
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json)
Hash identifier: iAWKHbLhy02XoX2X2cdn3BjDRzyGkuXsjl1Rs7w5+T0=
Subject key identifier: 52:24:90:DC:D7:BE:FC:D7:50:B7:6B:A2:EB:FE:C7:12:24:D3:59:15
Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
Manifest number: F7
Signing time: Wed 25 Mar 2026 05:29:04 +0000
Manifest this update: Wed 25 Mar 2026 05:29:03 +0000
Manifest next update: Wed 01 Apr 2026 05:29:03 +0000
Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: kyf6kiU6QIvXlxbUy2wG1QQZSwnV8vYizgSCzpsQL3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl
rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Validity
Not Before: Mar 25 05:29:03 2026 GMT
Not After : Apr 1 05:29:03 2026 GMT
Subject: CN=69c372a0-18a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:08:aa:27:56:bf:54:0b:79:d3:78:d1:03:
31:2d:42:df:de:a6:ad:4f:cf:2f:ab:9c:e0:2b:19:
cf:de:9e:e3:6d:aa:a8:2b:f0:12:f1:ae:c2:28:52:
0f:e5:77:2d:24:e8:10:46:7c:a7:cf:cc:3d:38:2e:
b2:ce:f2:41:ea:b8:27:87:51:95:0d:8b:04:29:2e:
64:50:87:b1:34:dc:89:a7:ec:38:9b:d1:9c:80:35:
7f:cd:6b:9c:c9:5e:1f:22:b0:1d:22:da:54:b6:a2:
6f:90:7f:aa:20:5d:db:b7:4f:70:91:71:76:43:02:
37:33:67:27:4c:7c:85:6d:2a:f0:dc:3d:58:53:b2:
ed:67:d1:ca:5a:93:49:bd:17:fd:b5:6b:4b:67:64:
1a:fb:35:59:a6:ce:d2:b5:6e:f5:8d:22:6b:5f:52:
2e:16:7b:2f:e3:67:38:3f:72:78:90:86:3e:b0:ed:
41:86:d4:29:bf:eb:c1:c1:de:cd:cb:18:ea:7f:1d:
78:58:95:0d:f8:c1:21:a9:ff:f7:ea:9f:18:5f:0a:
22:dd:8e:d8:13:8a:4d:b9:3f:f7:95:21:0c:90:c9:
92:33:85:bd:16:19:1d:e3:1e:51:dc:33:73:e2:f2:
88:01:fe:eb:e7:07:8f:c8:5b:16:70:6d:a0:a0:7c:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:90:DC:D7:BE:FC:D7:50:B7:6B:A2:EB:FE:C7:12:24:D3:59:15
X509v3 Authority Key Identifier:
keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e4:ab:54:53:38:5c:4d:5e:43:9c:30:bf:fe:4f:96:58:77:d4:
63:c1:b9:db:6a:7b:7c:94:0f:86:b6:91:21:90:7f:2b:c6:64:
f0:ec:51:8e:80:a9:11:12:91:00:09:97:b6:15:b0:d9:4d:db:
96:4e:f3:8e:c8:0a:5a:e0:60:0c:d3:92:91:a6:f4:03:99:dd:
d3:ec:08:d3:7a:2d:52:1e:42:fd:ea:0c:be:74:50:cb:a4:91:
b4:a0:bc:9d:2b:8e:c6:bd:17:2a:b5:f3:bf:f5:82:01:03:8e:
45:39:96:94:65:7e:5c:01:a0:db:63:93:a3:2d:c5:e5:c6:2f:
27:68:cf:9a:d3:95:28:30:5a:56:e2:24:f3:75:c9:f3:20:a9:
b2:71:d1:93:15:19:a2:93:2a:96:94:4a:bf:34:47:c0:11:33:
4f:85:6d:b4:9b:33:8a:d3:dc:e6:e3:4d:59:e7:00:59:6d:8b:
71:80:c7:54:b0:3b:f8:74:50:25:b6:bc:ee:c2:00:ee:17:33:
07:1c:f7:a2:cc:4a:39:ca:60:78:d3:f5:1c:06:0c:35:b6:cd:
ed:48:0c:f3:45:02:6d:ec:1a:a3:76:ec:11:89:1a:c6:26:b5:
17:cc:db:c1:4d:76:ab:52:6a:cf:4c:34:ed:ed:34:15:68:3a:
d7:9c:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:30 2026 by rpki-client