
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
File: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json)
Hash identifier: OCPhC0gEEaAdHCTGYPkerT4LU/mNzDix1chvFjR7wc8=
Subject key identifier: ED:6A:0B:59:09:D6:CA:C6:68:1E:4D:79:AA:F5:42:0C:E3:FE:E7:50
Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
Certificate issuer: /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Certificate serial: 132C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
Manifest number: 486A
Signing time: Sun 01 Mar 2026 23:52:57 +0000
Manifest this update: Sun 01 Mar 2026 23:52:55 +0000
Manifest next update: Sun 08 Mar 2026 23:52:55 +0000
Files and hashes: 1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: L3UdyVqD+BbsgYSMuzofkDbfh3/QA5EQZgqLC4ZGI0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4908 (0x132c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Validity
Not Before: Mar 1 23:52:55 2026 GMT
Not After : Mar 8 23:52:55 2026 GMT
Subject: CN=69a4d159-a8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:3b:ed:96:28:ee:1a:1a:3f:d8:c8:12:8e:
e2:f0:19:34:a9:d8:f1:6e:ff:c6:1f:3a:a1:be:cd:
d3:2a:17:de:7c:be:2d:46:b9:63:ef:f6:38:a0:06:
01:c8:64:31:a5:4b:7e:35:b7:44:e1:7d:fd:f6:bd:
50:b3:82:a1:27:ae:d4:a4:c1:a9:0e:30:db:be:4c:
14:eb:19:ca:c0:b5:20:8c:78:b8:b9:4d:59:52:02:
08:d9:ab:3a:20:47:c5:00:fb:b3:a1:ed:16:00:80:
71:87:7e:b7:da:4c:eb:59:62:19:82:b9:8a:33:8c:
9c:8b:6c:0d:84:51:4d:fb:84:67:70:9b:bb:4f:ec:
67:7a:58:b9:43:eb:75:89:46:ef:f0:69:b1:59:00:
11:4d:90:7b:05:d7:38:74:ff:8b:ad:0e:91:f4:f3:
97:e8:c2:c7:d2:6d:83:c3:3d:41:a1:7a:7c:5f:c5:
ae:f6:15:ee:ed:69:b9:d9:6a:54:6c:8c:48:64:4a:
ea:fe:b7:b7:00:be:07:25:40:f9:9f:16:4a:f0:b3:
ba:64:be:70:be:7c:d1:28:f2:37:f9:1f:b7:3a:27:
91:19:d0:76:3b:45:9c:6e:8b:13:5e:af:91:37:b2:
20:ad:87:31:71:d1:a9:c4:af:a7:4e:15:68:b4:93:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:0B:59:09:D6:CA:C6:68:1E:4D:79:AA:F5:42:0C:E3:FE:E7:50
X509v3 Authority Key Identifier:
keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:f6:52:72:64:f5:46:67:c2:47:09:dc:c5:4e:09:cf:5e:6d:
bc:55:c4:75:7f:a7:ff:b2:18:9a:04:b3:6c:89:37:2b:f2:7b:
c6:34:e6:3e:f1:cb:f0:db:95:ab:75:95:d2:c3:8f:e5:14:9a:
f2:05:37:26:c3:b5:bb:bc:cb:71:08:1a:20:11:db:f1:15:8b:
8a:a4:62:47:88:63:73:80:d3:de:45:b2:14:1b:3c:3d:ff:e3:
f5:f5:c9:c7:50:e0:c5:a9:f2:9e:bc:f9:3c:3f:23:81:bd:77:
94:df:9c:0d:7e:1a:ff:ae:cb:61:49:c7:26:e5:9b:e7:1b:80:
91:e3:3a:99:ae:a9:60:2a:af:12:f8:97:b7:83:6f:06:e8:04:
3c:3e:d9:06:e6:51:5d:2d:47:27:6d:5d:5e:81:4a:7b:16:fc:
09:6c:49:88:fd:86:a4:da:ee:96:5f:0f:30:01:aa:7f:9f:32:
3d:70:aa:d6:72:ef:bf:ba:a4:47:32:61:d8:61:c6:6f:96:02:
c6:63:e9:bc:0b:39:63:aa:13:be:f1:7e:58:eb:e6:91:33:5e:
8b:68:cc:84:a1:2a:68:1d:e4:83:ea:a3:cc:18:fc:b1:7a:61:
2c:26:b2:c6:a2:fd:d5:b6:6b:eb:23:ab:c9:47:e7:17:5e:9b:
f8:d9:03:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVENjExMTAvBgNVBAUTKDQxNkQ2Q0Q2MDM5MEZCN0M5NkVENzlENzhDRTc2RjU0
QUZDRjQ0NTgwHhcNMjYwMzAxMjM1MjU1WhcNMjYwMzA4MjM1MjU1WjAYMRYwFAYD
VQQDEw02OWE0ZDE1OS1hOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1M77ZYo7hoaP9jIEo7i8Bk0qdjxbv/GHzqhvs3TKhfefL4tRrlj7/Y4oAYB
yGQxpUt+NbdE4X399r1Qs4KhJ67UpMGpDjDbvkwU6xnKwLUgjHi4uU1ZUgII2as6
IEfFAPuzoe0WAIBxh3632kzrWWIZgrmKM4yci2wNhFFN+4RncJu7T+xneli5Q+t1
iUbv8GmxWQARTZB7Bdc4dP+LrQ6R9POX6MLH0m2Dwz1BoXp8X8Wu9hXu7Wm52WpU
bIxIZErq/re3AL4HJUD5nxZK8LO6ZL5wvnzRKPI3+R+3OieRGdB2O0WcbosTXq+R
N7IgrYcxcdGpxK+nThVotJMq2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1qC1kJ
1srGaB5Near1Qgzj/udQMB8GA1UdIwQYMBaAFEFtbNYDkPt8lu1514znb1Svz0RY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE
NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0zeVc3WG5Yak9kdlZLX1BS
RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FXMXMxZ09RLTN5VzdYblhqT2R2VktfUFJGZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0z
eVc3WG5Yak9kdlZLX1BSRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOfZScmT1RmfCRwncxU4Jz15tvFXEdX+n/7IYmgSzbIk3K/J7xjTmPvHL8NuV
q3WV0sOP5RSa8gU3JsO1u7zLcQgaIBHb8RWLiqRiR4hjc4DT3kWyFBs8Pf/j9fXJ
x1Dgxanynrz5PD8jgb13lN+cDX4a/67LYUnHJuWb5xuAkeM6ma6pYCqvEviXt4Nv
BugEPD7ZBuZRXS1HJ21dXoFKexb8CWxJiP2GpNrull8PMAGqf58yPXCq1nLvv7qk
RzJh2GHGb5YCxmPpvAs5Y6oTvvF+WOvmkTNei2jMhKEqaB3kg+qjzBj8sXphLCay
xqL91bZr6yOryUfnF16b+NkDAQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:19 2026 by rpki-client