
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json)
Hash identifier: gTdv45v9iMrfcS4fjYe9fgwt7dIjB2KoFwm5yT0Ykvc=
Subject key identifier: B8:61:DE:74:9C:22:BF:AC:1A:1F:78:45:79:D6:DD:41:F8:75:88:63
Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
Manifest number: 01E6
Signing time: Sun 01 Mar 2026 04:10:28 +0000
Manifest this update: Sun 01 Mar 2026 04:10:27 +0000
Manifest next update: Sun 08 Mar 2026 04:10:27 +0000
Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: +g8XlbAp3gecTtuKXwnDfnjjvy858WuihzmSCjJmLfY=)
2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: quzgA63SpLjcb7xHGEjv3O11w0qxKCOwrlK8xFLHM54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Validity
Not Before: Mar 1 04:10:27 2026 GMT
Not After : Mar 8 04:10:27 2026 GMT
Subject: CN=69a3bc34-e4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:5d:2d:d9:d7:16:cf:1f:a2:66:66:02:e8:
e6:1d:91:90:64:25:49:01:4b:7d:81:77:6e:a3:2a:
df:97:4b:8d:6c:34:74:c1:0a:0e:f8:85:7f:70:09:
67:03:1b:69:fe:72:81:14:fb:d9:4c:84:54:28:9d:
ca:93:69:64:4c:ea:92:2b:57:63:ee:3c:07:73:01:
e6:cb:52:e5:50:63:bd:7d:a6:ff:fc:b1:05:3b:1e:
31:72:81:78:71:a9:39:30:60:c2:42:98:a0:c0:16:
15:c3:1b:37:e0:26:80:a6:23:8b:5a:7e:0b:ee:9a:
09:3c:c4:42:30:db:cc:29:4e:07:2f:c9:6f:01:ad:
e4:e7:d8:45:2c:f2:35:95:99:11:0a:31:27:8f:6e:
bd:8c:98:cd:ad:0a:1e:95:32:4c:24:86:69:d3:97:
84:d9:b5:29:cf:82:b8:73:22:58:df:98:34:1d:35:
be:48:11:cc:10:94:d3:3c:c9:a1:7e:5d:2c:3d:38:
af:8f:da:b0:d9:74:db:79:51:c1:86:b1:d8:d8:d3:
d3:19:3b:63:88:d0:e4:cd:cd:e5:0f:4b:a3:40:af:
49:04:88:0a:68:9e:03:e4:35:c8:3e:12:65:cd:f7:
96:14:c1:62:ed:51:97:af:99:e2:71:eb:d4:3f:12:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:DE:74:9C:22:BF:AC:1A:1F:78:45:79:D6:DD:41:F8:75:88:63
X509v3 Authority Key Identifier:
keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:81:fd:6c:4b:0b:77:38:c3:2c:7d:65:7e:da:8c:d9:7f:63:
7d:48:56:6e:6a:96:e7:cf:69:e0:75:bb:c6:34:df:99:c8:55:
7d:f6:c8:c3:b7:bd:12:ae:f4:c8:d8:26:d5:3b:56:90:9f:82:
37:b8:e4:90:fe:0d:17:f7:5f:f4:1d:21:72:14:ac:83:34:9f:
73:be:3c:ce:ed:21:ab:d4:77:7b:30:07:62:9b:76:17:94:d9:
8b:e4:6b:b7:7f:05:ba:af:1e:36:42:bc:ef:e9:85:5e:4c:c3:
04:df:de:90:22:8c:f9:3f:3f:e1:2e:96:49:bc:8e:09:42:23:
38:06:ad:1e:3c:d2:50:e7:93:9f:8e:5c:49:55:1b:00:da:2c:
31:46:ea:ff:29:bc:83:eb:ff:34:8e:7a:eb:39:6c:d1:af:db:
a9:94:25:f7:ed:bf:76:47:15:98:65:07:bb:e9:1e:43:c1:38:
a3:77:c0:ef:20:ef:c8:a4:96:0f:ae:b0:8c:21:c1:1c:95:4a:
22:3b:82:81:73:d6:6f:15:44:02:4c:fb:65:d6:6d:38:bf:b1:
20:23:8c:4a:1a:c8:89:85:29:1d:3d:b6:f0:ba:d3:83:c0:49:
72:91:67:b1:96:a2:d4:c5:aa:7b:9f:63:18:80:c0:9d:90:97:
a7:92:df:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG
MzY1NkJGMjIwHhcNMjYwMzAxMDQxMDI3WhcNMjYwMzA4MDQxMDI3WjAYMRYwFAYD
VQQDDA02OWEzYmMzNC1lNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoRJdLdnXFs8fomZmAujmHZGQZCVJAUt9gXduoyrfl0uNbDR0wQoO+IV/cAln
Axtp/nKBFPvZTIRUKJ3Kk2lkTOqSK1dj7jwHcwHmy1LlUGO9fab//LEFOx4xcoF4
cak5MGDCQpigwBYVwxs34CaApiOLWn4L7poJPMRCMNvMKU4HL8lvAa3k59hFLPI1
lZkRCjEnj269jJjNrQoelTJMJIZp05eE2bUpz4K4cyJY35g0HTW+SBHMEJTTPMmh
fl0sPTivj9qw2XTbeVHBhrHY2NPTGTtjiNDkzc3lD0ujQK9JBIgKaJ4D5DXIPhJl
zfeWFMFi7VGXr5nicevUPxKc8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhh3nSc
Ir+sGh94RXnW3UH4dYhjMB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy
RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjlCOS85NTFGOThFQTMyRDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBW
b1dhMVFzUEVrd256Wld2eUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP4H9bEsLdzjDLH1lftqM2X9jfUhWbmqW589p4HW7xjTfmchVffbIw7e9Eq70
yNgm1TtWkJ+CN7jkkP4NF/df9B0hchSsgzSfc748zu0hq9R3ezAHYpt2F5TZi+Rr
t38Fuq8eNkK87+mFXkzDBN/ekCKM+T8/4S6WSbyOCUIjOAatHjzSUOeTn45cSVUb
ANosMUbq/ym8g+v/NI566zls0a/bqZQl9+2/dkcVmGUHu+keQ8E4o3fA7yDvyKSW
D66wjCHBHJVKIjuCgXPWbxVEAkz7ZdZtOL+xICOMShrIiYUpHT228LrTg8BJcpFn
sZai1MWqe59jGIDAnZCXp5LfrQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:27 2026 by rpki-client