
$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json)
Hash identifier: iAeNmEHy15Np+C3aCn168FuH+KLUIwnUeuvukkBDlWk=
Subject key identifier: 19:C4:45:BD:EE:B6:54:69:E7:87:03:FA:DD:EC:35:5C:CF:BC:E1:26
Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Certificate serial: 0C4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
Manifest number: 0C4B
Signing time: Mon 02 Mar 2026 03:09:39 +0000
Manifest this update: Mon 02 Mar 2026 03:09:38 +0000
Manifest next update: Mon 09 Mar 2026 03:09:38 +0000
Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: czV6WU5VGl+n9YfIJ9Zv8HH0sn9/km4/L1TYnSrObnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3147 (0xc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Validity
Not Before: Mar 2 03:09:38 2026 GMT
Not After : Mar 9 03:09:38 2026 GMT
Subject: CN=69a4ff72-8a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:c2:fe:92:b9:7c:1e:9a:6a:f5:4f:a4:01:
27:87:98:dd:47:7e:20:2a:1f:75:08:1a:8c:7d:c7:
a9:f6:4b:57:a3:c7:db:8d:57:40:e3:1a:66:e4:d1:
0c:eb:fb:a4:26:5e:2b:8c:2c:b3:dc:38:ef:75:87:
33:8a:04:50:3f:f4:90:04:cd:c8:f6:2e:43:0a:88:
f5:30:2a:c7:bc:20:9c:27:38:c9:5d:79:56:2f:49:
d8:4c:4a:21:9e:04:74:22:ee:4d:77:d8:39:d0:68:
e1:b9:8e:cb:fe:b3:c5:5d:f1:75:85:93:16:cc:a7:
09:63:5f:60:30:f8:9b:f9:70:65:20:d6:81:a4:50:
43:e8:28:03:c7:18:aa:a8:da:3e:28:fb:90:cb:7a:
02:35:05:63:1e:f8:54:43:51:b4:97:d3:44:a7:64:
23:a4:d5:38:a2:ac:24:17:44:c6:fa:84:09:01:20:
d2:36:88:2b:4c:be:7c:ad:71:c5:8b:78:49:f1:74:
03:4f:89:74:69:f3:66:79:9c:3f:8c:6f:e1:d0:83:
f6:e3:b7:c0:f9:68:96:ae:78:2c:db:8b:e0:33:f1:
3f:f1:64:67:a5:29:fc:05:a0:0e:24:b6:91:da:8d:
ff:c8:46:b3:15:d7:87:06:14:2b:68:d6:02:fd:61:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C4:45:BD:EE:B6:54:69:E7:87:03:FA:DD:EC:35:5C:CF:BC:E1:26
X509v3 Authority Key Identifier:
keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e6:45:af:1a:be:14:a6:1f:8c:ce:83:6d:2d:63:e8:57:97:
de:3e:26:1e:92:1c:f8:37:56:31:04:db:61:c9:28:40:74:90:
fd:e9:17:35:36:ea:15:7d:9f:9a:a9:42:14:f5:41:51:cd:47:
c9:45:9b:f2:57:7b:60:f9:a0:52:38:2b:83:33:13:00:ca:a1:
1e:66:77:35:bb:bb:8e:5a:66:cd:30:26:41:2b:fc:a4:7d:dc:
a7:06:e0:91:9e:b8:49:4c:21:fa:f0:20:70:f8:51:fe:f4:bb:
de:0f:8b:a9:4b:f6:a3:14:01:bb:1d:a9:ab:19:2e:da:27:6c:
aa:ac:0a:61:aa:a8:36:80:56:91:a2:cc:84:02:2a:63:43:df:
85:1c:c5:b6:5f:1c:b2:2e:aa:65:99:a8:f3:93:84:5d:6c:2a:
28:53:3d:59:e4:11:94:0c:82:2e:c0:97:b0:42:07:74:28:49:
e7:89:45:f9:51:ed:99:9b:4b:46:aa:74:1a:92:20:78:3b:53:
4b:98:01:ba:ad:b3:58:91:e4:b5:49:97:7d:21:f8:61:ea:08:
5a:7d:19:a5:98:c2:44:17:13:69:f9:e6:c0:43:78:65:60:0f:
d3:af:66:fd:24:03:ec:be:0c:3d:8b:4f:86:fd:bd:0f:15:43:
fd:3f:90:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1
MjNBRkFGQzUwHhcNMjYwMzAyMDMwOTM4WhcNMjYwMzA5MDMwOTM4WjAYMRYwFAYD
VQQDEw02OWE0ZmY3Mi04YTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0oLC/pK5fB6aavVPpAEnh5jdR34gKh91CBqMfcep9ktXo8fbjVdA4xpm5NEM
6/ukJl4rjCyz3DjvdYczigRQP/SQBM3I9i5DCoj1MCrHvCCcJzjJXXlWL0nYTEoh
ngR0Iu5Nd9g50GjhuY7L/rPFXfF1hZMWzKcJY19gMPib+XBlINaBpFBD6CgDxxiq
qNo+KPuQy3oCNQVjHvhUQ1G0l9NEp2QjpNU4oqwkF0TG+oQJASDSNogrTL58rXHF
i3hJ8XQDT4l0afNmeZw/jG/h0IP247fA+WiWrngs24vgM/E/8WRnpSn8BaAOJLaR
2o3/yEazFdeHBhQraNYC/WErXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnERb3u
tlRp54cD+t3sNVzPvOEmMB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx
MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3
Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApOZFrxq+FKYfjM6DbS1j6FeX3j4mHpIc+DdWMQTbYckoQHSQ/ekXNTbqFX2f
mqlCFPVBUc1HyUWb8ld7YPmgUjgrgzMTAMqhHmZ3Nbu7jlpmzTAmQSv8pH3cpwbg
kZ64SUwh+vAgcPhR/vS73g+LqUv2oxQBux2pqxku2idsqqwKYaqoNoBWkaLMhAIq
Y0PfhRzFtl8csi6qZZmo85OEXWwqKFM9WeQRlAyCLsCXsEIHdChJ54lF+VHtmZtL
Rqp0GpIgeDtTS5gBuq2zWJHktUmXfSH4YeoIWn0ZpZjCRBcTafnmwEN4ZWAP069m
/SQD7L4MPYtPhv29DxVD/T+Q/A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:39 2026 by rpki-client