
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json)
Hash identifier: 4tnDll9lo/Tv5pxZjqIaGVw476CS2SZ8bAd2kbccHqY=
Subject key identifier: D1:5D:EC:DA:E6:A2:52:24:E5:27:55:AB:3A:02:84:3B:3B:15:17:74
Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
Manifest number: EE
Signing time: Sun 01 Mar 2026 07:27:39 +0000
Manifest this update: Sun 01 Mar 2026 07:27:39 +0000
Manifest next update: Sun 08 Mar 2026 07:27:39 +0000
Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: q4NL62nv6x9e1g9VzgG15YsBKOSWB93GhwES97peDrY=)
2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: im2ulDC6TuJxDzTWTDZh2iCRPtHb9EQEE+xjYBtaU3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl
rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
Validity
Not Before: Mar 1 07:27:39 2026 GMT
Not After : Mar 8 07:27:39 2026 GMT
Subject: CN=69a3ea6b-a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:bd:11:32:7f:05:d3:3d:e2:1d:40:43:a4:
5a:c6:8b:45:ce:ff:d1:f3:5f:9b:fd:2c:82:4d:84:
6d:11:2a:0c:bf:25:41:de:46:e9:37:45:48:ca:34:
46:58:27:65:da:df:b6:50:f0:2d:89:f0:35:08:a7:
d2:56:63:dd:7c:eb:8b:59:01:7f:ee:7c:fd:f1:1f:
8e:6b:0c:bb:7b:4c:3a:25:0a:f6:a0:d1:74:a8:8f:
f3:dc:4f:86:66:3c:c1:6a:03:6b:0c:a9:e7:64:a6:
e7:d1:37:6f:7e:c6:85:37:6d:1e:c0:55:c1:b6:1e:
e8:8a:e8:b7:f7:b6:74:44:64:49:51:0a:02:7e:95:
a6:06:a7:74:f6:9f:bd:b1:7d:7d:b7:80:54:f0:f2:
65:e0:8d:6f:64:a6:09:a6:e8:d3:e5:93:56:51:53:
cc:9a:f1:43:8d:ff:1c:b5:af:94:10:cd:6d:6e:08:
80:4d:4b:4a:c0:51:c8:cb:25:9b:49:72:83:0f:dd:
cd:13:28:bb:31:e9:3b:50:e4:2c:b4:38:41:c3:07:
ab:96:d9:cd:90:db:23:94:b0:32:93:b5:3a:f4:17:
36:f9:ab:c0:2b:d0:20:47:4f:ce:c9:ad:8b:ec:d2:
ff:ba:64:b9:df:21:d9:ab:fd:fe:e6:f2:bf:39:00:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5D:EC:DA:E6:A2:52:24:E5:27:55:AB:3A:02:84:3B:3B:15:17:74
X509v3 Authority Key Identifier:
keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:82:ed:d9:e3:90:d3:fb:01:b2:62:51:82:49:72:7f:f4:89:
28:8d:8e:df:02:19:7e:23:ab:93:53:9c:94:e7:f2:af:55:59:
60:bc:40:42:45:f7:3d:48:8b:64:82:e4:df:10:13:51:72:88:
65:61:10:c7:9e:16:df:86:da:dd:70:cd:5b:76:ef:46:22:3e:
1a:f7:1d:3a:07:55:07:ad:0f:b7:ae:a1:4f:53:e9:df:8c:41:
3b:9b:17:aa:9b:53:21:71:89:37:04:09:64:b8:91:0d:c3:ed:
53:a3:f7:da:bc:ef:fa:16:67:84:29:14:6b:16:a0:b6:24:ef:
cc:c9:f2:69:78:61:be:60:a9:59:3c:c3:78:bd:92:8f:26:3a:
49:b1:17:6c:e4:09:3b:d9:14:33:1d:f8:8b:af:b6:2e:3e:2a:
e6:9b:dd:04:62:7b:8d:db:3a:82:29:e7:3d:2f:31:4f:10:a0:
af:80:95:7e:9b:e4:2d:f4:11:88:41:44:5d:bf:53:11:8a:7e:
52:4d:8d:9d:d4:9b:1a:da:91:6e:ad:ed:b5:25:f3:62:ef:3e:
6d:4b:43:c1:d0:a6:d9:11:67:89:bb:fa:f9:a9:c3:94:d6:52:
99:bb:8e:71:53:01:e0:9e:a6:ba:6c:cc:0a:37:79:fc:ac:35:
04:a6:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:35 2026 by rpki-client