
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json)
Hash identifier: NuKCyz3nhpXTYmgZX49BYDNJUtxCFuxzoUnBtwbU5VI=
Subject key identifier: B7:45:14:8A:3E:6E:40:85:91:A3:A6:30:29:7E:59:0A:ED:DD:36:47
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial: 10CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
Manifest number: 10A7
Signing time: Mon 02 Mar 2026 02:37:06 +0000
Manifest this update: Mon 02 Mar 2026 02:37:04 +0000
Manifest next update: Mon 09 Mar 2026 02:37:04 +0000
Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: NS6uoiRrVhwfbjBsAaYnk4rLLOD5Snc9FxRfmUnokZw=)
2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=)
3: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=)
4: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=)
5: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4299 (0x10cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Validity
Not Before: Mar 2 02:37:04 2026 GMT
Not After : Mar 9 02:37:04 2026 GMT
Subject: CN=69a4f7d1-225f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:31:0d:a3:df:88:88:43:8c:46:73:a9:0d:
d0:18:dd:7b:4d:ec:be:d9:10:dc:86:45:2a:29:6e:
bf:37:dd:31:9c:14:5a:c3:30:76:9a:31:74:35:f4:
a6:6b:63:e9:a1:cf:b2:0f:3f:f0:df:3f:1f:cf:85:
df:f1:14:cd:7b:35:ea:90:ae:ce:09:81:73:9b:1a:
46:48:99:b8:55:c8:33:90:63:bf:2a:a2:8f:a5:34:
82:94:ee:47:4f:1e:95:4e:57:fd:be:a3:c2:d7:bf:
d2:55:bc:50:76:f2:79:04:4f:f8:fb:1b:d5:7f:da:
79:f7:93:68:15:11:af:33:8d:40:2a:ef:2a:96:60:
10:79:4f:fd:61:ae:97:3a:ba:91:da:b1:77:b0:7a:
82:b8:8e:41:1c:57:77:69:60:f1:48:6e:30:d4:8e:
19:ce:0a:f0:39:8a:79:a2:32:09:eb:59:f5:aa:d4:
25:7e:00:af:82:39:da:fa:2b:e2:fb:00:86:6a:3a:
17:df:f4:71:de:9e:da:ab:ae:54:d6:d9:14:be:c3:
84:51:64:a4:89:70:91:95:41:82:8d:24:2b:70:96:
bd:01:9c:6f:90:1f:a7:7c:6c:5e:51:f0:57:32:3b:
60:34:78:08:7e:d8:87:f9:c3:83:3d:86:92:c3:f5:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:45:14:8A:3E:6E:40:85:91:A3:A6:30:29:7E:59:0A:ED:DD:36:47
X509v3 Authority Key Identifier:
keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:11:8b:f6:ef:2a:53:83:ed:85:e4:3d:16:30:12:0d:07:d4:
be:92:cc:4d:8a:9a:7e:42:ee:9a:51:55:59:6b:7f:b2:21:39:
89:33:d8:a9:ad:ae:b3:b2:64:68:e5:1b:68:fc:77:92:27:b0:
93:85:ec:f1:3c:20:5e:9d:4a:92:29:f1:5e:ab:bb:20:4f:1d:
03:04:85:90:06:e1:c0:d8:a5:a0:3c:1d:83:23:b1:00:f4:11:
d0:81:0c:43:c5:83:97:4a:2e:36:7a:2c:43:fd:01:2a:e2:73:
26:a4:af:c3:fd:98:a1:da:60:05:8c:67:f4:aa:32:9c:76:f2:
5f:c9:dd:18:46:08:aa:bf:ee:a9:2d:cd:3f:cb:c2:64:0c:7e:
84:13:04:a9:2d:db:db:ce:86:55:d0:18:26:3f:68:05:10:c3:
6a:ea:63:58:c3:31:fa:6d:83:f1:54:7e:5d:14:40:8f:4b:b0:
c9:79:63:2e:a0:b1:83:ce:ca:92:b6:b9:29:1d:26:19:3e:a2:
f7:cc:1b:72:d5:74:0f:ab:d6:d0:53:a1:c4:ee:84:bc:80:cf:
df:ca:ae:a4:28:7a:61:eb:89:0a:8c:c8:d7:8a:85:ff:b7:27:
67:11:78:08:9e:a9:28:96:08:ea:d5:10:a2:1d:27:af:e9:53:
e0:06:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:46 2026 by rpki-client