
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json)
Hash identifier: 5+nd7uOLZZ4SCdP5DC63yaauNYt46h3mOt21+RUk1qA=
Subject key identifier: D7:20:83:7D:1B:29:00:D4:F8:F5:67:85:38:E6:2F:DA:7E:C3:5A:1C
Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
Manifest number: 0103
Signing time: Wed 25 Mar 2026 05:23:03 +0000
Manifest this update: Wed 25 Mar 2026 05:23:03 +0000
Manifest next update: Wed 01 Apr 2026 05:23:03 +0000
Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: ClK7CxWBx8pNHYP4cOzTlmcyH2AOC7TaOjEhZa+LCX0=)
2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: P5+kdRcpYE+yFLD64Qimw3RoARkVgaUfcrwZcF1uiC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Validity
Not Before: Mar 25 05:23:03 2026 GMT
Not After : Apr 1 05:23:03 2026 GMT
Subject: CN=69c37137-4d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:46:3d:d8:15:e4:56:f2:20:9b:e5:d7:b7:
7d:e4:2c:b8:96:41:bb:f4:1a:8e:97:64:c4:f1:5b:
c1:2b:df:6a:21:e5:3c:a1:0a:6f:cc:41:0f:65:0b:
d9:fa:fe:b4:f1:ed:ae:d0:96:87:e4:4b:3c:1d:d1:
3a:d9:2f:a9:9e:b1:84:62:2a:f4:58:52:a1:d0:51:
d4:b6:5c:39:c7:b1:68:ce:b5:d6:96:0d:21:d1:c7:
29:6e:77:c2:55:ed:c8:52:fa:3c:f4:4b:23:f7:2a:
b0:28:52:74:cc:b8:0d:fe:4d:2a:7e:33:23:c6:8c:
87:27:19:ae:0e:90:53:bc:f8:4f:c6:58:65:5a:9a:
94:64:28:15:c7:92:6e:fd:6b:85:3c:81:7e:a8:db:
3e:80:e8:eb:ee:19:fd:b4:7d:fc:f4:17:1c:d5:de:
75:39:b2:ad:36:6a:8b:45:ce:e2:e8:fb:0b:2c:14:
9e:95:ab:14:d3:89:5a:65:e2:f7:55:b4:33:7e:6f:
ae:d4:8d:b9:30:8f:8e:26:47:5e:94:2b:c5:23:32:
78:ee:02:a8:80:d2:b8:76:0f:2d:cc:b8:9d:25:55:
aa:c9:26:f0:61:77:1a:78:c7:2c:5b:26:45:6d:68:
3e:41:00:16:cf:59:a7:c3:73:19:d9:e0:de:e1:bf:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:20:83:7D:1B:29:00:D4:F8:F5:67:85:38:E6:2F:DA:7E:C3:5A:1C
X509v3 Authority Key Identifier:
keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:cf:6c:93:72:8a:de:22:2c:19:a2:85:9c:5b:28:22:90:
bb:e8:0c:c2:12:86:88:e2:c3:d6:7a:e9:3d:29:33:11:7a:dd:
37:03:54:b6:d3:32:ee:c0:f0:d4:30:47:05:38:68:e6:7b:3e:
56:c4:fb:a1:1b:0f:1a:a5:2d:93:24:72:37:93:77:7a:df:38:
b8:7e:92:0d:b8:ec:a2:2c:4a:f2:8b:24:1f:8c:f4:3e:8c:50:
20:e2:14:02:00:fa:bf:07:01:7c:38:a3:96:3a:0d:5e:71:c0:
c3:70:c8:f4:09:72:83:57:e7:e6:54:76:8c:85:59:bb:dd:b5:
32:6a:6e:00:0e:ac:60:c7:c2:a2:2a:91:d3:37:39:ea:42:f4:
48:b9:ca:6d:de:0d:5a:10:74:4d:81:ec:97:34:08:5a:cb:28:
05:c2:cb:86:be:05:0b:7e:99:3b:e8:58:35:02:66:5f:a2:ce:
59:e4:af:69:01:8b:45:8c:72:cc:af:85:36:86:24:ce:b0:95:
39:1f:63:dd:16:ca:c1:4e:f0:da:20:f7:eb:66:0f:65:12:35:
3d:5a:e4:27:c4:98:22:49:3d:42:66:51:a2:52:3e:d6:b4:08:
4b:a2:6a:47:61:6e:68:e6:a1:17:68:21:2c:f7:6d:aa:a7:8d:
b8:51:d3:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRFRkUxMTAvBgNVBAUTKEE4MjkyRjYyMDRDODIxM0Q3OTFGQTZDQ0FBRjU3ODUx
OTRFRjgxQTAwHhcNMjYwMzI1MDUyMzAzWhcNMjYwNDAxMDUyMzAzWjAYMRYwFAYD
VQQDEw02OWMzNzEzNy00ZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj+BGPdgV5FbyIJvl17d95Cy4lkG79BqOl2TE8VvBK99qIeU8oQpvzEEPZQvZ
+v608e2u0JaH5Es8HdE62S+pnrGEYir0WFKh0FHUtlw5x7FozrXWlg0h0ccpbnfC
Ve3IUvo89Esj9yqwKFJ0zLgN/k0qfjMjxoyHJxmuDpBTvPhPxlhlWpqUZCgVx5Ju
/WuFPIF+qNs+gOjr7hn9tH389Bcc1d51ObKtNmqLRc7i6PsLLBSelasU04laZeL3
VbQzfm+u1I25MI+OJkdelCvFIzJ47gKogNK4dg8tzLidJVWqySbwYXcaeMcsWyZF
bWg+QQAWz1mnw3MZ2eDe4b+XbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcgg30b
KQDU+PVnhTjmL9p+w1ocMB8GA1UdIwQYMBaAFKgpL2IEyCE9eR+mzKr1eFGU74Gg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xMTY0Q0FFMEE1
MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlUMTVINmJNcXZWNFVaVHZn
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REVGRS8xMTY0Q0FFMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlU
MTVINmJNcXZWNFVaVHZnYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM9zPbJNyit4iLBmihZxbKCKQu+gMwhKGiOLD1nrpPSkzEXrdNwNUttMy7sDw
1DBHBTho5ns+VsT7oRsPGqUtkyRyN5N3et84uH6SDbjsoixK8oskH4z0PoxQIOIU
AgD6vwcBfDijljoNXnHAw3DI9Alyg1fn5lR2jIVZu921MmpuAA6sYMfCoiqR0zc5
6kL0SLnKbd4NWhB0TYHslzQIWssoBcLLhr4FC36ZO+hYNQJmX6LOWeSvaQGLRYxy
zK+FNoYkzrCVOR9j3RbKwU7w2iD362YPZRI1PVrkJ8SYIkk9QmZRolI+1rQIS6Jq
R2FuaOahF2ghLPdtqqeNuFHTRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:02 2026 by rpki-client