
$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json)
Hash identifier: 9XC2p9YY3bDU5fCKxSmV1ri3ho1F0jxKha9za+5utI8=
Subject key identifier: 8B:23:C3:AA:7C:66:6A:28:F0:7E:63:84:26:21:EA:33:6F:3C:00:8D
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial: 02C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
Manifest number: 02C3
Signing time: Sun 01 Mar 2026 02:16:54 +0000
Manifest this update: Sun 01 Mar 2026 02:16:53 +0000
Manifest next update: Sun 08 Mar 2026 02:16:53 +0000
Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: zgdvWEjDAV/HTHHd4xTdoXLnVO5Mcymmc8BpA6je1Mg=)
2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: sSRfRnYQRMGkVkEen327Ppn7OTWcdEFTS3+DBpjI3Ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Validity
Not Before: Mar 1 02:16:53 2026 GMT
Not After : Mar 8 02:16:53 2026 GMT
Subject: CN=69a3a196-883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:8d:5d:78:9b:71:af:1e:27:b0:93:12:a7:
29:ca:65:ca:1e:3e:19:ae:9b:c7:bf:d3:cf:e2:4c:
96:ce:80:55:10:30:10:f4:b6:b8:b9:e6:de:e9:a2:
ba:9d:2a:98:5d:9c:71:78:b8:c6:1b:3b:c3:2c:d7:
5e:48:21:98:98:94:ec:3e:9c:0c:f5:77:fd:ff:3a:
87:05:17:66:22:c0:20:ab:d1:ef:43:04:fa:6c:17:
e6:d6:ef:f4:fb:a6:fc:c3:f5:9f:4b:cf:0a:c4:6e:
c3:51:40:b4:f4:01:b5:b5:4b:8e:da:b9:52:33:40:
50:05:0b:66:9b:e3:a4:cf:29:d7:e2:e7:0f:3f:52:
d2:fa:26:c6:08:ab:b0:6c:a3:da:dc:43:4e:07:66:
3e:96:a5:39:85:ad:8c:ef:ae:0d:a2:93:d1:e2:e7:
ba:a6:54:64:52:a7:e9:af:2a:62:ce:27:28:7b:c1:
72:8c:2b:22:38:c6:ee:c2:5a:58:0b:69:c8:f9:c6:
9c:41:b1:e4:4b:f3:4c:d3:e1:9f:0a:5e:c5:73:d1:
c9:62:08:a1:aa:b1:7c:ee:3b:c4:27:04:d2:fc:b3:
58:ab:dd:be:e8:23:08:6d:91:f5:21:b9:7c:11:88:
c3:03:d0:0b:45:b3:53:1e:ca:2c:e3:91:f6:66:26:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:C3:AA:7C:66:6A:28:F0:7E:63:84:26:21:EA:33:6F:3C:00:8D
X509v3 Authority Key Identifier:
keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ef:9f:09:12:57:27:e4:2b:1b:d3:3d:4e:95:98:42:44:b8:
65:23:e2:a5:68:b2:98:0b:41:cd:8d:47:60:02:ac:fb:97:e0:
5a:da:ce:51:50:e2:f4:f5:d9:6b:52:2f:13:4b:e5:3f:12:39:
bd:fb:23:26:1a:8e:1f:3d:82:7c:fd:38:7c:e3:76:d5:a2:58:
22:d1:e9:6a:1b:fd:60:34:e7:32:b8:e6:cf:ed:3b:d6:32:0c:
9c:ae:28:2f:94:f9:2e:81:4a:8b:e0:24:f3:b7:69:ba:1b:ff:
b5:6a:3b:b9:70:43:d3:13:d5:62:eb:0e:ef:c0:9c:0b:1d:7b:
1a:46:8c:52:5c:ad:29:37:87:34:67:1a:13:f9:76:4e:1a:e6:
d0:15:6f:33:77:00:e7:9c:2d:64:44:80:08:5d:2e:09:d2:47:
26:b1:ea:3e:e0:bd:85:17:de:70:1b:e5:3c:8a:37:ec:e5:3b:
b1:ac:b6:09:0a:7d:54:85:47:b6:7e:4b:3d:8c:db:bf:21:af:
43:af:34:82:dc:98:bd:4a:60:9d:13:66:53:d9:3f:70:1e:00:
f3:df:6f:22:07:a0:1c:c0:5a:15:bd:47:64:18:68:14:ea:85:
3b:a9:e3:07:13:05:f2:58:dd:01:56:be:c6:54:39:d8:f1:45:
e8:b8:bc:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc3RjkxMTAvBgNVBAUTKEFBNTc5MEIwRjdENzYyQkU5MzJCOURDNjExQjdENjlC
OTA2ODVBNEUwHhcNMjYwMzAxMDIxNjUzWhcNMjYwMzA4MDIxNjUzWjAYMRYwFAYD
VQQDDA02OWEzYTE5Ni04ODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAybiNXXibca8eJ7CTEqcpymXKHj4ZrpvHv9PP4kyWzoBVEDAQ9La4uebe6aK6
nSqYXZxxeLjGGzvDLNdeSCGYmJTsPpwM9Xf9/zqHBRdmIsAgq9HvQwT6bBfm1u/0
+6b8w/WfS88KxG7DUUC09AG1tUuO2rlSM0BQBQtmm+OkzynX4ucPP1LS+ibGCKuw
bKPa3ENOB2Y+lqU5ha2M764NopPR4ue6plRkUqfprypizicoe8FyjCsiOMbuwlpY
C2nI+cacQbHkS/NM0+GfCl7Fc9HJYgihqrF87jvEJwTS/LNYq92+6CMIbZH1Ibl8
EYjDA9ALRbNTHsos45H2ZiaR4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsjw6p8
Zmoo8H5jhCYh6jNvPACNMB8GA1UdIwQYMBaAFKpXkLD312K+kyudxhG31puQaFpO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdGOS8yQUVDRTY2QTI3
QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFlyNlRLNTNHRWJmV201Qm9X
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FsZVFzUGZYWXI2VEs1M0dFYmZXbTVCb1drNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzdGOS8yQUVDRTY2QTI3QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFly
NlRLNTNHRWJmV201Qm9XazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANe+fCRJXJ+QrG9M9TpWYQkS4ZSPipWiymAtBzY1HYAKs+5fgWtrOUVDi9PXZ
a1IvE0vlPxI5vfsjJhqOHz2CfP04fON21aJYItHpahv9YDTnMrjmz+071jIMnK4o
L5T5LoFKi+Ak87dpuhv/tWo7uXBD0xPVYusO78CcCx17GkaMUlytKTeHNGcaE/l2
Thrm0BVvM3cA55wtZESACF0uCdJHJrHqPuC9hRfecBvlPIo37OU7say2CQp9VIVH
tn5LPYzbvyGvQ680gtyYvUpgnRNmU9k/cB4A899vIgegHMBaFb1HZBhoFOqFO6nj
BxMF8ljdAVa+xlQ52PFF6Li8hQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:52 2026 by rpki-client