
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json)
Hash identifier: PM8JfnITSgWn99zK3w46gIUwZF7eJHZmrmzi+WGz6oY=
Subject key identifier: 90:E7:35:74:49:E3:D9:5C:96:35:8F:71:E1:AA:A3:9E:23:11:09:96
Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Certificate serial: 0E6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
Manifest number: 0E62
Signing time: Tue 24 Mar 2026 17:39:07 +0000
Manifest this update: Tue 24 Mar 2026 17:39:07 +0000
Manifest next update: Tue 31 Mar 2026 17:39:07 +0000
Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: l0DydmjydLOVrmkwZvj5nXcSv3yBEbY1AwdvWrj8J2c=)
2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: zMc87DnSy73TYxx1wBAiz0nMEO5+508OWj9MKWr4ZGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3693 (0xe6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F783D, serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Validity
Not Before: Mar 24 17:39:07 2026 GMT
Not After : Mar 31 17:39:07 2026 GMT
Subject: CN=69c2cc3b-4912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:5f:cc:b3:02:a9:63:54:65:bc:f5:d7:aa:
e9:3c:21:f1:91:1f:c3:c7:1c:e6:4a:8b:59:e2:f5:
e9:a5:ef:02:c1:9f:4e:4f:c5:67:8e:9a:8a:a1:76:
b9:83:72:a1:b5:98:b3:d2:2f:08:85:b2:d6:b1:22:
f8:7a:c5:b6:e3:79:e6:f1:70:86:e7:54:43:c4:04:
0e:a3:f4:3b:d1:eb:0e:0e:06:fa:c6:fc:fb:d8:79:
da:a2:00:11:66:b0:8e:14:65:8c:1f:7d:4c:f9:b2:
bb:0a:e2:ad:91:d6:8f:68:32:51:ce:30:44:4e:26:
b9:65:e6:09:ca:a1:1a:cb:1b:0f:bc:06:78:a8:a1:
5e:07:b8:8e:70:04:73:12:37:96:ae:ff:93:80:eb:
da:44:8d:fb:15:94:7e:7d:f4:ae:49:15:cf:86:5b:
2b:cc:56:31:51:64:54:a4:5f:e1:18:f5:d8:1c:47:
b3:a7:fa:f2:7b:13:62:29:37:ce:b8:51:bb:1a:de:
25:cc:63:44:25:3c:a7:46:f7:86:9b:b0:0c:9a:4f:
53:83:6d:0f:58:f8:0f:2a:22:8d:b4:83:f0:e8:c7:
8a:01:3b:77:93:b9:46:7e:f3:4d:af:9e:a4:23:bb:
47:db:b4:2b:bf:08:37:cd:2c:cf:7d:86:f7:08:0d:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E7:35:74:49:E3:D9:5C:96:35:8F:71:E1:AA:A3:9E:23:11:09:96
X509v3 Authority Key Identifier:
keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:13:69:2c:1a:8d:71:41:78:64:5f:d6:29:d3:0f:5b:88:93:
d4:3a:db:25:08:d9:71:c0:24:16:33:f2:14:e9:67:09:96:38:
45:e5:4d:53:d8:f2:c0:3b:f6:d8:fc:eb:e8:cd:13:9c:ed:54:
7d:06:aa:49:1a:c7:fa:13:3a:69:9d:20:8b:93:01:82:10:60:
4c:32:2f:f0:e4:c9:8d:f4:81:92:34:88:db:ec:b5:b7:fb:ee:
29:f4:f3:8b:f8:2a:6e:ec:72:bb:75:3b:3a:11:a9:27:52:69:
70:c3:c9:55:b9:33:e1:f1:02:6f:40:e9:00:54:0f:f8:ad:5a:
06:a8:22:e8:82:a3:08:ae:24:e5:fe:6b:d7:84:63:8a:aa:54:
37:5a:10:82:f7:16:f9:12:90:92:2b:a7:80:15:0e:80:ba:24:
f3:1e:ca:2b:1f:56:14:61:49:c8:b1:00:a8:41:3f:b9:37:52:
1b:f8:d6:00:69:78:de:02:6d:a0:0d:3f:6e:c7:13:54:bc:23:
46:96:cb:e4:ce:d8:33:92:ab:2d:dd:6d:63:f6:67:d3:99:45:
ef:7f:64:dd:97:1c:ea:fa:68:cd:ae:72:e2:4f:b3:34:b9:90:
e9:26:53:9a:0a:84:f0:43:25:6d:9a:05:e1:68:f0:5a:2a:76:
00:33:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:14 2026 by rpki-client