
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json)
Hash identifier: +ER4xfBYS8ADs3icr0QpHvtzldY5EyqqFXiURziJgKk=
Subject key identifier: F9:8B:74:DF:EB:E4:18:96:07:6F:28:7C:1D:16:F3:28:86:31:89:CA
Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Certificate serial: 095E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
Manifest number: 095E
Signing time: Sat 28 Feb 2026 20:23:38 +0000
Manifest this update: Sat 28 Feb 2026 20:23:37 +0000
Manifest next update: Sat 07 Mar 2026 20:23:37 +0000
Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: W4sYU+YQNPfciwiDC51V0HHlhOxMprhw2DL2waXtQDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Validity
Not Before: Feb 28 20:23:37 2026 GMT
Not After : Mar 7 20:23:37 2026 GMT
Subject: CN=69a34eca-7c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:17:1b:26:5d:53:34:80:3a:41:c3:b6:91:
76:4f:0a:94:08:c1:7a:03:09:f4:11:7e:14:dd:0c:
a1:43:a6:ae:9e:89:ea:0f:cc:4f:bc:35:ae:ec:e5:
42:33:33:69:5a:87:09:26:fb:c0:b8:b8:65:a2:4b:
ee:ee:3f:f6:fe:7c:16:5a:99:bb:4c:3d:c2:c6:03:
2d:66:7a:f5:14:f2:7d:0a:67:b4:bb:b7:35:e6:cb:
55:70:c4:ab:dc:9a:90:06:f4:23:fa:52:b7:fd:b4:
16:99:84:ca:97:1e:b8:de:f8:ef:1c:8f:c4:61:89:
99:91:99:7e:b8:51:8e:c8:60:d3:c3:c0:28:57:ba:
15:13:de:6f:b9:75:cb:30:d5:83:9a:e7:47:14:41:
c2:3f:c5:86:ec:f8:92:9a:49:a7:cd:ca:9c:3c:81:
02:0f:cd:66:ff:f6:13:d2:45:78:6e:2f:8d:c5:1e:
e4:9b:63:99:f3:fa:0e:45:29:20:8e:d6:cc:cb:ec:
18:fa:55:bd:d6:da:f1:e5:3b:df:71:bf:b5:0b:32:
4f:9f:6b:cf:8c:75:e8:ad:c5:38:a9:b0:7e:bb:30:
69:09:e1:8d:60:d6:94:4b:a2:ef:71:9e:7e:4f:ea:
a7:b7:b6:72:0b:cb:21:35:89:a8:65:29:05:15:6a:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:74:DF:EB:E4:18:96:07:6F:28:7C:1D:16:F3:28:86:31:89:CA
X509v3 Authority Key Identifier:
keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:d0:48:e4:2d:82:c6:f1:d1:87:97:0d:b5:69:91:46:3d:
cf:02:82:50:07:dc:c9:17:1d:a0:5f:bb:56:fa:c2:48:9b:34:
9e:10:6f:6e:78:ab:5c:f5:ae:e2:a6:bc:2d:e1:a7:92:ae:04:
96:eb:72:d1:ab:ea:e5:83:57:99:36:b4:27:33:79:23:ff:e7:
46:d2:dc:5c:57:53:0a:b5:36:fa:0d:91:a6:44:dd:31:a9:5d:
d8:0b:3f:33:7a:79:39:df:db:91:80:61:9e:06:9a:02:ab:33:
57:41:af:a2:ba:23:06:66:d9:0d:97:fa:1b:36:65:f5:e3:16:
03:f8:91:62:63:77:6b:12:20:2c:5a:ec:88:70:64:a6:f0:9f:
d6:9f:2e:e6:f7:84:f6:c6:22:1a:dc:c6:62:01:59:2b:d8:2b:
48:cc:fc:26:e7:74:c1:78:8c:6f:61:aa:48:46:03:f6:c0:79:
c9:9e:b7:81:36:36:2a:64:93:c2:8b:d1:2d:34:a0:33:fb:1b:
36:d3:ed:bf:08:f0:97:d0:d4:50:d0:84:e1:31:10:2f:72:50:
c1:d3:52:26:2b:29:63:fe:0d:b3:51:47:d2:4c:dc:e0:2d:e4:
2b:ae:c3:cd:67:7e:5e:0c:fe:5c:d3:fd:97:82:00:46:1a:56:
66:a3:00:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzNCODkxMTAvBgNVBAUTKDQyOTA5ODAyNTdDNjc3MEIzNjBBRTk1NjJEQTU4OTND
NjBEQURBNzcwHhcNMjYwMjI4MjAyMzM3WhcNMjYwMzA3MjAyMzM3WjAYMRYwFAYD
VQQDEw02OWEzNGVjYS03YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzP8XGyZdUzSAOkHDtpF2TwqUCMF6Awn0EX4U3QyhQ6aunonqD8xPvDWu7OVC
MzNpWocJJvvAuLhlokvu7j/2/nwWWpm7TD3CxgMtZnr1FPJ9Cme0u7c15stVcMSr
3JqQBvQj+lK3/bQWmYTKlx643vjvHI/EYYmZkZl+uFGOyGDTw8AoV7oVE95vuXXL
MNWDmudHFEHCP8WG7PiSmkmnzcqcPIECD81m//YT0kV4bi+NxR7km2OZ8/oORSkg
jtbMy+wY+lW91trx5Tvfcb+1CzJPn2vPjHXorcU4qbB+uzBpCeGNYNaUS6LvcZ5+
T+qnt7ZyC8shNYmoZSkFFWreVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmLdN/r
5BiWB28ofB0W8yiGMYnKMB8GA1UdIwQYMBaAFEKQmAJXxncLNgrpVi2liTxg2tp3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4OS9EODM1NkJBQ0Iw
NzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3czJDdWxXTGFXSlBHRGEy
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FwQ1lBbGZHZHdzMkN1bFdMYVdKUEdEYTJuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
M0I4OS9EODM1NkJBQ0IwNzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3
czJDdWxXTGFXSlBHRGEybmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjq7QSOQtgsbx0YeXDbVpkUY9zwKCUAfcyRcdoF+7VvrCSJs0nhBvbnirXPWu
4qa8LeGnkq4Eluty0avq5YNXmTa0JzN5I//nRtLcXFdTCrU2+g2RpkTdMald2As/
M3p5Od/bkYBhngaaAqszV0GvorojBmbZDZf6GzZl9eMWA/iRYmN3axIgLFrsiHBk
pvCf1p8u5veE9sYiGtzGYgFZK9grSMz8Jud0wXiMb2GqSEYD9sB5yZ63gTY2KmST
wovRLTSgM/sbNtPtvwjwl9DUUNCE4TEQL3JQwdNSJispY/4Ns1FH0kzc4C3kK67D
zWd+Xgz+XNP9l4IARhpWZqMA2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:24 2026 by rpki-client