
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: /jQJyUvOSrpbGGPcwVovbBoRImQ7ST6FhVSWB3FFY/A=
Subject key identifier: 73:9C:FA:01:10:A4:C9:AA:EC:67:96:53:0F:94:1D:C6:B6:F6:51:F8
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: 0108
Signing time: Mon 02 Mar 2026 13:05:25 +0000
Manifest this update: Mon 02 Mar 2026 13:05:25 +0000
Manifest next update: Mon 09 Mar 2026 13:05:25 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: MXBLvc0hgGspvzvwHd4CiGj30xWJHHNwKvIXOZl8qlU=)
2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Mar 2 13:05:25 2026 GMT
Not After : Mar 9 13:05:25 2026 GMT
Subject: CN=69a58b15-ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5d:07:fa:3f:9f:ba:9e:a7:95:d9:7a:e9:b5:
dc:a1:2f:80:4b:5b:83:7a:85:2b:d5:54:b5:eb:63:
cc:ea:38:aa:13:f8:fd:31:61:87:b3:44:a6:a4:ff:
b7:e3:28:29:2a:bf:37:66:91:a7:b8:2a:c2:ab:57:
8f:ae:f9:73:59:44:6f:18:55:f7:7b:fa:61:6a:47:
3a:0d:78:23:e0:f2:6c:2a:d0:6b:a8:ac:91:da:43:
c8:2a:dd:e5:a5:4a:4b:f2:92:8e:a3:56:2e:b4:d9:
48:34:94:25:7b:9d:93:46:1d:f0:32:1d:26:39:1b:
53:76:a4:37:b2:fd:d9:ee:ea:a9:c5:d6:b5:47:85:
6e:21:10:04:04:62:93:b9:e9:b8:aa:dc:86:f6:66:
06:2a:61:64:85:a7:d3:b0:0f:4c:47:7e:e6:73:2e:
b5:16:9f:a0:79:2b:32:a4:43:b4:0e:0d:5e:34:65:
5e:93:10:da:48:51:5d:ea:8f:4f:32:07:ec:77:69:
75:29:03:d0:8b:fb:62:bf:ab:0e:1a:38:c0:91:50:
3d:34:4c:0e:b6:08:86:9c:5a:0f:11:a0:b0:e4:b2:
37:c2:44:db:ca:db:01:95:60:a2:6e:d5:11:97:b3:
52:8d:8a:66:38:ce:67:dd:e7:51:9c:e7:00:95:eb:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9C:FA:01:10:A4:C9:AA:EC:67:96:53:0F:94:1D:C6:B6:F6:51:F8
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:ff:ba:39:10:06:b8:d2:8e:f0:b7:e4:c1:96:90:12:11:
fe:56:10:7e:ff:cb:19:3d:1c:1b:29:dc:40:01:81:1a:74:d4:
5e:47:3f:6f:fc:28:16:16:c6:ab:82:02:7a:3c:6c:99:45:6e:
59:88:16:7b:e1:bf:e2:28:9d:d9:12:bd:8f:29:7c:4f:6c:91:
24:a1:e5:79:89:f5:5a:6c:22:f8:9c:38:f2:14:1e:04:f7:ec:
f2:ba:18:f2:70:60:74:9b:d5:95:0b:8a:2d:a0:e7:f0:9b:7a:
54:5c:c4:24:a0:66:87:50:3f:84:24:fc:17:34:36:39:00:b7:
29:5b:07:ee:91:3e:db:b5:a2:3e:1f:ad:53:ba:91:c6:0b:8f:
e3:69:00:6f:67:bb:3d:a2:17:4a:9c:f1:d8:94:32:33:09:db:
0a:77:ec:ea:f0:c9:1a:39:3a:9d:24:d4:8f:9c:12:1a:ae:55:
24:92:d6:ec:cb:1c:30:7c:f5:b3:b0:f7:bb:5b:d5:a0:fb:ad:
77:46:e1:33:a1:b6:a8:bd:f2:30:73:5c:68:63:d9:76:37:e5:
2d:92:f3:fd:fd:16:3a:78:37:21:9c:c7:a8:55:06:98:e3:9f:
0b:9d:7e:42:35:32:e9:aa:10:37:b9:bd:64:64:ec:a1:d9:e9:
cc:45:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:34 2026 by rpki-client