
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier: 6Tl5aEb8up16s1n3aafKlDvxlJidff2aSX8d9DZEWs8=
Subject key identifier: AF:53:03:5D:D3:74:2D:CE:62:9A:C5:15:CC:00:1B:C3:F6:68:8C:5E
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial: 04BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number: 04AF
Signing time: Mon 02 Mar 2026 00:57:55 +0000
Manifest this update: Mon 02 Mar 2026 00:57:55 +0000
Manifest next update: Mon 09 Mar 2026 00:57:55 +0000
Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: uDRZIvXnIN++BCLl59L94st3Rodgg92k4fW+Cjf/XeM=)
2: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: PxYeKpHZULDnwcoAfBRm9losZrnlvlbzKphy5txaKD0=)
3: 43540B7A0EE311EF9E24862BC4F9AE02.roa (hash: 136+5Mqj8LsH3BeiE2xVedpLET3+SzJNeO37YmXz3rk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214 (0x4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Validity
Not Before: Mar 2 00:57:55 2026 GMT
Not After : Mar 9 00:57:55 2026 GMT
Subject: CN=69a4e093-d7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:e4:8e:4c:21:27:93:66:e2:c3:32:a3:ce:
db:1f:85:5c:88:c5:7d:19:3f:00:64:53:86:75:61:
9c:92:c2:11:bf:7d:5d:33:ce:e0:f3:ef:86:b4:0f:
71:a5:ec:e0:28:39:7f:75:63:13:1f:d5:ed:85:69:
59:90:38:a7:a8:8a:b3:ad:1e:82:d5:dd:84:8d:aa:
62:00:57:12:a6:ca:24:0b:1f:bc:c4:27:d0:af:ff:
5e:c4:ca:0b:a1:af:c6:99:82:87:fc:ff:d3:27:06:
66:7f:59:aa:06:0e:ee:04:46:de:46:06:ab:b9:da:
87:06:94:3c:7a:70:cc:ac:4b:1a:2e:c4:c6:e2:53:
e6:6f:ad:f0:3c:0f:92:c1:6f:6a:03:a7:c5:6d:bb:
3b:b9:ef:d0:1b:ce:1b:19:57:80:df:eb:84:6e:01:
35:86:1b:15:f8:4f:5d:c8:2c:71:cb:d5:af:34:98:
d5:78:2b:c8:f3:cd:4c:f5:3a:31:bb:a8:4d:77:3d:
10:d3:6a:ca:db:d5:56:d3:a2:4a:81:46:d6:ef:95:
80:0e:86:ff:6e:5d:2f:dd:75:57:15:3b:d4:6f:d7:
05:e4:cb:33:39:7c:b1:8f:85:49:e3:4d:fa:33:1e:
17:b8:32:ab:8b:d2:6a:63:7c:64:64:ce:00:a6:c0:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:03:5D:D3:74:2D:CE:62:9A:C5:15:CC:00:1B:C3:F6:68:8C:5E
X509v3 Authority Key Identifier:
keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:7a:42:9a:48:86:b8:56:ea:8e:f3:c0:79:5d:58:48:6b:47:
c7:c1:be:67:10:21:ba:63:f5:6f:d1:23:24:96:70:28:9f:8f:
dc:c3:1f:7d:80:96:40:79:a3:93:c5:aa:d2:87:3c:9d:77:68:
a6:e2:23:a6:09:a3:26:13:ec:bf:91:b6:cd:fa:df:1e:ba:a3:
bb:96:cd:d2:6c:cd:24:a3:7a:71:39:7a:09:8d:fc:02:31:4e:
21:dc:8d:7a:cb:38:d7:e6:2d:fe:ae:35:5b:78:0e:7f:26:2a:
e0:06:22:13:ed:69:d7:0b:a0:a9:d3:0f:2f:51:6d:3b:90:df:
ea:44:99:ca:81:05:b1:50:38:26:6b:02:72:22:09:83:53:a7:
51:bc:c9:56:c9:e6:3f:de:b3:fd:b1:b2:76:89:dc:0e:7d:b9:
2c:58:40:5f:9f:6e:f4:5f:cc:48:5a:c4:7b:cf:8c:16:4c:a7:
17:c4:28:89:f6:6b:56:48:54:fe:c6:9a:57:b2:95:d0:2e:95:
6a:26:1f:8e:d2:0c:d8:38:d6:16:7c:bd:17:8a:95:f5:10:f3:
c1:05:4a:14:33:ca:21:97:99:e6:20:aa:e9:04:e4:d2:d3:5f:
32:ca:d7:0d:d1:39:d9:4c:f1:93:ab:22:cd:f3:ae:75:90:94:
3c:d2:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:00 2026 by rpki-client