
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: +ywpnRlR5ikZLKwQotvTmvfUdav4DDgFG3Y2j7nrfvo=
Subject key identifier: DD:32:09:83:AB:C9:42:32:78:FF:D6:4A:62:9B:83:A0:61:25:76:08
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: 0120
Signing time: Fri 17 Apr 2026 05:33:43 +0000
Manifest this update: Fri 17 Apr 2026 05:33:42 +0000
Manifest next update: Fri 24 Apr 2026 05:33:42 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: bjEaRPTRZmLltxCKh0MBTTT/GokkfWL8NAEstQv/gfk=)
2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Apr 17 05:33:42 2026 GMT
Not After : Apr 24 05:33:42 2026 GMT
Subject: CN=69e1c637-1d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:26:ef:b3:4e:44:ab:0e:e9:17:52:74:5c:
1b:3b:9b:1a:91:93:8a:6d:1a:88:43:11:7f:fd:4e:
83:9d:13:75:46:be:bf:e5:46:58:7d:b7:7d:18:c4:
38:5f:99:28:cd:ce:15:17:2a:37:83:89:fa:5e:8c:
86:88:04:5d:c6:3e:32:28:52:97:70:23:a0:3b:8d:
52:f7:b4:3f:52:3c:76:51:eb:a1:43:e5:9d:c1:fa:
16:22:a8:bb:9f:93:bb:65:38:81:a3:df:b1:5e:b8:
9d:fc:5d:c2:86:ff:51:f7:f0:dc:83:e7:2a:6a:c9:
45:d3:14:07:6a:d7:5d:68:72:d0:9d:24:74:49:08:
73:7e:ad:39:3a:26:99:a4:fd:5e:53:5e:da:c5:d8:
d5:03:80:d7:e8:d4:5e:3e:c4:c5:8e:96:0d:dc:e7:
6d:a5:d1:7b:fd:92:ba:23:5a:cd:73:57:3a:99:4f:
1d:52:cb:9b:ba:5b:8e:9d:19:db:15:f5:2b:54:9b:
5a:10:fd:0d:b7:18:01:46:ef:77:71:4b:7b:ad:b3:
11:7d:22:5d:1c:4f:6a:b4:9a:46:d3:91:66:5c:d5:
4f:84:46:26:7f:03:8d:e9:83:47:a9:55:a1:56:fc:
6f:c5:15:1e:8f:68:4f:30:27:f9:7f:c4:d5:68:fa:
a1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:09:83:AB:C9:42:32:78:FF:D6:4A:62:9B:83:A0:61:25:76:08
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:ea:4e:5a:e3:9a:fb:8b:5e:35:a6:66:3f:e0:e5:49:61:
39:ec:68:33:15:ee:83:7b:07:b0:41:34:de:1d:3f:00:ff:71:
57:74:03:62:80:18:9b:7c:b8:ac:43:5b:42:6b:b5:b8:4f:05:
d0:56:02:ba:7e:ff:9c:86:72:0f:1d:81:0a:9a:8f:b3:36:15:
a6:72:45:0e:e6:80:fc:54:f2:37:7d:72:07:06:12:e0:84:3b:
97:e8:b5:dd:c6:c9:2a:91:f2:7d:0f:24:0b:bf:ce:39:86:07:
9f:66:32:b9:cf:08:47:bc:06:dc:00:bb:77:72:c8:24:69:a8:
78:c2:4f:e3:bf:56:cb:fa:7f:c4:12:2b:84:a1:e7:a5:0e:8f:
8f:da:16:53:3c:ae:73:7e:8a:cd:19:e6:c0:e4:3d:8f:2f:f4:
df:88:f2:09:84:c8:36:5a:ae:25:83:8b:9e:b2:a8:bc:de:e3:
81:7a:33:14:48:9f:85:0c:85:da:f9:77:46:4f:0e:62:bf:6e:
11:1b:83:2f:1a:d7:7c:45:bf:87:a3:3e:2d:5b:97:97:0b:93:
0a:f8:cc:a4:09:c7:1b:19:2c:24:9d:60:22:24:6c:49:c8:a8:
02:9a:59:5e:ce:53:01:cf:9d:fd:f6:46:76:e8:87:52:49:8a:
0a:97:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:32 2026 by rpki-client