
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier: kM/QbgGvNdg21+CLpV5KpHLZskIX5XhS+O4fkMelAWc=
Subject key identifier: A1:80:FE:87:FA:AA:41:70:4B:14:A2:2D:45:1B:C4:7A:42:F9:CB:99
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 01E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number: 01C1
Signing time: Sun 01 Mar 2026 22:31:10 +0000
Manifest this update: Sun 01 Mar 2026 22:31:09 +0000
Manifest next update: Sun 08 Mar 2026 22:31:09 +0000
Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: wKiVSnfrMD59Xe7FYVLpfLBN9RDx4JXl8n9EtTlSsmU=)
2: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: 4G73HCE8g8pIr00a6pISVi9GuOkrooKElm9yIwS+mCs=)
3: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 52J+v1k8tWgHY+HhlcSMLxR4J+xohtBlTQq3KKgwtyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Mar 1 22:31:09 2026 GMT
Not After : Mar 8 22:31:09 2026 GMT
Subject: CN=69a4be2d-3d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:89:3d:da:6c:ba:f1:b5:a9:2b:d4:75:2d:
ce:bc:d8:7d:bc:89:03:b6:32:25:6b:be:0b:6f:44:
57:7e:16:d4:ff:14:c2:8c:69:56:fa:3f:4d:d5:de:
68:0f:e7:75:cc:bc:44:d7:7b:29:7b:96:ac:6a:69:
68:97:91:82:d0:9f:b6:c9:d4:1f:f4:9f:b7:c8:68:
fb:37:c8:b9:42:83:28:ce:4c:99:3b:7a:c7:99:9d:
6f:41:52:e3:72:f1:c7:e7:b7:13:25:ff:77:a0:0a:
dd:a9:f5:18:62:e0:f1:6d:6d:11:2c:8c:10:ed:8d:
90:0e:d7:81:56:3e:58:40:28:16:ce:a6:8c:1c:7f:
27:a1:2c:c0:47:9b:da:f9:a4:af:f3:9e:6b:48:9b:
d8:c7:ec:c8:dc:33:fe:8f:5e:db:04:bd:08:07:0a:
da:0c:b2:07:b6:e4:7c:be:8a:f6:db:36:00:ba:b1:
63:14:d0:48:53:40:1f:67:7d:03:74:b4:65:df:6a:
76:d5:65:fe:38:82:59:a7:b4:8a:4e:ec:a5:84:75:
b7:01:b0:0a:a6:98:e3:0b:71:b4:97:c8:58:78:c6:
c4:da:90:f1:83:a5:25:18:d5:08:b1:ab:d1:38:e6:
92:2d:d6:8f:4c:27:c4:c4:93:b2:cc:60:90:eb:71:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:80:FE:87:FA:AA:41:70:4B:14:A2:2D:45:1B:C4:7A:42:F9:CB:99
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a0:07:eb:d1:24:04:ce:11:a5:47:64:99:fb:59:7c:9a:f3:
f1:cf:c9:29:75:ae:5e:35:0f:03:64:a7:7b:af:6d:8e:16:94:
0c:ab:4c:d9:48:4b:48:76:bd:d4:d2:4e:9e:ce:9e:08:4b:9e:
49:e0:87:5c:2e:4d:53:e3:fd:6f:38:d2:e7:07:95:c8:f4:20:
a8:44:cc:af:03:9e:b0:86:7d:05:4c:be:da:a3:24:da:14:d5:
4d:8f:49:73:e7:62:0e:5c:79:1c:83:17:25:7c:ed:bd:44:f8:
44:f5:7a:70:1b:48:52:68:30:16:cb:41:3b:1f:a5:6c:59:97:
53:bb:5f:ed:19:0b:35:08:1f:61:c4:0e:cf:49:fa:48:0e:58:
5b:a3:63:66:cd:aa:9b:b6:0a:f1:88:a7:bb:35:5e:5d:4b:4b:
53:69:22:0c:65:7d:d5:73:68:b5:25:ad:6a:3a:1a:6a:0f:cd:
f8:39:7f:9d:2a:aa:9b:28:09:80:b8:86:18:94:d6:18:ec:1d:
6f:4b:6b:ec:bd:c6:09:07:e1:f3:67:37:6a:0b:89:95:03:40:
3d:26:7c:a3:bf:91:fb:cd:e2:38:7d:ae:c7:6f:7c:d0:56:24:
4a:f5:c8:67:c8:23:f8:4c:08:2e:95:8b:79:74:68:46:b9:bc:
9e:27:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:08 2026 by rpki-client