
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json)
Hash identifier: ayuvc0o6XtPi25SeOMBHWUeRE8lcTQ8PlGrpMt4oh0Y=
Subject key identifier: 92:70:3B:0E:CC:A1:20:9E:6E:06:7E:12:7A:2E:78:C6:AC:93:72:59
Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
Manifest number: 7A
Signing time: Mon 02 Mar 2026 00:15:40 +0000
Manifest this update: Mon 02 Mar 2026 00:15:37 +0000
Manifest next update: Mon 09 Mar 2026 00:15:37 +0000
Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: MPr7StSFrtBUC7t+LDxPOvla2JIRiZ3gSB++wGiZ1pw=)
2: 85B52606F44311F089BA68A95F6F56BC.roa (hash: yev7UF6GiT3r4YilvVioheDs+Lc8lUv834mSPfBVKVE=)
3: 4DB1CEBCF44311F08E818BA85F6F56BC.roa (hash: H8cAfRq33EEl6N4yszUyUR/t3NAdi9bm6JGoxfRqssk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Validity
Not Before: Mar 2 00:15:37 2026 GMT
Not After : Mar 9 00:15:37 2026 GMT
Subject: CN=69a4d6ab-1373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:83:db:81:b6:94:22:a8:53:75:46:97:2b:
c9:90:30:90:41:e2:14:07:18:7a:88:c7:ad:40:7c:
22:0d:28:e3:2f:d9:c8:54:df:7d:25:6a:5c:6b:89:
84:f8:83:36:b9:2f:79:a0:c8:9e:51:9f:40:86:ba:
5a:bd:1e:54:11:2b:66:4c:73:c5:85:36:da:dc:65:
a3:9f:13:90:98:0b:19:b9:3f:3f:10:81:f2:6c:e8:
b8:dd:4e:27:37:d7:da:f3:1a:e8:2b:98:d5:be:40:
8c:1a:7e:6a:f5:61:f3:12:4e:dc:5a:33:50:b6:e9:
52:77:af:9c:af:df:27:e9:9e:a8:7a:e8:e2:06:c7:
6d:35:a0:c9:57:52:6e:51:d3:da:bd:d7:f8:34:82:
a8:ad:f5:24:05:3c:84:35:83:11:09:8c:bb:7d:b7:
98:a7:26:ae:14:da:96:83:86:5c:0b:c0:0e:c5:7b:
57:0f:2a:f4:9d:9c:12:59:78:26:d3:4e:33:43:4c:
2e:91:81:73:cc:43:73:06:46:d8:0d:d2:57:d5:19:
a9:7e:b1:c8:12:77:d4:1d:5d:22:45:5a:43:bf:cd:
34:c0:8b:80:a3:33:38:5b:f0:c2:65:81:d1:c6:db:
95:ac:02:65:d1:86:16:72:44:51:3e:5a:19:c1:0c:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:70:3B:0E:CC:A1:20:9E:6E:06:7E:12:7A:2E:78:C6:AC:93:72:59
X509v3 Authority Key Identifier:
keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:a6:f3:d0:7a:29:01:98:7c:6b:c4:da:d0:a0:8b:5a:2e:99:
10:b5:36:13:1e:d8:fd:5f:cf:f4:60:4a:a9:06:a2:09:a3:9d:
f0:bf:00:6b:46:40:82:3a:0f:9d:de:9a:39:fb:54:9b:cb:1f:
27:cb:a0:8a:62:76:bc:8f:88:fb:da:0b:74:8d:a4:6d:77:0c:
85:17:be:25:88:85:90:35:4f:f2:bb:8a:58:6f:57:a1:30:f7:
e0:24:9d:0d:29:df:b6:fb:f1:65:78:ca:55:80:e6:17:1b:c2:
7d:a0:77:34:9c:35:ef:93:c4:42:71:ef:ee:40:48:11:61:70:
75:ab:02:21:67:aa:4d:82:8b:2a:14:70:0b:bc:17:6d:d1:dc:
a2:8c:48:f1:a2:d7:61:2c:f3:1b:c7:e2:2e:a5:1c:cd:31:90:
38:0e:0e:a0:e7:89:cc:eb:68:c0:f0:a0:5a:7a:55:76:ed:39:
b5:13:f0:29:75:aa:fd:a3:12:2b:1e:8d:8c:92:e3:8e:b1:18:
a1:78:41:f5:91:a1:f6:eb:cc:47:fc:13:62:15:19:00:1f:c5:
15:c6:12:97:1d:7c:6f:51:0f:19:c6:0a:ee:3f:a6:dc:aa:41:
4d:ba:d8:81:36:cc:c6:29:e8:c4:ee:2c:4c:0f:e2:7e:b8:5e:
8c:97:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:40 2026 by rpki-client