
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File: 0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier: Opj9BCgvqNvpAEIYRFsl2GBrLG5NQty1lzwJF1u+nKU=
Subject key identifier: CB:3A:46:64:E0:C1:9C:B6:05:8A:2D:B5:DC:2D:98:9C:9A:A5:5F:B4
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number: 0108
Signing time: Sun 01 Mar 2026 07:06:33 +0000
Manifest this update: Sun 01 Mar 2026 07:06:32 +0000
Manifest next update: Sun 08 Mar 2026 07:06:32 +0000
Files and hashes: 1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: m6fbnWzCz1BKfEI2XyvoMz+QRYz82jzFViXZIoO5TIE=)
2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XDvsXiWUoJu9EmBSYtQ7IbkY7zSchFzyP33LQZcvmOQ=)
3: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: evldymlGQQ93kubL9WmbF3u0cvNdxXaSZqcfpd5v03k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Validity
Not Before: Mar 1 07:06:32 2026 GMT
Not After : Mar 8 07:06:32 2026 GMT
Subject: CN=69a3e579-102d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:c4:96:e4:cd:bd:13:89:f2:5d:4c:87:08:
0a:6e:9f:f3:dd:5e:21:3b:85:cb:5c:b2:1c:76:9b:
4a:bc:47:d1:94:ef:0a:eb:a5:4c:3b:d1:73:b2:e8:
2e:68:0b:10:3f:73:51:b7:da:39:5e:6f:4a:63:13:
4b:d7:89:de:e8:8e:74:db:75:0c:45:b9:26:5b:ec:
7f:60:14:05:b8:15:58:07:2c:28:ed:50:12:33:56:
11:5e:d4:0b:8e:d6:a1:74:a8:c7:13:51:7e:35:89:
7c:c8:a3:57:fc:05:13:37:48:3e:af:a2:03:78:30:
5d:8b:88:6e:4b:39:0f:d2:d8:f1:0f:8b:87:ed:a0:
12:2d:71:46:49:72:cf:17:7a:6f:1b:b3:b1:50:da:
53:28:09:16:a8:6c:71:4b:36:b5:24:88:1a:e2:ca:
ff:f9:6d:6b:23:bb:32:e1:14:6d:b3:7a:95:4d:3f:
61:03:b9:64:e9:ca:c0:bf:2a:53:66:3c:19:1d:fc:
6d:b9:70:9d:67:62:79:9d:74:65:db:f7:a8:77:ac:
82:53:8d:d6:37:20:e9:54:ef:0f:68:c6:54:3f:9c:
a8:4b:a7:bf:f5:65:97:ff:00:f0:e8:1c:2f:7f:36:
1a:2b:81:b1:b5:a9:2b:3c:f0:64:57:30:bb:48:ed:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:46:64:E0:C1:9C:B6:05:8A:2D:B5:DC:2D:98:9C:9A:A5:5F:B4
X509v3 Authority Key Identifier:
keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:14:33:7a:a4:bf:37:ae:b6:af:11:46:95:bb:16:ef:32:e5:
7a:eb:5e:dd:03:18:57:51:64:85:e6:08:78:ab:3c:5a:25:61:
19:fe:e4:06:21:b1:a0:a0:b5:d1:b9:b9:48:20:12:1a:d8:a1:
3f:04:ee:ae:27:7b:a9:1c:a5:3e:c3:8e:e7:20:b9:8c:15:84:
5d:ec:9e:2f:69:a2:77:da:fc:f7:2b:ea:14:f3:4f:c5:4e:ae:
7e:7a:05:94:33:d2:43:5e:74:45:84:75:2a:5b:08:32:6c:dd:
c3:b6:77:df:9e:ee:f2:c0:ce:3f:dd:fe:63:05:b2:0e:e3:e4:
aa:3a:f7:04:fc:e9:62:54:96:de:bc:c0:da:7d:5a:48:39:f6:
4b:65:ff:ff:6c:15:fb:4b:5e:d5:14:f2:eb:05:ec:9b:a9:8d:
7a:90:44:f3:2b:0a:6e:a2:20:a7:59:68:1b:25:13:85:66:63:
27:9f:23:ee:d3:f1:4c:85:be:89:48:6c:71:63:f6:1b:95:24:
18:3e:cb:b1:e4:8f:73:c5:c3:d5:14:79:e6:8c:ae:fa:13:67:
b4:c9:36:93:f0:0b:86:3b:2f:00:9d:07:f4:08:03:20:1f:c7:
0a:9c:48:72:62:c9:d5:cb:be:13:1f:f0:51:85:b3:33:46:2f:
16:56:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:39 2026 by rpki-client