
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier: QkpG8b8wtkyo25BZ8tElP5Z1XdsesWMAYUXlCwkIXUU=
Subject key identifier: 92:30:D5:F4:E8:7D:52:A6:8C:95:08:87:ED:05:7E:F3:3A:1F:AC:55
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial: 0A3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number: 0A2C
Signing time: Sat 28 Feb 2026 20:01:51 +0000
Manifest this update: Sat 28 Feb 2026 20:01:51 +0000
Manifest next update: Sat 07 Mar 2026 20:01:51 +0000
Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: +N8jmhhtv1Um0fnt8nIrsWDbyjyWxKvHYVs7adGeG1Q=)
2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2619 (0xa3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Validity
Not Before: Feb 28 20:01:51 2026 GMT
Not After : Mar 7 20:01:51 2026 GMT
Subject: CN=69a349af-d42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:03:15:bb:44:a2:ba:bb:5a:67:83:f7:99:
f1:ae:18:2b:37:43:0d:40:f7:ae:41:44:a3:d0:60:
25:70:3e:fc:7c:47:11:32:e9:93:37:57:17:55:62:
ca:18:12:2d:e0:fb:83:1f:e2:1f:ee:a5:d1:b7:3b:
d2:a7:0c:c5:c1:ef:2a:47:1b:ec:dc:19:59:8f:b6:
28:58:53:8a:48:5c:5b:2e:8b:26:d0:ec:a7:4b:cd:
40:25:db:89:a9:e0:21:bc:5c:78:29:7e:1c:d0:a9:
32:95:e1:a9:1c:49:d9:bb:1b:b4:46:69:bc:ba:82:
a7:70:87:5b:2c:17:c7:18:69:39:97:79:3a:9f:c1:
26:d4:39:48:48:2a:93:cc:7c:e3:3e:3b:43:7e:8c:
c8:4b:94:db:b9:f8:05:6d:e3:24:d6:91:23:01:5a:
82:b2:38:4e:46:66:56:96:ba:9b:ea:c5:91:94:13:
89:67:2d:61:39:47:e8:db:82:b7:29:38:de:12:9d:
a0:01:a3:05:d8:6f:34:c5:a6:7f:fa:71:7d:ec:5f:
e9:f4:2c:ee:1f:3a:11:68:e8:90:dd:5f:d7:61:03:
29:70:10:d4:14:6a:0a:85:eb:d8:91:a1:c0:9d:6e:
e4:39:a2:43:1f:41:cd:e8:1a:c9:e9:d3:7d:57:72:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:D5:F4:E8:7D:52:A6:8C:95:08:87:ED:05:7E:F3:3A:1F:AC:55
X509v3 Authority Key Identifier:
keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:77:13:89:64:30:a9:5b:58:6a:b1:05:9b:90:69:de:29:0f:
70:9f:73:8d:6c:db:97:20:35:37:6a:5c:0c:76:31:44:22:1e:
ae:b4:70:10:16:ce:03:ad:8b:1c:3e:cb:cf:aa:65:27:36:46:
e5:7d:16:68:2a:84:03:52:64:ed:1b:81:24:87:ae:0f:b9:67:
2e:db:76:e0:63:03:3a:f1:d8:8e:4c:bc:f7:93:25:93:f6:3d:
aa:71:49:11:dc:8f:6b:69:32:e0:32:69:b7:1d:6a:7c:3d:06:
e8:e2:0d:a7:30:bb:af:d2:e6:d9:fb:c1:ee:62:d5:a4:e5:0d:
23:75:c7:d9:64:5d:58:66:b4:e3:15:ef:b7:22:da:a5:e6:6f:
a3:9e:c9:11:3c:f2:86:f2:0b:24:4b:b2:2e:c8:69:7e:7d:0a:
74:9e:2e:5c:57:f5:0e:dc:96:06:c6:30:f6:d3:be:6e:01:e8:
ee:5c:58:70:7f:7e:68:17:72:28:e4:85:05:0a:3f:c6:59:34:
44:8e:63:30:e6:76:d1:52:9f:67:0e:5c:89:26:37:ee:98:9c:
c2:f4:39:12:f1:ae:ec:71:e8:d5:e7:04:4e:e4:b8:61:6e:02:
a4:db:c9:ec:cc:77:92:0d:c7:f5:71:8a:64:47:de:f1:3c:4d:
82:5c:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:54 2026 by rpki-client