
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier: vSRN5sd8Svq/aOVSOfLUkPZVIyF2WhYLR/UXgRzzOHE=
Subject key identifier: 5B:1A:13:23:B2:75:55:3D:47:30:AD:71:94:63:7D:53:73:FF:2C:47
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial: 3514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number: 3514
Signing time: Sat 28 Feb 2026 15:16:03 +0000
Manifest this update: Sat 28 Feb 2026 15:16:02 +0000
Manifest next update: Sat 07 Mar 2026 15:16:02 +0000
Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: ETyWopbck97L1NzO/Cqtl2eTvy7iW604JQUmpraTy5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Validity
Not Before: Feb 28 15:16:02 2026 GMT
Not After : Mar 7 15:16:02 2026 GMT
Subject: CN=69a306b3-621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:78:e7:f2:d3:7d:6f:50:ed:51:7d:dd:59:
48:a6:5e:6c:72:cf:45:d9:01:38:97:f0:fe:3c:f1:
9a:1e:4a:dd:d8:6b:cd:01:66:5e:12:96:f6:41:4a:
be:2e:bb:7a:8e:78:c2:4e:b3:37:d6:74:5e:df:78:
75:97:f2:4e:5e:40:ac:ea:ae:60:df:ae:78:2c:c5:
c5:21:6e:8b:1f:20:42:39:2b:c1:c2:25:17:bb:41:
33:89:23:32:80:3a:3d:b1:f5:34:a5:8b:a0:05:72:
d7:aa:14:78:a1:71:ab:45:78:bf:2b:88:48:cc:ad:
ae:0a:12:90:c9:9a:71:fc:9b:5d:60:6b:b7:bf:24:
d2:0e:5d:b0:51:e6:d9:eb:62:4c:bd:35:a3:4d:09:
e2:27:35:7a:99:ce:4f:d5:79:36:ef:5f:ee:c5:8c:
d5:b0:e1:8b:50:32:5f:79:24:aa:02:66:8b:3a:d8:
ca:11:34:e6:0c:c0:f4:f3:b9:42:69:2d:03:d3:ac:
80:ce:b2:82:98:c2:44:bf:58:d0:ce:83:20:86:f4:
b6:b3:47:bd:e6:81:af:a2:81:7b:0d:ea:97:cc:3e:
53:63:e5:41:63:84:b0:44:69:d8:a5:c7:b7:5a:29:
c5:ec:f1:22:d6:60:57:9a:6e:a5:2f:c8:ae:df:c5:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:13:23:B2:75:55:3D:47:30:AD:71:94:63:7D:53:73:FF:2C:47
X509v3 Authority Key Identifier:
keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:5a:e1:2c:1f:87:a2:03:4f:01:82:c3:a2:69:d7:7a:1b:
1c:87:b0:98:9e:e0:77:b0:ce:f9:ce:12:0f:ec:54:8e:e3:71:
e0:7c:13:b5:98:62:a8:34:4d:5d:11:01:96:6a:13:c8:ab:47:
2a:4f:90:3b:7f:de:59:e4:86:2e:27:a0:97:68:c2:8e:82:a1:
38:e7:24:53:63:29:8b:fb:ba:d7:a6:db:d3:b1:fa:45:49:c4:
52:0b:d4:d7:6d:fc:e5:73:37:72:6e:0d:40:77:3a:b6:4a:dc:
68:7b:28:09:f3:41:dc:09:0e:4f:06:eb:93:b5:1f:ae:63:8d:
14:5d:e9:a9:09:cf:a4:c3:38:95:93:d6:49:39:42:ee:19:99:
12:37:f1:d3:9a:71:18:cc:92:65:e2:35:20:e2:61:76:2e:e1:
d0:da:ea:d4:1c:b9:d5:86:ee:90:13:f0:17:b9:70:e1:1d:cd:
06:35:00:bd:83:4e:31:cc:4d:f2:93:b5:2b:c3:a3:3b:97:1e:
23:db:ed:3c:f1:a0:61:c5:c2:95:60:b1:5b:bc:8d:3d:22:a8:
45:f1:a6:1e:d4:3e:a9:f5:0f:2c:4f:8a:9c:ed:bd:17:45:f6:
d9:36:e3:04:80:05:5b:12:f5:ab:07:c4:10:27:44:09:89:2e:
b2:f2:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:07 2026 by rpki-client