
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier: 4Ynm78Nx/CbldZOhcS0VOpoY7VolZPu3KYVsMty+MKY=
Subject key identifier: 70:A4:B6:D5:5E:33:4B:D6:F5:66:19:54:24:EE:37:65:5D:5B:7E:64
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial: 351F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number: 3518
Signing time: Mon 02 Mar 2026 03:00:09 +0000
Manifest this update: Mon 02 Mar 2026 03:00:07 +0000
Manifest next update: Mon 09 Mar 2026 03:00:07 +0000
Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: 7is/BliDgnfM2S0uvmxYFOv+HVCHN3Vntiq252pZ5zQ=)
2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Te4mjLd0tS0Pp8TK/M4FDw7bPNKLJP9S5lFxUos08I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13599 (0x351f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Validity
Not Before: Mar 2 03:00:07 2026 GMT
Not After : Mar 9 03:00:07 2026 GMT
Subject: CN=69a4fd39-3e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:6b:b0:d7:c3:2a:ab:9d:a2:b5:90:75:2e:
e7:b7:c3:a4:c5:94:a5:d6:3b:ba:16:d7:7b:10:00:
08:b7:83:a3:43:ec:85:18:ae:c4:5c:b7:3c:b5:eb:
94:4c:0e:81:6e:65:f1:b3:b9:49:a8:c9:1b:e2:0a:
a5:55:c7:e6:f1:f9:15:45:dd:0f:85:53:9b:40:cd:
00:8d:e0:f6:bb:62:32:5d:e0:09:b2:7e:ad:17:59:
cd:68:81:90:92:b9:7a:c3:0d:64:14:30:b7:9e:f9:
1a:fb:2b:07:0e:ce:7a:29:cc:be:3a:4d:84:51:18:
4f:58:0b:ba:65:4f:76:8f:7b:ff:30:c3:b7:58:b6:
4d:f5:5a:de:89:48:fe:eb:b7:7e:84:b0:87:cb:51:
37:e3:bc:d8:b7:77:e9:ce:62:e2:4d:2e:6c:b1:13:
4c:7f:9a:b1:25:fd:c4:27:3b:b5:7c:4d:58:5e:b1:
e9:9e:6b:a9:51:52:1e:24:e0:29:14:92:7b:e2:62:
89:e2:db:ec:45:46:9c:41:4d:17:a9:55:a2:7d:1a:
4f:9b:6f:a1:d0:60:fb:06:a3:63:33:2a:e2:d9:91:
46:4a:8d:7b:99:11:a8:f0:0f:c2:d2:9a:d3:4d:ae:
8b:86:ea:0c:1c:a3:b8:ee:60:d7:2f:de:a3:7d:44:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A4:B6:D5:5E:33:4B:D6:F5:66:19:54:24:EE:37:65:5D:5B:7E:64
X509v3 Authority Key Identifier:
keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:bb:ca:5d:7f:65:74:2e:7b:fc:b9:ed:07:ca:be:73:d9:18:
5d:41:bd:7d:5c:6f:c3:5d:61:4e:ed:f5:a1:cf:6d:6f:4d:62:
66:7f:47:31:a2:9e:df:9e:55:7a:c3:b9:8d:0d:ce:ba:5e:02:
a0:13:97:f7:f3:98:b7:53:67:cf:f3:c2:c1:66:ef:70:68:dd:
8e:3e:84:bf:25:ab:27:3b:b3:58:fc:8a:8a:d0:f1:60:1f:0c:
81:7d:8d:65:a3:09:1e:ba:60:b3:12:e5:01:fa:c5:27:c5:3e:
68:5b:28:9b:1f:30:54:5a:0f:1c:19:31:cd:95:f4:31:46:7f:
56:40:62:38:fe:99:aa:56:68:16:28:35:94:fb:b9:28:51:24:
2c:c9:72:9f:fe:63:8d:1e:b2:44:2d:bd:a5:8e:f3:9f:1c:3b:
9d:85:bd:58:7c:9c:36:ec:57:9f:3b:6a:b4:a2:0c:21:4e:b7:
2b:b6:5d:5d:d8:77:8e:fa:7c:7e:e7:4f:f3:59:07:91:53:46:
72:38:dd:a5:43:1c:5f:8e:8e:07:82:e9:6a:48:ea:33:89:7a:
8a:97:c7:b6:1b:a1:d7:c8:38:36:31:30:6c:a7:2f:cc:86:6b:
43:9c:16:53:93:df:a3:d6:6a:cb:37:eb:0b:1f:52:40:eb:aa:
07:46:25:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF
M0VCOEE5OUYwHhcNMjYwMzAyMDMwMDA3WhcNMjYwMzA5MDMwMDA3WjAYMRYwFAYD
VQQDEw02OWE0ZmQzOS0zZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/hrsNfDKqudorWQdS7nt8OkxZSl1ju6Ftd7EAAIt4OjQ+yFGK7EXLc8teuU
TA6BbmXxs7lJqMkb4gqlVcfm8fkVRd0PhVObQM0AjeD2u2IyXeAJsn6tF1nNaIGQ
krl6ww1kFDC3nvka+ysHDs56Kcy+Ok2EURhPWAu6ZU92j3v/MMO3WLZN9VreiUj+
67d+hLCHy1E347zYt3fpzmLiTS5ssRNMf5qxJf3EJzu1fE1YXrHpnmupUVIeJOAp
FJJ74mKJ4tvsRUacQU0XqVWifRpPm2+h0GD7BqNjMyri2ZFGSo17mRGo8A/C0prT
Ta6LhuoMHKO47mDXL96jfUTr1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCkttVe
M0vW9WYZVCTuN2VdW35kMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE
OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043
QzU1VDg4VGhEV3JqNjRxWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA07vKXX9ldC57/LntB8q+c9kYXUG9fVxvw11hTu31oc9tb01iZn9HMaKe355V
esO5jQ3Oul4CoBOX9/OYt1Nnz/PCwWbvcGjdjj6EvyWrJzuzWPyKitDxYB8MgX2N
ZaMJHrpgsxLlAfrFJ8U+aFsomx8wVFoPHBkxzZX0MUZ/VkBiOP6ZqlZoFig1lPu5
KFEkLMlyn/5jjR6yRC29pY7znxw7nYW9WHycNuxXnztqtKIMIU63K7ZdXdh3jvp8
fudP81kHkVNGcjjdpUMcX46OB4LpakjqM4l6ipfHthuh18g4NjEwbKcvzIZrQ5wW
U5Pfo9ZqyzfrCx9SQOuqB0YliQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:20 2026 by rpki-client