
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: 7miZybFMjQhCV1QtvM8zVdUb5/mBelyAYo6gpYxAOh0=
Subject key identifier: 6C:4B:43:A0:AD:3B:BB:F5:F7:13:99:E0:2D:B6:AD:9B:D4:2B:E8:82
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 0684
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 066A
Signing time: Sat 28 Feb 2026 23:10:04 +0000
Manifest this update: Sat 28 Feb 2026 23:10:03 +0000
Manifest next update: Sat 07 Mar 2026 23:10:03 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: arM2aZxdmuNaeNqJmsv6Y5lkYSti2VOdusxFDQVVRVc=)
2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: FrN9o1lFg/xEbU5z0+woTSKpRYhEXE4ng2cT+urUy+w=)
3: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: WL1wjvavlZNBJVifGm25dsfKzlKEpfNQuM2fEKaPYkY=)
4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: LIJfkhB+FEnFSom6qGXtkQF2GYNSzLyM4CrNqHpDKAI=)
5: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: p2SDVbwBZwxr3yJ4yGh7aCxA4CeficP3aVklyI/yKDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1668 (0x684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Feb 28 23:10:03 2026 GMT
Not After : Mar 7 23:10:03 2026 GMT
Subject: CN=69a375cc-0776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:21:76:a7:28:f9:be:b7:80:73:27:5b:f5:
95:65:0e:54:0d:b0:66:33:9f:41:67:c5:80:34:43:
99:51:dc:49:57:4a:ec:6b:55:ef:35:d2:b3:70:da:
7a:93:2f:05:bb:1c:cb:5d:af:7e:a4:86:b0:e0:95:
33:67:f7:fb:d9:bc:76:a6:a2:53:79:bb:66:67:ec:
f4:c2:70:0a:84:84:ec:2c:9d:df:b1:6e:cd:88:7e:
79:72:f0:54:dd:0f:bb:b9:5a:3e:d2:a5:5d:54:de:
f6:21:ed:0e:33:7f:e0:e3:3b:97:cb:94:64:fb:4c:
a7:c6:81:69:ff:5c:6a:12:b1:cc:29:46:37:5c:42:
c1:ba:62:d4:1d:47:a3:e6:0f:d1:8a:01:cf:3c:16:
4c:5c:1c:80:43:9b:00:73:55:da:98:d1:c0:cf:99:
d7:68:d8:86:f8:fe:ff:18:bf:e5:91:10:50:31:39:
1f:7d:98:f9:dd:4e:61:d6:68:02:4a:66:c3:77:bc:
12:5e:06:55:b2:ae:5e:e1:13:10:41:e7:73:5b:64:
a1:4a:88:23:fb:c1:26:19:f1:6c:ff:73:6f:b6:46:
6a:e0:d4:31:b6:fe:65:b5:04:4e:1d:dd:94:72:14:
b1:7a:e9:16:fd:64:96:d8:9c:1e:b6:a4:58:54:2b:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4B:43:A0:AD:3B:BB:F5:F7:13:99:E0:2D:B6:AD:9B:D4:2B:E8:82
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b0:67:f0:3f:01:cd:1a:ed:b9:d0:1c:76:a1:48:9e:6b:6c:
a3:f3:de:f3:22:63:75:c0:0f:0d:25:40:cc:d2:ea:b8:20:fd:
7e:01:6f:5a:bb:85:6d:78:24:5f:f7:90:cf:82:ba:3f:3d:0a:
01:1b:85:73:c9:35:29:1b:df:48:a2:40:b9:60:1c:71:49:25:
8c:dd:dd:01:25:09:0b:b6:f3:08:dc:b1:0c:a0:69:6f:94:17:
6f:83:6e:95:42:2f:0a:21:fc:20:b5:b7:43:9c:47:d3:8f:a4:
02:c3:70:40:b2:e2:c7:c6:66:6b:7a:b0:da:b5:69:0e:d0:d3:
29:2a:d5:2c:20:bb:59:fb:48:e1:58:31:d7:51:85:ca:e0:23:
0a:33:18:5e:fb:f8:c7:65:cf:3f:2e:7a:a3:3a:b1:4d:2a:18:
e4:e0:4d:dd:6a:f4:29:2f:22:0b:0f:48:91:3e:a2:46:88:c1:
df:4a:87:25:e1:67:ae:e2:7a:7b:21:d5:3b:4d:24:a8:f4:98:
c3:b0:ae:a9:ae:20:30:6e:57:dd:1d:40:92:2f:ad:a0:51:4a:
b4:a8:4b:df:17:53:78:59:81:b3:81:a3:36:c7:db:cc:54:18:
84:f5:4a:79:3a:91:15:a7:ae:76:dc:e9:a1:ac:bc:30:a7:a1:
cf:f4:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:47 2026 by rpki-client