
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier: WOrqPx8HKAixYAq/CPMG5sc4Lg5y4h1nBmqAHpIHBLQ=
Subject key identifier: 56:44:D3:8B:51:5D:98:1B:80:58:0A:7A:51:A2:3B:8C:AC:80:3C:C0
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number: 92
Signing time: Sun 01 Mar 2026 08:56:42 +0000
Manifest this update: Sun 01 Mar 2026 08:56:41 +0000
Manifest next update: Sun 08 Mar 2026 08:56:41 +0000
Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: YX1GfzBKo1Rbzoov0ni1YMJcGrmr0KPQPprS+ccdjeg=)
2: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: fil/oQotRM+MIGw/cNqLrz8OgmoOYQq+ywbG5ZxtQK8=)
3: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: egGFXylp1SINEbzgRCNIJHPPft/NT6vkIWCWpdsdfdM=)
4: B87594FC08B311F1954B37591C3D8C67.roa (hash: Zkzu1+fkH1fXChDXHyje/HklqtWITqNgkWYThh121+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: Mar 1 08:56:41 2026 GMT
Not After : Mar 8 08:56:41 2026 GMT
Subject: CN=69a3ff4a-65d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:09:b4:f5:f9:72:fa:d9:ac:86:00:74:43:
39:fc:d4:ac:c3:7f:f6:a6:76:e3:37:c7:5a:6f:5c:
ed:b5:bd:3b:f6:13:28:46:46:db:5b:1a:6c:d2:c9:
d0:1d:f1:5c:64:e5:78:b3:c7:ec:de:90:af:d2:01:
04:05:06:04:84:4a:88:b8:02:fe:f4:af:bb:68:e8:
34:80:5f:30:54:52:12:ab:ba:c1:08:f3:bc:ad:8d:
be:45:9f:db:20:f3:0c:0f:4d:de:24:98:9e:e7:bd:
c4:1c:66:ad:1e:b1:27:a2:cf:a6:94:5b:da:b0:5b:
48:d8:7c:a7:1d:9f:8f:a0:7d:07:ae:b3:d8:4f:a0:
31:1b:27:04:21:9c:1b:ad:d2:b8:28:5d:05:98:7d:
b6:4a:b1:56:f3:e3:73:ce:2c:c2:ca:93:77:71:1f:
81:64:d8:20:be:a7:13:c8:b2:af:4f:b2:36:df:22:
ef:6e:a4:3c:00:97:0b:86:00:0d:81:62:5f:ee:75:
1f:cf:e7:4f:6c:bb:af:40:e4:8e:5c:48:51:7c:17:
72:44:ea:ee:dd:97:8f:53:66:54:b7:5b:6b:96:e3:
ec:8d:ad:46:31:df:e1:65:36:a7:43:37:95:dd:85:
ad:22:b6:09:ce:9c:96:e2:c8:52:83:31:6a:6a:00:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:D3:8B:51:5D:98:1B:80:58:0A:7A:51:A2:3B:8C:AC:80:3C:C0
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:98:a2:ff:e9:20:77:86:e7:76:f9:d5:3a:0b:f7:e8:fe:
d4:ba:c4:6a:ae:75:40:a6:e3:6c:ab:ec:c2:c3:91:69:67:08:
72:28:59:03:35:5f:d2:07:50:d2:e3:28:91:28:bd:cc:cc:df:
22:fe:e2:2d:27:0b:30:7d:1b:45:09:7e:a6:12:c0:c7:64:c7:
e9:b2:ae:5b:8e:d5:39:c9:dc:61:42:e5:e6:2c:c1:4f:e0:94:
75:53:c0:d0:ba:0a:42:ef:58:03:0d:52:a3:48:52:73:2c:98:
3b:71:37:20:28:bf:47:14:4e:58:76:4a:19:de:89:89:00:76:
d6:21:4b:71:d1:ff:02:3d:0f:0c:d3:f6:1b:08:f7:6d:9e:20:
87:44:0d:29:74:b9:f6:be:27:64:48:85:47:df:4c:6c:24:dc:
c7:a0:f9:70:c8:c7:b6:6c:8a:02:6a:ea:0d:46:f2:41:9c:81:
fc:ad:c2:cf:b7:38:46:47:e7:28:74:8c:49:1a:fa:5f:b9:9f:
88:5c:a5:51:27:fc:64:e5:26:3a:55:ce:9a:21:d5:45:75:fa:
3b:85:3e:5f:80:5f:54:c9:c5:d4:88:75:64:f9:20:21:f5:bd:
34:98:fa:e6:40:f9:ae:53:26:c7:86:75:db:03:8d:23:67:16:
34:08:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:59 2026 by rpki-client