
$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json)
Hash identifier: vHX9yK/rWtqKao2nCXqxXPQe8DWREM3cgWUzWgex4cQ=
Subject key identifier: F5:54:35:A5:80:13:69:39:E5:82:D7:4C:36:95:6B:91:6C:84:2B:61
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 0808
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
Manifest number: 07C3
Signing time: Sat 28 Feb 2026 22:08:24 +0000
Manifest this update: Sat 28 Feb 2026 22:08:23 +0000
Manifest next update: Sat 07 Mar 2026 22:08:23 +0000
Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: wC1zCumm/g1uaeh82/vL5OddkxzrqPAasCIXD+Ow2H4=)
2: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: EYtqMqJmr+I+jpdDQEP8rvT0rHodKUqL9IiSFjSM3kI=)
3: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: eOPT7lyE1zZOa0Y2jmWCFClhQJJwENGHZfe/7mjDWS8=)
4: 8BF305A2F44711F0849EF3E6616F56BC.roa (hash: 4MoSlY/Ppy5N+CbBwsPPJW7GUmbT12JF2Jl6MZOayak=)
5: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: 7AorMY/kd4nqM6ZVHtyLDbwToDxXDlETHhD8k16MQbs=)
6: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: aa49jh+rK+CUpW0B3PdIJVUql0vI6nRTsE47pMCsMMo=)
7: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: AEBjONLdW7fe86jbzGvb3r8wc87tHg6RMlCvdJSeDwI=)
8: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: KC84JxCwUX7gd1cLKaZInIOR2OeLYgytiu0FtesldHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Feb 28 22:08:23 2026 GMT
Not After : Mar 7 22:08:23 2026 GMT
Subject: CN=69a36758-a6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:61:09:22:ea:cc:b7:9a:8e:c6:ec:64:30:
28:53:51:f4:46:26:a2:ec:3d:ff:59:e7:e4:dd:8c:
2f:4a:9a:55:f3:22:a1:9f:4c:4f:19:e2:a9:5c:4c:
20:88:cb:c2:ae:92:ca:24:36:b1:54:a6:c6:7d:46:
fc:38:12:bb:95:ae:b9:f5:82:0e:51:d0:49:1f:89:
5b:9c:2e:d6:2e:c9:5e:40:44:0d:70:07:7f:68:08:
58:63:c1:13:44:cb:4b:bc:ad:a1:2c:0a:be:23:ae:
26:32:9a:3a:94:de:e2:21:5e:90:55:9b:9f:b8:6d:
88:35:da:a9:e4:ea:72:05:2a:78:0c:3f:f1:4f:c1:
00:aa:7a:6c:b4:be:25:8d:7a:b0:df:8f:1e:bf:96:
7a:86:aa:34:72:e8:43:b7:ca:82:76:67:17:5f:64:
89:f3:e8:e9:c1:b8:f7:41:0e:f9:f9:5a:69:d0:06:
cb:d1:95:17:18:e0:37:51:25:10:3a:50:54:63:5c:
59:e6:ae:77:4e:cf:50:b2:4b:68:47:cc:97:cf:60:
a7:d9:e4:2b:6a:0d:ad:c8:94:bc:ce:37:61:03:a5:
52:72:36:ec:ce:32:fc:9d:5e:c5:38:b6:82:87:4b:
a8:4c:9f:23:5c:a6:b9:05:8b:84:15:ca:5c:b6:73:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:54:35:A5:80:13:69:39:E5:82:D7:4C:36:95:6B:91:6C:84:2B:61
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7e:d9:84:39:86:b4:2a:a5:b5:c3:0c:e5:68:8e:4f:db:e8:
80:85:66:bf:14:71:26:51:b6:cf:c5:02:25:43:f8:16:be:67:
eb:dc:ae:9f:d0:b5:93:95:f6:2c:cb:f2:e3:5b:11:e8:88:6f:
96:98:20:0c:ea:6a:88:b9:6b:01:dd:48:ca:1a:2b:2c:e7:91:
32:1a:a3:fb:65:e2:26:9f:57:1f:d0:5f:e6:fa:12:df:2a:0a:
35:cc:70:48:25:45:8f:9e:6e:28:7d:33:d7:ea:0b:28:b8:3d:
7b:d7:a9:8a:0b:65:91:cc:18:52:6f:47:a7:07:94:53:fa:d7:
d4:20:fa:4d:4a:a8:12:61:f0:f9:94:e0:f2:fa:88:b2:ac:8d:
8f:5d:4f:92:d9:72:be:d3:af:dc:91:e9:bd:72:ae:32:62:53:
7f:7e:f0:2d:f2:ea:1b:14:cb:de:ba:cf:e2:3d:12:03:af:de:
8a:80:4c:92:14:ed:ec:97:2f:f5:c7:5c:a7:aa:21:7f:0e:79:
7f:ec:85:cc:56:bc:bf:60:bd:24:94:5e:3d:6d:35:6a:70:b2:
31:96:c7:1b:0f:48:9f:90:c1:3b:9a:6f:18:5e:43:6d:bf:0c:
62:29:e5:27:40:91:59:92:3f:81:d9:61:49:68:39:18:d4:a4:
ef:ed:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:25 2026 by rpki-client