
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier: NA7JTLK+2TxWJ29ZI1kSh0p6rO/jIOwdAgSt2liwJVc=
Subject key identifier: A3:DC:91:67:97:0A:CB:AA:D1:71:9F:9E:1A:80:B1:CC:D2:22:EC:59
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number: 90
Signing time: Sun 01 Mar 2026 08:50:22 +0000
Manifest this update: Sun 01 Mar 2026 08:50:22 +0000
Manifest next update: Sun 08 Mar 2026 08:50:22 +0000
Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: uL8dae4souJMQHOc+7UUmQv7He3TvZ9wLMaF+MoSnL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Validity
Not Before: Mar 1 08:50:22 2026 GMT
Not After : Mar 8 08:50:22 2026 GMT
Subject: CN=69a3fdce-6249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:c8:9b:5a:db:eb:5a:9b:7a:a5:8b:03:70:
5f:34:9e:f2:78:53:4e:5c:d7:70:d0:19:d8:e1:34:
5e:81:22:77:82:cb:62:03:6a:f0:36:89:fe:82:bd:
e0:8a:72:85:a7:28:c5:ce:58:7a:da:1f:d6:72:bc:
be:61:fa:83:ab:f0:50:e3:6f:aa:6d:37:ad:0f:b0:
1f:7d:bb:b3:cb:9b:a4:03:42:27:09:19:13:86:84:
b4:d8:5c:93:17:82:a7:75:39:2a:fb:aa:41:8f:7b:
50:b1:c8:de:5d:7b:bf:a2:cc:a7:8c:92:12:54:6b:
a4:25:d1:55:a2:25:b9:f4:85:6b:8c:e5:1b:0e:dc:
26:78:12:2c:a8:3e:ab:26:4a:4a:f7:57:92:b2:63:
60:24:ed:4c:e8:b4:b4:86:0b:fc:95:c6:fc:e4:9b:
39:f7:c3:29:fc:51:f4:e7:22:7c:61:2d:c6:6e:47:
e4:eb:0f:55:af:ae:90:ed:77:52:7f:ad:20:f5:c0:
d3:4d:0a:02:1b:c3:94:4f:d5:03:78:99:80:65:8d:
42:c0:02:90:78:c8:18:3f:57:f8:cf:c3:4d:ba:ae:
ae:57:29:8d:92:f0:9e:fa:4f:3d:4e:f1:b0:65:27:
b0:9a:21:92:db:35:3b:3c:54:e7:05:f5:5f:5c:6c:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DC:91:67:97:0A:CB:AA:D1:71:9F:9E:1A:80:B1:CC:D2:22:EC:59
X509v3 Authority Key Identifier:
keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:7c:47:df:2f:49:3b:e0:c4:57:52:39:28:21:c1:a3:f0:
92:97:0b:f9:85:6e:21:8e:0b:db:55:9e:97:35:4d:f4:4d:9f:
1d:70:f3:f1:5a:0b:e0:30:10:40:6c:c5:eb:df:97:6a:58:2c:
86:79:9d:7b:03:1f:fb:6d:ea:3f:e9:db:96:b5:e3:47:ee:24:
13:55:a3:47:4e:5c:53:86:f7:70:46:ea:8c:90:bb:41:be:28:
62:fe:d7:fe:d3:1f:4f:9d:0b:44:9d:96:8b:d3:02:27:96:98:
d1:22:da:ce:7b:d0:f5:c3:db:f4:3f:c0:44:cd:45:3c:d7:50:
ee:fc:6d:e2:af:55:16:5f:0f:81:65:cd:eb:32:9f:9d:10:6c:
f0:7c:d0:3c:6b:97:78:54:87:80:e7:5f:92:1a:93:f8:42:64:
98:52:af:d9:44:66:68:f9:b5:e4:e2:9f:75:63:f4:68:9a:c2:
5e:0a:fe:e0:87:b8:95:3b:cf:ee:48:04:56:6a:ff:c7:7d:b8:
1f:01:86:b0:be:d9:66:60:d2:11:84:8a:02:ee:72:b5:21:da:
34:bd:c2:ce:c8:a8:a9:67:57:89:fb:93:43:f6:21:11:18:39:
bf:60:4d:d2:01:73:2d:e0:57:07:bc:0f:12:f9:05:4e:72:7c:
1b:84:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:29 2026 by rpki-client