
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier: mzDJ+GLmuDMivPMye4HyEPcT7mP6fIjwdW/jjYTU9y4=
Subject key identifier: 7D:31:13:54:AA:8B:D9:75:51:24:51:8E:A6:D3:77:BB:76:52:E0:75
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number: 01C0
Signing time: Mon 02 Mar 2026 00:42:22 +0000
Manifest this update: Mon 02 Mar 2026 00:42:18 +0000
Manifest next update: Mon 09 Mar 2026 00:42:18 +0000
Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: +p+8Th7zwbwjO8qjmitBouJcMdMAVshu1FE+47h86FI=)
2: 294325DC699711EEB317603DC4F9AE02.roa (hash: 8wlSlxdWRVQsKWpecDfGTBfpDDK2RtL9v/+VCfGWZ7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Validity
Not Before: Mar 2 00:42:18 2026 GMT
Not After : Mar 9 00:42:18 2026 GMT
Subject: CN=69a4dced-a0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:e1:f1:b2:bd:e7:8a:d3:dd:c5:56:70:87:
df:2b:2f:98:11:38:b4:cb:d1:08:05:5d:ed:ef:a9:
4e:ef:e2:4d:96:97:c5:52:b6:23:67:ca:be:f6:9d:
16:2c:d1:63:7d:7c:80:c5:16:ee:f0:64:ef:f0:72:
7c:af:d5:d5:14:53:0c:e3:62:9f:09:c6:ba:f5:63:
45:3f:d7:0c:26:9c:92:68:15:6e:b6:62:b3:fd:d6:
83:7f:d6:27:99:06:60:7d:3e:9c:c8:20:9e:38:bc:
62:93:cb:ac:64:09:82:ff:74:19:50:cb:73:99:f5:
46:79:75:a3:b1:b8:c8:c6:24:bf:ea:85:bd:91:a6:
8c:72:aa:57:25:99:8d:47:e9:67:fb:17:57:97:3a:
0a:84:48:41:4d:aa:7f:44:91:ab:0c:9b:28:35:03:
d2:9c:fa:71:c1:1e:a4:80:db:56:69:07:2a:bf:33:
d1:4a:27:5f:f2:cb:5e:60:91:91:12:d3:06:b7:43:
5d:c5:e6:cd:8b:b8:40:3b:65:6e:0b:32:c7:6d:f0:
0d:59:75:eb:f4:ea:92:4f:c8:44:47:5c:b9:20:4d:
d7:46:dc:0f:10:e3:f4:19:73:a3:72:a2:d7:ba:2a:
8e:d2:3c:fd:aa:be:4f:d8:c0:2e:90:b2:80:00:01:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:13:54:AA:8B:D9:75:51:24:51:8E:A6:D3:77:BB:76:52:E0:75
X509v3 Authority Key Identifier:
keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:db:77:ed:79:66:a5:d2:3c:f2:0e:ac:2b:2a:74:f1:26:e7:
c1:2b:ed:db:00:1f:c4:f1:87:2b:be:21:28:27:fb:ff:c8:69:
fe:89:02:a7:bf:a9:db:b9:d4:d7:df:c7:10:cd:14:02:19:a4:
bf:db:e8:54:61:13:c0:7f:d8:76:9e:46:85:06:f6:3a:e1:06:
f6:d5:02:09:fa:35:d8:c1:c2:6f:b8:57:4c:d5:bb:92:ae:a0:
b6:f6:9c:6d:16:25:1c:6c:f6:92:b5:4d:b7:9e:54:01:cf:fe:
b8:cf:d0:64:5f:16:d2:c5:05:bb:9b:95:ed:a1:17:41:06:28:
35:56:b3:c7:f8:2e:0f:d3:6d:c7:38:ec:da:bb:17:35:cf:5f:
ec:a0:50:91:80:29:20:b6:7f:da:04:a9:ed:ed:57:32:41:a1:
c5:4e:9a:c1:a3:e7:f5:ad:2a:aa:e7:4c:b2:f7:0c:c5:1f:76:
de:d9:9c:0e:83:c2:0c:21:a6:60:6a:f6:16:b7:97:0d:2e:2a:
89:77:da:a2:79:cd:05:c5:22:d6:4d:08:2c:71:df:0e:60:0a:
82:ee:51:c9:79:c4:c3:23:01:81:0a:c3:6b:2b:a9:4a:95:36:
b8:07:8b:7c:bc:3e:6c:1c:47:a0:67:63:30:ba:3c:9a:34:be:
22:75:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:35 2026 by rpki-client