
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft
File: Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft (raw, json)
Hash identifier: X6COaKW24fpMXi3GddysiTDxR8dN9n6N98UUrAsTcww=
Subject key identifier: B0:F7:44:8D:F6:F9:21:15:FA:54:C9:0F:FA:6B:BB:E0:08:BE:CE:BD
Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9
Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9
Certificate serial: 08A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft
Manifest number: 1458
Signing time: Sat 28 Feb 2026 19:07:55 +0000
Manifest this update: Sat 28 Feb 2026 19:07:55 +0000
Manifest next update: Sat 07 Mar 2026 19:07:55 +0000
Files and hashes: 1: Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl (hash: CxDNomauQvkmaP8sbCN3OWfrKeqgt4TpkjTQlTw6mU4=)
2: B65A4FACE18C11ECB1697F55C4F9AE02.roa (hash: 5zkE6RPNVvetKuzik8vsy3mHeLDd3Wj/ciaGchVH9po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl
rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9
Validity
Not Before: Feb 28 19:07:55 2026 GMT
Not After : Mar 7 19:07:55 2026 GMT
Subject: CN=69a33d0b-5faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:fe:84:53:67:b4:25:df:47:b9:70:74:1c:
e1:5a:fc:87:a6:72:2e:04:85:41:4a:b3:94:ff:1f:
76:dd:e7:0a:55:0e:72:3c:8e:27:f9:fe:eb:ce:18:
db:c4:f1:1d:e0:7b:7a:1d:27:9e:71:58:f7:ea:06:
d2:da:46:a4:f5:3b:2f:6f:48:bc:b5:0b:fc:af:67:
0b:5b:ff:ce:33:e5:27:bf:84:10:cc:79:c4:f2:8b:
15:d9:1a:58:01:e5:db:4c:84:58:fe:c0:e7:67:85:
1f:3e:5c:05:6c:b4:65:4e:11:ae:53:31:bf:dc:9b:
03:f7:94:12:db:9a:50:3a:d0:23:2f:89:af:b4:22:
52:e0:69:09:60:8b:fd:cc:76:6c:36:66:77:3b:b5:
8d:c3:61:4b:8e:31:f3:3d:f4:6d:b9:d9:c0:f7:1e:
7c:ca:f8:1f:eb:f8:17:4d:69:66:b8:f3:f1:0e:e3:
e1:ee:e2:4f:71:d9:0e:8f:62:18:99:47:a1:34:c3:
28:ae:27:c6:fe:1b:34:3b:6d:25:71:4c:47:c9:32:
2f:47:06:50:23:6c:46:e5:b7:15:11:f0:cc:13:8d:
89:54:5a:d0:f1:30:12:ab:d8:4a:13:05:f2:18:a1:
64:3a:57:e9:ab:22:79:3d:a7:b8:f4:e4:f7:73:41:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:44:8D:F6:F9:21:15:FA:54:C9:0F:FA:6B:BB:E0:08:BE:CE:BD
X509v3 Authority Key Identifier:
keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0d:8e:e3:e5:cd:b1:8e:f9:ba:fe:6b:92:f7:6d:1e:c8:8d:
4d:a1:7f:dc:16:23:79:f5:22:34:00:13:da:30:ac:8b:7c:41:
a4:ce:3b:2f:05:e0:8e:8e:c9:b0:ab:ad:c9:09:79:83:58:b1:
c8:31:72:2a:f9:cb:5a:16:c0:ce:8b:04:9a:a7:ae:d1:7a:78:
31:89:f4:16:93:ee:43:57:d4:a1:cd:14:fe:f4:4b:4d:52:ce:
c6:76:d3:28:7d:07:fe:72:61:3a:45:b4:ee:7f:3a:75:ab:99:
88:3d:17:07:1a:55:46:37:6a:64:b4:c0:aa:0c:36:5d:55:ad:
d4:6a:0b:81:a4:d1:27:41:22:02:18:cc:66:e0:5a:51:52:ca:
f0:d2:bb:50:a4:17:e2:30:b0:b7:20:38:27:70:e3:e8:cf:9b:
0f:2e:96:c5:3d:92:c9:41:14:0d:78:4c:40:ae:30:38:c5:5c:
f3:ef:7e:5b:54:04:90:84:37:6f:be:f2:12:9c:62:b9:e1:f5:
67:34:b7:76:24:79:46:82:5c:60:76:2a:0d:ec:5e:4f:c4:89:
3d:cb:00:f7:e3:df:d8:ab:04:73:99:15:76:fc:6f:39:99:6d:
e3:ed:8c:03:9e:25:cb:19:69:b4:ee:43:b7:0f:21:42:8a:db:
60:9b:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:48 2026 by rpki-client