
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier: Tl/uNE4KEbtbGKUTnET8Df0D101KyRiu5T816PFfxYI=
Subject key identifier: 16:4A:99:11:41:0B:2B:A0:51:D2:18:ED:9F:DD:81:E3:84:44:A8:0B
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial: 0C15
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number: 0C0B
Signing time: Sun 01 Mar 2026 23:36:04 +0000
Manifest this update: Sun 01 Mar 2026 23:36:03 +0000
Manifest next update: Sun 08 Mar 2026 23:36:03 +0000
Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: Mme829SDccEfcXTepct3IaXSO0LbaC2imTKmBBRsePg=)
2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /lTemBonHucyHdLH99iEZJS0pkpWT8EtwFhDtf78iXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Validity
Not Before: Mar 1 23:36:03 2026 GMT
Not After : Mar 8 23:36:03 2026 GMT
Subject: CN=69a4cd63-1588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:34:0c:b0:ee:ae:ce:72:c1:e5:1c:a0:60:
d6:a2:87:26:95:f9:0f:20:c1:74:d3:95:99:56:c3:
18:69:e0:e3:60:e8:9b:b5:98:47:8c:da:7c:58:b2:
86:3b:3f:7e:42:d9:5a:e0:8f:ec:07:0c:6f:53:ed:
df:51:ad:b2:53:bb:7d:66:dc:2d:e4:8c:26:c5:3b:
28:ef:6d:2f:06:25:1a:d2:da:de:b5:29:1e:e9:e7:
e0:9b:8d:aa:b7:0d:8b:b5:1a:56:0f:30:06:8f:c1:
61:4e:56:14:48:33:42:cc:b1:b0:a8:5e:79:18:56:
1b:cb:34:9c:76:36:f2:28:e8:7a:c3:1d:b9:f2:52:
45:b2:6d:cb:98:62:11:33:10:ea:83:b0:e3:d6:3c:
a2:91:76:49:64:00:11:71:30:b2:5a:76:33:ec:bd:
9d:6d:fd:c4:95:da:e2:64:62:86:a5:15:b5:21:ea:
4a:00:e8:0d:02:d6:68:d6:a4:29:6a:28:91:42:3a:
34:77:5b:bf:d5:c5:7e:81:a9:bf:2c:37:53:0d:d1:
9e:82:f0:bb:93:1a:4e:4e:19:d3:90:14:3d:04:97:
e8:69:d1:b7:47:64:93:ef:45:e3:55:00:36:fb:7d:
5e:82:3d:84:6b:8a:14:0f:bc:26:3d:e5:65:11:d8:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:99:11:41:0B:2B:A0:51:D2:18:ED:9F:DD:81:E3:84:44:A8:0B
X509v3 Authority Key Identifier:
keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:66:7f:42:fa:66:f6:8b:e6:f7:86:20:0d:04:e5:6b:cd:73:
50:88:7e:82:a7:bb:55:ff:68:9c:ae:3a:b3:59:1f:b9:f4:8a:
f6:5b:a5:26:39:87:bf:b5:fa:d7:df:34:4a:a2:23:e4:cd:d0:
76:e1:22:ea:42:7a:87:f0:ce:4f:42:04:5e:2d:30:70:25:b5:
d9:18:b6:f4:b3:e3:14:f3:47:be:7c:83:72:d3:86:8f:af:fc:
ce:3b:ba:d2:61:0a:a0:2b:b1:65:a9:b7:a0:0b:e1:3e:c5:93:
81:8d:0c:0f:44:12:b6:31:19:3d:8d:6c:69:37:3a:80:85:73:
15:58:47:1b:c2:8f:27:39:33:d8:19:b3:d5:5d:f5:06:ae:3c:
9e:9c:c7:a2:0b:e1:aa:ea:a0:27:af:97:34:46:0c:24:7f:4d:
57:fa:d4:7d:02:0b:35:66:d3:29:08:86:84:6a:8b:0d:5d:25:
4d:ce:e8:27:c6:3c:6b:8e:5f:1a:86:88:f1:be:50:fc:7f:51:
16:47:f4:7e:51:43:c5:de:d5:84:c2:c8:04:29:79:7a:0d:56:
f7:7f:a3:ac:03:44:be:33:ec:e0:17:cd:0f:3e:d6:80:48:06:
86:65:8f:ce:21:05:54:70:8f:d0:55:1f:1b:6a:e0:31:cb:74:
53:28:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:27 2026 by rpki-client