
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier: ZyiRjftftRJT7NV91Hd6FspoIJLXu6TdK3b4dL6IilQ=
Subject key identifier: 34:34:BC:41:A6:E2:13:37:88:D0:C1:8E:7B:6B:8F:F7:73:36:2A:19
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial: 1E77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number: 1E6B
Signing time: Sat 18 Apr 2026 16:00:11 +0000
Manifest this update: Sat 18 Apr 2026 16:00:10 +0000
Manifest next update: Sat 25 Apr 2026 16:00:10 +0000
Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: 5NnwjOm1g9CoFlyMu0fHmvZzm/s6y5kwu0wusCeIfYI=)
2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: 9fJ1ri6IaNU9VtWg8Hqy+rRwD5x8nCDjNKKvvrEFZII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7799 (0x1e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Validity
Not Before: Apr 18 16:00:10 2026 GMT
Not After : Apr 25 16:00:10 2026 GMT
Subject: CN=69e3aa8b-d254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2a:11:73:2a:ea:89:d7:8e:35:8f:c6:00:08:
ec:5b:a8:d8:10:dd:01:8a:0a:33:b0:6b:3b:85:23:
ba:38:f8:fd:b7:4d:b7:9e:72:31:6a:58:e0:43:ca:
09:ff:fa:32:04:ef:a7:ec:03:76:70:ae:83:3f:fe:
09:e7:7b:48:e5:24:93:e4:18:79:cf:f6:4f:76:cb:
b9:65:35:99:6a:0f:1e:eb:d2:79:52:14:88:cd:3d:
00:72:26:60:7e:ad:6c:31:f2:e4:d3:a4:ee:df:d4:
92:c9:71:3e:e3:e5:e8:8e:a6:e3:1f:03:23:77:7f:
d1:ca:2f:f0:6f:dd:f7:5d:f3:51:62:e8:4b:31:2f:
7b:38:b1:3e:84:02:6b:e5:e1:f9:0f:88:8b:4d:c2:
9c:41:13:23:e7:3c:3f:f0:c7:75:8d:e0:3e:38:96:
3a:02:cb:35:44:02:34:f1:8e:6b:48:ae:84:8e:5a:
bf:a5:ca:e4:38:4c:f3:56:63:b6:6d:c4:5a:f4:49:
49:8f:c8:90:c1:cc:a9:72:c9:86:ae:e4:03:d1:ca:
c2:b9:95:67:fe:c4:d4:8f:ce:99:a8:c1:d5:6d:7d:
96:88:32:88:97:a1:de:47:de:c2:f3:87:1c:cf:e1:
19:92:4c:0d:12:d0:f5:39:34:4a:cc:e3:02:c0:a7:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:BC:41:A6:E2:13:37:88:D0:C1:8E:7B:6B:8F:F7:73:36:2A:19
X509v3 Authority Key Identifier:
keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:94:3c:cc:e9:53:19:42:5e:bb:b4:3f:71:a1:e2:a5:2d:f9:
72:a7:0a:5a:49:29:1f:10:34:da:ae:8f:b2:d1:4a:b0:e4:05:
35:e5:8f:43:9e:10:19:f7:7a:cb:ac:ce:3a:b6:3a:65:ce:e6:
6f:4a:d4:73:59:39:6e:c5:7e:91:b6:4f:5f:40:8b:35:18:53:
a0:ca:0a:19:3c:3c:65:29:c6:28:40:2b:67:c8:ba:59:b5:e0:
79:38:73:a0:f0:74:2c:6d:81:8a:16:71:c5:56:ac:e4:12:da:
02:b0:13:30:79:3f:a2:0d:6e:c3:5d:b2:6e:15:ad:0d:53:46:
17:66:4c:40:f1:39:80:3a:75:db:30:5e:29:c6:38:2c:6d:97:
d6:79:3a:c3:c5:e3:6c:1a:d5:68:8b:6f:ea:48:50:8d:9d:db:
ba:a4:c8:6e:32:23:46:0d:a7:e7:37:88:4e:a3:fa:a8:fb:a6:
0b:94:a4:6d:80:40:91:e3:ab:f1:6c:05:61:5c:32:64:85:d0:
4a:6b:43:fa:3c:ba:b8:f8:30:b4:55:91:b8:89:45:72:b9:24:
aa:eb:db:08:dc:4e:e7:bc:49:6f:8a:e4:d4:dc:6f:b6:7c:25:
de:0e:39:68:8e:77:1e:1b:98:41:58:0c:dd:4a:a8:c0:e8:7b:
4e:33:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:08 2026 by rpki-client