
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json)
Hash identifier: MZznNmzjLdlIUfTzhKbCzwawfjZnx8JtNOubJmDjihY=
Subject key identifier: FC:90:33:1E:37:49:D2:51:A4:17:86:8A:D3:C2:2D:B4:A5:15:7F:3A
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
Manifest number: 014B
Signing time: Sun 01 Mar 2026 06:11:34 +0000
Manifest this update: Sun 01 Mar 2026 06:11:34 +0000
Manifest next update: Sun 08 Mar 2026 06:11:34 +0000
Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: umhbCNV5Ho/+8sSBHdTx5nLXtj+MjSA/3iiJkSfHcvQ=)
2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: WVfFVr8nZrz60GI+g0Deoi4qcsL8XuNjzkTeXFJeRz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Validity
Not Before: Mar 1 06:11:34 2026 GMT
Not After : Mar 8 06:11:34 2026 GMT
Subject: CN=69a3d896-19a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:39:4c:cf:47:e5:91:b1:b2:4a:a4:8e:ba:
5b:79:53:ec:e9:29:83:09:7d:a6:dd:24:6d:13:e8:
ea:a6:8f:b1:8e:04:4a:14:af:78:e2:ed:ee:98:65:
96:60:ec:31:f5:f1:51:d9:1d:d6:3c:94:e5:0d:57:
18:8d:fe:fb:fe:b4:a1:a7:c4:b4:1b:08:44:fc:a7:
6d:1f:de:35:8d:e0:86:28:eb:d9:1e:6e:b8:2d:a5:
7c:36:59:05:db:b6:ea:a1:2e:f0:b7:65:6b:2a:c4:
9e:fb:8e:05:d3:c1:a5:5c:ee:99:47:82:56:5c:02:
85:75:87:4c:3d:bc:c8:fe:11:0b:41:fc:16:cf:35:
43:a8:0a:f0:7c:c9:c5:bd:0e:e7:80:5e:ff:f2:9a:
8b:a4:e0:d9:8e:e4:44:fb:1c:46:55:3f:ec:77:c1:
77:cd:c5:99:4d:ff:f9:e6:ba:83:d2:43:52:1f:37:
d1:43:16:8e:ab:e0:c2:2e:ee:40:74:7e:34:6b:a7:
01:16:e8:dc:d1:36:e7:dd:a9:e3:24:31:75:28:a3:
cf:ce:aa:1b:7f:60:33:c0:29:8b:e0:53:b2:67:fc:
db:ed:c0:b6:10:87:75:6d:da:61:d9:49:33:21:90:
c1:72:79:26:3c:b7:35:65:a1:20:63:84:2f:7d:a5:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:33:1E:37:49:D2:51:A4:17:86:8A:D3:C2:2D:B4:A5:15:7F:3A
X509v3 Authority Key Identifier:
keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:88:e1:c7:ab:c3:5d:31:25:78:3c:4d:cd:fe:9a:2e:48:
2a:fb:5e:65:89:3f:b1:be:96:7a:38:15:e4:9d:b5:dc:d2:14:
61:2c:26:97:74:22:26:6d:04:ce:ca:08:bf:3e:34:08:f4:5d:
56:b4:14:87:8d:05:7d:21:f8:a2:9b:15:00:50:06:9e:00:cb:
4f:5e:90:c9:53:e4:af:dc:11:ed:f7:9a:ad:84:77:03:c3:58:
76:9c:1d:af:68:dc:53:47:5a:4c:3a:d3:26:f7:a6:50:4c:14:
02:a8:54:18:d0:60:1c:bf:62:93:64:53:56:f6:12:d2:65:ef:
11:88:41:ca:45:d8:31:4b:4d:36:54:a0:41:d2:f1:66:92:74:
17:02:67:2e:29:76:d1:ae:e8:03:8c:c9:5a:cf:7c:ea:ad:9d:
1d:37:91:97:66:14:5c:a3:f2:77:16:eb:93:94:b6:4d:fd:2d:
36:cb:96:e3:84:d0:69:41:d8:67:18:59:2e:42:49:0c:0b:9a:
af:32:c0:97:51:10:48:08:b6:a0:e3:72:26:06:af:46:b5:82:
af:31:ca:e7:7c:56:25:b3:05:3a:1c:84:8d:b0:33:66:de:9d:
57:7f:14:8a:7b:3c:9c:1b:65:ed:1e:82:59:46:ce:6c:7a:84:
fb:66:90:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:56 2026 by rpki-client