
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File: QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier: n0aizErg2N5KCHGMfgg1BNaPLvIA0iv2I8kKTuL4IZk=
Subject key identifier: 55:F5:E8:E6:FE:85:04:B7:E4:0B:0D:3A:E0:EA:7C:BD:66:BF:4C:88
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number: 01BB
Signing time: Sun 01 Mar 2026 04:51:56 +0000
Manifest this update: Sun 01 Mar 2026 04:51:56 +0000
Manifest next update: Sun 08 Mar 2026 04:51:56 +0000
Files and hashes: 1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: kvh+ctxt2YnQnuKdVeEyCUDEFqPdQkqFv9zGcAlVcpw=)
2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: 3OVjnck0sMFap4LEd7TQ/cbbN3g6J21V44KEpUC5BcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Validity
Not Before: Mar 1 04:51:56 2026 GMT
Not After : Mar 8 04:51:56 2026 GMT
Subject: CN=69a3c5ec-5977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:73:a3:73:8b:e8:2f:e5:f9:a0:cc:1f:8c:
59:57:8f:d9:83:7a:86:66:b5:b7:2e:d5:8e:62:2c:
7c:80:90:ba:f0:96:3f:55:6f:d7:8e:5e:a6:3a:d7:
23:4f:30:95:b5:1a:fc:31:c3:c1:39:bd:3b:c4:52:
2a:2e:49:77:60:ac:12:e9:6c:8f:f2:ff:60:e2:01:
c5:d2:e6:05:c8:0c:e2:ea:c0:b6:ba:32:f7:39:03:
11:6c:1e:d2:5f:a9:97:5d:16:1d:f3:62:a2:8e:4e:
e5:66:06:75:84:e3:77:c2:85:aa:2f:b9:f2:4d:66:
a9:01:89:59:41:74:f0:3f:16:7e:99:49:da:4f:7d:
fd:a8:b9:e3:b0:c3:a4:88:aa:ab:e1:5a:2e:bc:a8:
21:2e:b2:49:6f:f7:23:bf:45:69:9e:60:20:84:3f:
1b:1a:49:5b:05:cf:80:4c:f2:a4:dc:05:5f:0e:0e:
b2:cc:ff:d2:19:0c:fb:1c:59:5b:b5:ac:fe:ee:ad:
e4:b7:1c:ec:89:42:4a:a1:95:4a:2d:fd:d1:27:94:
68:41:25:43:96:14:d9:e7:12:a5:80:84:94:a1:07:
53:ab:97:50:c5:37:a2:7e:5a:7c:ad:08:63:8a:f6:
1a:08:e9:50:fd:1a:16:03:0c:62:67:ab:a7:27:b5:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F5:E8:E6:FE:85:04:B7:E4:0B:0D:3A:E0:EA:7C:BD:66:BF:4C:88
X509v3 Authority Key Identifier:
keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:fc:2d:0a:6f:c3:8d:8b:d5:62:ea:ec:d2:ee:6c:2f:3a:
78:b6:d6:7c:28:f0:2e:54:ea:66:a9:62:d9:7d:39:b3:25:61:
d0:b6:13:8b:98:b2:b4:0f:6a:23:a6:51:64:0c:99:b3:02:bb:
a1:15:f7:63:f0:19:7f:17:0e:4c:ff:30:58:39:56:0f:63:5b:
ed:ab:bf:6d:e8:06:c2:8d:9c:da:3a:97:d2:65:4f:07:5c:77:
1e:a9:44:16:34:ac:22:f7:c2:2a:2f:10:bb:81:22:79:23:97:
c9:43:e4:2c:22:3d:10:9a:93:fe:7c:11:3c:5c:e7:69:79:b2:
3b:2a:45:ed:d6:11:0e:ff:94:24:22:51:20:55:55:d7:0d:29:
9d:0b:52:47:33:d3:1f:94:6f:64:3f:5a:39:0c:9f:18:7f:0c:
58:04:98:86:33:85:bb:67:d6:1d:e9:d3:1b:e6:5d:66:4c:2f:
8c:33:4b:80:4f:e3:2f:28:46:ca:de:3f:18:a7:1b:74:e4:4d:
57:21:cf:50:0a:62:39:e2:49:44:a4:1d:8a:06:b8:47:eb:03:
f0:20:ca:c6:52:d5:13:fb:6a:ee:9d:fb:c9:1c:26:bd:34:b8:
e2:0c:0c:a1:e9:25:b1:e0:ab:32:33:e5:34:86:ea:4b:39:9f:
c3:86:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:43 2026 by rpki-client