e9:b8:37:26:0e:1d:9a:c2:5d:05:3f:85:61:
38:e5:8a:45:8f:a4:96:22:fc:1e:f2:30:47:1c:e1:ee:88:de:
12:8d:64:47:be:9c:b0:c6:3e:e9:fe:71:28:d6:12:66:c8:08:
d2:e5:63:0a:04:01:28:56:02:8f:61:69:46:b5:c7:2e:ed:b9:
95:83:c4:9a:10:a8:de:90:34:2a:26:11:de:bb:b1:2c:70:17:
c6:cd:6f:ec:98:4f:65:12:ca:ea:f8:f9:5d:44:af:e7:c4:b1:
b2:2a:70:b8:43:26:cb:98:ed:14:a8:fd:2a:96:ff:2b:dd:d0:
0b:35:98:87:01:aa:d4:21:b8:bf:08:fa:0f:c0:c1:12:f7:52:
8e:4e:6c:47:36:90:f7:6e:bb:0e:23:a8:b7:48:75:56:bb:e5:
71:f1:45:23:42:7a:51:42:79:db:b2:26:06:17:55:15:ef:09:
87:a4:87:7f:df:fb:8e:5e:08:04:37:c6:ad:0a:d1:2e:14:46:
32:de:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:58 2026 by rpki-client