
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier: 0tB6cH90z69fnQ9CJUuewoQ+i+oy5wCOjVJXt7MsvMw=
Subject key identifier: 81:B7:BA:2B:B9:4A:8E:C5:88:19:6C:19:79:67:43:C2:EC:60:33:EA
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number: 0145
Signing time: Sun 01 Mar 2026 06:19:49 +0000
Manifest this update: Sun 01 Mar 2026 06:19:49 +0000
Manifest next update: Sun 08 Mar 2026 06:19:49 +0000
Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: yIHI+D0DU5OyM+bN+04NDjslkcfEDWK0f13mhQfZ/pc=)
2: C06D45B6961611F0870D4413C4F9AE02.roa (hash: w0+vj4aVz0K4Becg/iBGdIuc8dYR3B+infU6zn+iFnc=)
3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: SrRGCeTkPcXvi63UKXsEnuqePLRhHVKqBX2soL9amKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Validity
Not Before: Mar 1 06:19:49 2026 GMT
Not After : Mar 8 06:19:49 2026 GMT
Subject: CN=69a3da85-71f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:ad:81:97:19:14:06:bb:45:4f:42:74:bc:
12:23:2e:6c:48:18:1e:d7:43:2c:9e:ea:3b:60:dd:
d8:4a:b9:9e:87:ba:66:c3:0f:77:df:d0:ae:75:79:
17:31:f4:e8:cb:72:55:1e:01:3f:e0:7f:cd:79:60:
3d:46:14:68:65:c7:c5:96:bb:0a:de:c8:ad:46:2f:
ef:01:b6:10:d3:cb:ef:0f:40:9b:ce:7d:7d:9b:2b:
83:5e:05:f4:e2:4f:66:2f:24:a2:c8:36:57:1d:15:
ab:1e:aa:3e:90:4f:62:c6:20:ab:3d:31:89:5a:16:
c5:e9:68:52:c7:26:eb:be:9a:40:2c:69:c7:a3:f0:
ba:f9:1d:c6:24:39:1e:f2:5a:6d:94:f4:18:fb:f3:
f9:9f:1c:9c:0d:20:14:e6:cf:df:1f:85:45:de:71:
c8:41:d3:4e:22:5d:34:9a:c8:67:32:cc:02:7a:9d:
3f:f2:26:c7:57:ec:a5:41:d0:18:da:85:7c:ec:8c:
4f:e2:58:78:f2:e6:21:00:1c:e2:14:a4:d4:6d:da:
bf:fb:a6:21:45:ae:1b:b8:d4:d7:4a:a4:27:4a:1b:
cf:f8:93:cb:a5:d9:90:62:58:1f:75:31:c8:42:08:
8d:9c:6d:d5:78:58:fb:cc:10:2a:2a:77:e7:1e:7d:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:BA:2B:B9:4A:8E:C5:88:19:6C:19:79:67:43:C2:EC:60:33:EA
X509v3 Authority Key Identifier:
keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:2a:ed:8e:e6:dc:57:f5:fe:e3:af:74:5b:d1:9f:0c:58:5d:
a9:84:f8:61:9b:13:44:48:4d:8c:99:74:5a:2b:41:6c:50:51:
71:80:ff:43:a6:3f:db:5f:8f:4e:df:78:e2:99:99:cd:fa:33:
07:72:fc:21:3b:b6:64:ff:dc:5c:f4:42:80:78:02:1b:63:9a:
b5:19:8a:38:7a:94:95:6f:ab:0f:e9:86:cb:10:7d:42:95:b8:
86:da:7a:8a:e5:7e:30:5d:eb:d6:63:a4:cf:da:ad:c3:49:c9:
55:1b:11:d3:b6:d9:e7:8c:1a:85:f2:23:59:ff:2c:e8:da:10:
4a:47:12:25:cb:86:98:bb:20:c1:5f:7d:42:63:7c:5b:9f:59:
68:65:96:5f:f1:52:e8:56:91:69:56:5c:65:f8:0b:ea:82:69:
f8:e0:7b:24:63:db:e9:dc:1d:56:01:cc:b9:74:b2:63:c9:2c:
b5:d4:c3:41:ef:cb:45:1b:a0:a7:ac:62:55:8b:95:8a:d1:f1:
af:82:6e:29:ae:3c:54:fd:9f:65:f3:eb:d2:62:b9:7a:95:8c:
cd:78:3c:f5:57:ac:a6:8f:f6:5a:1d:f5:1b:09:8e:67:2f:a8:
60:f7:a9:d7:31:6e:76:b2:d4:c2:d1:6a:c8:d5:2a:09:09:a1:
8c:94:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:53 2026 by rpki-client