
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier: 5CCDfbwP+9gahBxUICRgJvCOjHpIMQfb+LTQVFb+wMU=
Subject key identifier: BE:F0:24:A7:68:97:B7:45:DE:85:23:2D:1C:D4:A8:84:00:44:B8:F2
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial: 1C27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number: 1C0E
Signing time: Sat 28 Feb 2026 16:16:17 +0000
Manifest this update: Sat 28 Feb 2026 16:16:16 +0000
Manifest next update: Sat 07 Mar 2026 16:16:16 +0000
Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: b84Wclvl24nkntU98EBKiD5N6nu+ams5pavhtabH5m0=)
2: C98708BE477711EBB4044E31C4F9AE02.roa (hash: rfB6cKoGstk7sIp1asdLZKTU/mLRnkq24gAeVkCxYNw=)
3: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: LlTpQ+lB51NJTsADg9wIZbeo2X5klSC9ytPou8casL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7207 (0x1c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
Validity
Not Before: Feb 28 16:16:16 2026 GMT
Not After : Mar 7 16:16:16 2026 GMT
Subject: CN=69a314d1-de51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:21:7c:30:0b:f8:fa:e8:70:79:4c:cd:69:
c9:b7:f3:d2:53:b1:b9:46:c9:a5:cb:eb:6d:c2:d0:
d0:14:56:88:93:49:e1:bb:cf:33:eb:31:b1:30:c5:
64:44:b4:4d:ed:da:db:40:6e:24:bc:b7:f7:c9:c5:
8a:48:d6:8e:16:65:b1:d2:2c:cf:9b:25:45:d0:b4:
00:3e:a3:1d:27:53:2f:6c:07:ca:5d:ff:ef:38:c8:
b1:23:ab:d3:34:6f:a7:9c:66:7c:05:80:00:02:ab:
b5:fb:93:a4:19:23:f4:bb:fd:96:6e:1c:ed:fd:eb:
4d:ae:56:3d:6e:8d:3a:a0:25:2e:9e:6f:8f:08:cf:
fa:f2:da:48:80:2a:ea:96:8a:ea:8d:61:76:9e:12:
01:b0:af:37:de:93:fd:40:db:b6:26:23:c8:c1:16:
fb:c3:bb:77:c9:e1:39:3c:09:9a:e2:2c:5d:93:69:
81:5b:5a:35:fd:d1:99:58:b8:27:02:57:7d:8b:cc:
a7:96:85:33:71:e7:12:67:c0:9f:b8:f3:d9:46:ce:
be:f3:3c:c8:56:28:88:c2:ac:18:08:ef:75:82:da:
80:25:64:be:c7:36:9b:5c:15:10:ff:40:36:6d:8a:
40:fc:48:61:7b:f4:4a:c2:55:35:02:b9:20:e1:4d:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:24:A7:68:97:B7:45:DE:85:23:2D:1C:D4:A8:84:00:44:B8:F2
X509v3 Authority Key Identifier:
keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b4:39:81:da:55:a7:48:69:3f:d3:c7:e6:5d:9b:4f:f3:df:
8f:44:95:7b:16:2c:48:57:48:2a:7b:1a:2a:4c:98:cf:4f:8b:
fb:9c:f3:56:ad:47:0f:b4:81:b4:51:01:b4:8f:7e:9c:6a:8a:
a8:cc:e9:0b:9b:4f:15:27:1f:0a:e4:dd:f6:c0:2f:99:14:b2:
b8:a1:8e:65:fb:37:8b:6b:86:f0:fd:ea:a9:53:bd:57:d0:47:
91:cc:aa:b6:87:cf:47:b4:54:b7:a7:6c:6d:09:c4:62:74:98:
a5:75:c8:ed:81:43:13:e4:3c:8c:e8:85:a4:7e:53:0b:1b:b0:
4f:95:3c:72:84:e8:04:f2:24:9d:4d:9d:98:e0:f6:9d:db:57:
16:e9:58:35:72:9f:3b:c3:23:26:66:46:94:a1:bf:5e:6f:1b:
47:97:91:09:10:9b:43:27:92:e7:9a:ae:7a:5f:d5:ee:14:66:
89:2a:bf:e7:6f:f0:3b:f6:80:6c:4b:f7:66:df:c1:ae:8e:28:
fb:ff:4e:b7:3a:34:d8:45:13:34:3b:69:70:5c:58:6e:6b:b2:
ae:33:73:60:bf:5e:2e:03:ea:d4:fa:c3:fb:3a:2b:96:03:cb:
a0:89:55:06:1c:fa:01:96:51:56:98:da:d1:e9:e9:fa:bd:21:
0e:c5:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:11 2026 by rpki-client