
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json)
Hash identifier: 0PkAqnEvrzqWyj0JNORHIQTGM+gFF59L6mugTXIRs1U=
Subject key identifier: 31:F2:23:C5:46:93:22:EB:72:56:CE:07:09:58:C6:51:A4:92:49:B7
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial: 3587
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
Manifest number: 3544
Signing time: Sat 28 Feb 2026 14:26:03 +0000
Manifest this update: Sat 28 Feb 2026 14:26:02 +0000
Manifest next update: Sat 07 Mar 2026 14:26:02 +0000
Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: KThyBDSGzxLJDwA5u0KEvJ72Fe7C6XlTBWwzWrVptYo=)
2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: LGhpWTBFjDyBDwdXUCslpqVnLKK7x0c9zYz9xOgQGAg=)
3: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: IpRoMbrsFCuVHBj8xFF5+yeJ63osIqtl+3UrsHmb8ko=)
4: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yKcUuax/slVA3Y5i7L6ycngWRGb9//L2dBDsq9PesHw=)
5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: 0I1ZGIqAAsf0JHxziEVwF7z6ync1D5L/6afgE/1iVog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13703 (0x3587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Validity
Not Before: Feb 28 14:26:02 2026 GMT
Not After : Mar 7 14:26:02 2026 GMT
Subject: CN=69a2fafb-e2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:36:46:28:93:83:4e:b0:18:5a:a2:2f:65:
a5:fe:55:ff:40:15:09:6c:d7:af:3b:30:f8:af:8f:
65:19:a2:e3:5c:e8:8b:d0:96:37:81:9d:e0:94:be:
ca:8d:98:99:82:68:12:ff:04:ca:ca:ac:09:cc:43:
85:45:33:1e:97:59:a1:e7:4c:80:55:e8:9d:a8:48:
31:f2:86:66:8e:2f:42:78:ec:26:f9:58:12:d0:a9:
9a:8e:3e:e6:10:34:55:5c:49:ed:cb:21:7a:f2:fb:
3f:b4:96:ed:bf:a4:3c:65:97:70:e2:c3:23:b7:38:
47:a8:8a:22:4b:e5:39:81:8b:82:4f:9c:d9:f3:f1:
ff:f9:9b:7e:d6:6e:cb:cf:02:24:c1:03:19:e1:d0:
c2:bb:e5:bd:06:13:bf:e8:f7:36:70:d9:be:d2:a7:
81:e7:75:56:de:70:ba:26:fe:82:a1:52:a4:12:17:
58:39:3b:62:71:00:e9:c8:fd:22:4c:4c:93:08:1b:
ff:82:fa:2d:12:70:b6:e8:53:78:dc:95:8a:c2:9b:
cb:1a:da:1f:c1:2c:f1:1e:5b:05:d2:66:db:1d:d8:
82:50:8c:96:dc:54:78:97:d4:4e:46:d0:ca:d0:8e:
cd:e4:92:d7:b8:8a:65:76:32:d9:c9:22:16:28:df:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F2:23:C5:46:93:22:EB:72:56:CE:07:09:58:C6:51:A4:92:49:B7
X509v3 Authority Key Identifier:
keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:17:46:21:a6:ec:31:45:0f:56:98:9d:28:76:df:cb:28:7f:
87:3a:dd:02:b2:18:e9:ae:0d:6a:1f:9e:41:49:8d:f6:d8:f7:
3d:ee:a9:d2:c3:e4:75:72:fe:e0:80:dc:f6:71:b1:19:c8:aa:
37:fe:29:be:15:6f:d1:f0:89:cc:39:f1:ca:8b:97:83:b2:2b:
0a:fd:95:f2:6b:63:9e:f8:ed:79:24:b0:56:7f:13:b1:28:73:
ba:0f:0e:63:ce:48:11:b8:15:28:64:ff:d3:f3:29:87:8b:a0:
55:1c:b6:b0:ee:e6:69:ce:f6:56:1c:aa:98:bf:f6:35:db:65:
ee:e7:95:2a:69:d5:26:08:3a:ad:8c:43:eb:fa:e9:2b:d6:c1:
bb:96:3d:5b:c9:5b:c7:b6:81:be:8c:67:c1:90:35:88:34:f0:
f4:e0:68:04:f2:ee:32:15:6e:e6:10:5a:45:08:54:b5:b5:4d:
2a:b5:d9:a5:41:a9:49:60:83:83:e9:72:a6:8c:dd:30:77:a8:
fb:dd:82:a1:78:80:c4:c6:2e:75:a4:6d:eb:4d:eb:65:9e:73:
0c:77:50:6f:15:45:ef:a6:2b:c6:7e:96:3a:e2:cb:2b:e6:a7:
65:a5:1c:f9:20:09:70:3b:14:df:36:45:5f:37:2a:3e:34:af:
aa:3d:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:14:22 2026 by rpki-client