
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json)
Hash identifier: aVDUj4LJZvIGHm6OH/u85MRwp63c8uws8QBVNcSZWjM=
Subject key identifier: 74:81:63:9F:90:2D:7D:05:52:F8:2F:69:E2:A0:B3:6E:42:DB:BE:42
Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Certificate serial: 0CB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
Manifest number: 0CAA
Signing time: Sun 01 Mar 2026 22:46:59 +0000
Manifest this update: Sun 01 Mar 2026 22:46:58 +0000
Manifest next update: Sun 08 Mar 2026 22:46:58 +0000
Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: o9FBN7JQkkSv6Q0svV83G4H5TyfmXMrhVvcWsgxY5FU=)
2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: MEjWiqABTdhN78FaTJw7zpdNYI15rHUaUXaBhHqc1lA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Validity
Not Before: Mar 1 22:46:58 2026 GMT
Not After : Mar 8 22:46:58 2026 GMT
Subject: CN=69a4c1e3-de35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:8c:30:6d:44:51:0e:d2:fb:07:28:f3:41:
89:40:db:8a:9f:e9:95:f0:85:e6:69:c7:e9:96:c4:
58:09:de:d5:b8:4e:0f:98:41:24:9d:90:49:09:07:
ba:28:d6:a2:e4:e5:6f:d5:75:fa:3a:04:02:c9:4b:
53:f5:18:ef:04:66:1d:9d:ff:8b:02:53:95:fd:65:
de:66:c5:ae:02:00:8f:5c:69:77:86:3d:78:2f:dc:
30:00:6b:4c:da:fb:02:99:f3:64:88:f5:88:87:0e:
ba:37:c4:a9:62:78:ff:74:a7:9c:3f:a8:d6:5d:98:
a7:b6:c9:ea:d9:ce:3a:53:38:e4:c2:a8:ab:28:3a:
81:08:2b:2e:05:76:51:17:68:ec:16:20:73:24:2d:
f5:24:52:49:bc:54:95:1d:21:cb:94:f6:3e:e8:28:
72:4a:50:01:5c:15:69:1f:76:35:c3:da:1d:fe:6a:
ef:86:fd:43:44:3c:62:f4:30:d8:34:8e:11:f1:50:
76:9e:7a:6d:0a:4d:b5:c5:0a:05:5a:76:c6:0c:37:
6f:bf:ff:7c:e5:c1:5e:50:3d:58:d7:39:11:55:1e:
04:0d:6d:1f:ed:39:a5:87:3b:a1:a3:a3:2e:84:c7:
c7:ae:3a:56:66:7f:37:d5:96:69:8c:6b:6c:a0:8a:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:63:9F:90:2D:7D:05:52:F8:2F:69:E2:A0:B3:6E:42:DB:BE:42
X509v3 Authority Key Identifier:
keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:90:32:44:c1:1a:88:ed:0b:f3:c7:d5:54:1e:70:99:63:21:
81:24:24:a2:0c:ed:7d:3f:27:52:d7:82:3e:60:91:0b:32:be:
54:51:2f:f8:26:07:5b:17:01:48:fe:1e:aa:7a:72:4d:83:e0:
fa:5f:25:d4:ce:28:8a:c2:df:0f:e3:0c:55:37:9e:54:d0:20:
29:1c:b8:9e:09:04:ce:24:1d:73:93:6d:6c:6b:f9:3f:ec:d9:
24:9c:31:d2:30:3b:d2:ea:52:9e:3e:f1:27:09:7a:dc:d8:2f:
59:b3:76:c6:f7:d9:56:0b:cf:f3:40:a1:8b:c1:00:82:b8:19:
6c:67:55:9e:1a:57:6f:3c:ea:89:87:07:1e:43:68:76:38:5f:
31:0a:f8:65:97:95:83:b4:ec:c0:e1:ed:f1:0f:1a:32:db:01:
f5:b2:6f:78:b2:bd:a4:28:19:48:d7:63:57:ea:16:73:f4:ca:
db:8a:ff:e4:7b:32:6e:aa:b3:ee:5a:b5:c9:52:88:72:56:7e:
35:47:97:29:13:5e:dc:8c:8d:76:a6:58:f2:88:3d:3b:47:eb:
c4:73:21:aa:2c:43:8a:fe:a6:2f:fe:51:28:a9:3d:d2:3d:06:
52:e8:e1:04:40:b2:4d:5a:52:02:71:05:db:51:7f:42:33:53:
a7:54:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:00 2026 by rpki-client