
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
File: lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json)
Hash identifier: /9VhehCK6jce/+eU+zE2623Nhk+1XeiOv0/39HuIGPA=
Subject key identifier: 8D:8A:5D:C8:EC:FE:92:A0:7E:A9:37:25:32:1A:2A:8D:55:97:27:65
Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Certificate serial: 0673
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
Manifest number: 066C
Signing time: Sat 28 Feb 2026 23:05:23 +0000
Manifest this update: Sat 28 Feb 2026 23:05:22 +0000
Manifest next update: Sat 07 Mar 2026 23:05:22 +0000
Files and hashes: 1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: cwFvmjQiWntYQ+pj7WE6uJSO0Mqd5CkkCYg+SF12UMg=)
2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: Hu3KJZGMFU1oSrjsFOXx/j+TH9Vy+Garohr2Zg0l2Z0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Validity
Not Before: Feb 28 23:05:22 2026 GMT
Not After : Mar 7 23:05:22 2026 GMT
Subject: CN=69a374b3-6f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:b1:d3:a0:11:d0:85:e8:e8:31:da:88:25:
6c:45:b5:12:10:f9:32:5d:38:bc:be:23:45:cc:9b:
50:72:cf:ae:37:08:7b:bf:ae:a3:3e:cb:26:0a:42:
26:0f:72:82:e2:02:d0:df:5d:93:0c:37:dc:c4:14:
bb:9a:fe:42:8c:54:ff:eb:75:36:cb:0f:ca:d0:11:
66:d9:37:e3:40:12:b9:86:13:7d:94:91:7e:0d:9b:
f4:3c:b6:90:2b:a8:f7:a0:33:6f:e7:c3:23:89:3b:
d8:fe:d3:87:2d:b5:28:08:8a:17:c5:66:ed:95:db:
ef:02:d4:de:e1:95:3c:23:a6:c0:dd:aa:a4:da:58:
40:ea:b1:ae:3a:30:08:b6:55:75:87:47:e5:0c:90:
a6:0e:d2:6a:aa:e8:89:00:66:f8:1d:92:aa:37:10:
62:3f:ed:c4:5b:4a:a2:29:6c:19:19:70:55:9a:26:
b9:94:25:81:d1:9f:16:b7:94:67:bd:de:f7:8c:69:
0f:f1:70:d4:66:be:17:e4:e3:89:b6:94:29:1e:b9:
fc:6f:fa:7f:f7:e2:6b:90:0a:6d:54:d8:e3:02:f8:
b4:3a:ff:0c:95:13:b0:47:80:8c:f1:89:72:7b:e6:
fa:5a:d4:6d:35:1d:a2:96:88:fd:d7:55:2e:85:de:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8A:5D:C8:EC:FE:92:A0:7E:A9:37:25:32:1A:2A:8D:55:97:27:65
X509v3 Authority Key Identifier:
keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:37:74:e1:b0:ba:9e:00:5b:86:1b:6c:1b:92:db:49:5a:c0:
48:b5:39:0f:15:44:be:86:17:32:0d:e3:05:c5:c5:d4:33:c8:
36:fd:9a:e1:69:a6:ab:dc:aa:e7:54:84:05:17:3b:2e:a2:e7:
be:7a:78:3d:57:ff:64:79:5e:c0:85:32:01:a3:07:59:dc:5d:
65:9d:ce:04:62:8a:e8:eb:eb:56:4b:6a:cc:4c:58:53:74:f9:
26:bb:4c:3e:46:58:dd:3b:bf:92:5d:75:1d:fc:40:42:c5:98:
f8:51:3d:28:7d:a0:d9:68:b3:d8:77:64:dc:7c:bb:6c:be:09:
86:c4:d0:53:b8:ef:1f:cc:36:a7:c3:cd:f2:b1:6b:3f:d2:90:
b2:00:f0:18:4a:2f:1e:aa:fd:f7:ad:63:75:98:0b:5a:08:25:
ae:39:e5:3f:10:50:ef:22:c6:10:30:3e:07:ee:b9:b3:fc:e7:
08:90:04:71:88:7c:76:c6:7e:40:e1:15:aa:1d:3a:80:e7:be:
43:47:a8:ab:91:77:9f:ae:1d:a8:e7:8a:31:de:8b:bd:78:fc:
36:9d:45:ed:80:2d:2a:a7:ac:55:34:62:e1:8b:6d:93:3d:66:
db:27:53:91:55:19:56:fa:fe:10:c5:fe:f9:17:d0:aa:33:2c:
a3:97:62:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlERjgxMTAvBgNVBAUTKDk1MDY4QkIzMEFCQzdFMDA3RkQ4Mzg3RTRERTBBODNF
RkFBREQ0NzIwHhcNMjYwMjI4MjMwNTIyWhcNMjYwMzA3MjMwNTIyWjAYMRYwFAYD
VQQDDA02OWEzNzRiMy02ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqqx06AR0IXo6DHaiCVsRbUSEPkyXTi8viNFzJtQcs+uNwh7v66jPssmCkIm
D3KC4gLQ312TDDfcxBS7mv5CjFT/63U2yw/K0BFm2TfjQBK5hhN9lJF+DZv0PLaQ
K6j3oDNv58MjiTvY/tOHLbUoCIoXxWbtldvvAtTe4ZU8I6bA3aqk2lhA6rGuOjAI
tlV1h0flDJCmDtJqquiJAGb4HZKqNxBiP+3EW0qiKWwZGXBVmia5lCWB0Z8Wt5Rn
vd73jGkP8XDUZr4X5OOJtpQpHrn8b/p/9+JrkAptVNjjAvi0Ov8MlROwR4CM8Yly
e+b6WtRtNR2iloj911Uuhd5+MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2KXcjs
/pKgfqk3JTIaKo1VlydlMB8GA1UdIwQYMBaAFJUGi7MKvH4Af9g4fk3gqD76rdRy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOURGOC80QjNCODgxRUI2
RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZnQl8yRGgtVGVDb1B2cXQx
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xRYUxzd3E4ZmdCXzJEaC1UZUNvUHZxdDFISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OURGOC80QjNCODgxRUI2RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZn
Ql8yRGgtVGVDb1B2cXQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATDd04bC6ngBbhhtsG5LbSVrASLU5DxVEvoYXMg3jBcXF1DPINv2a4Wmmq9yq
51SEBRc7LqLnvnp4PVf/ZHlewIUyAaMHWdxdZZ3OBGKK6OvrVktqzExYU3T5JrtM
PkZY3Tu/kl11HfxAQsWY+FE9KH2g2Wiz2Hdk3Hy7bL4JhsTQU7jvH8w2p8PN8rFr
P9KQsgDwGEovHqr9961jdZgLWgglrjnlPxBQ7yLGEDA+B+65s/znCJAEcYh8dsZ+
QOEVqh06gOe+Q0eoq5F3n64dqOeKMd6LvXj8Np1F7YAtKqesVTRi4Yttkz1m2ydT
kVUZVvr+EMX++RfQqjMso5diNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:54 2026 by rpki-client