
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier: gn3pwE8/By3VWJzHEzykMSYFbRgRJMCUi2GPs2S8gjc=
Subject key identifier: 72:AA:B2:2A:0E:84:9C:0B:98:BE:E2:77:47:B1:FC:A6:F5:84:B0:27
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial: 0AE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number: 0ADF
Signing time: Mon 02 Mar 2026 02:19:47 +0000
Manifest this update: Mon 02 Mar 2026 02:19:45 +0000
Manifest next update: Mon 09 Mar 2026 02:19:45 +0000
Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: aZwzMDr23Chfb0QeWtN/doNAvCp8BsHrMWNh+lE3tKE=)
2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: y/e1Xgm1TYZ8g3i9MHD2EYHP3EICPkHuA7aJGAYGGCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Validity
Not Before: Mar 2 02:19:45 2026 GMT
Not After : Mar 9 02:19:45 2026 GMT
Subject: CN=69a4f3c2-44c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:ef:68:55:a0:ec:24:f9:ef:00:66:35:99:
a7:52:e7:fd:fd:6d:5e:51:2d:ff:d1:5a:56:1b:80:
3b:db:98:3e:79:83:3f:a3:dc:0d:ec:f6:9f:77:01:
a8:8b:04:61:8e:7d:80:3b:d6:f5:6b:f1:7c:c2:ef:
67:94:85:ec:68:88:72:64:3e:2e:b3:25:e9:e0:db:
d6:f8:e0:03:b0:f2:86:08:40:1f:ae:40:0c:fb:6a:
60:08:c4:56:6b:b0:75:ec:a2:d4:db:d0:00:a3:f1:
c7:cf:1f:ef:91:90:5b:16:e5:31:c9:00:57:91:52:
37:40:c1:8e:9f:31:be:3c:d7:0d:27:3a:2e:32:20:
4e:92:ae:27:fe:56:e9:4e:94:11:d5:cf:c4:da:bc:
bf:11:0d:5d:e8:6d:2e:07:07:95:70:90:b4:09:f8:
28:06:70:2c:0c:eb:dd:95:54:97:dc:eb:ea:85:ea:
f9:b6:89:4a:e5:88:c2:0a:1e:4c:8f:5a:e7:39:5e:
41:31:5e:0b:c8:55:3e:6f:07:72:75:42:68:0e:8e:
51:3c:d8:e7:71:7b:a9:2a:46:91:eb:bc:31:4a:d5:
5f:01:03:03:0c:f2:5d:d1:7f:78:99:99:a4:b3:9f:
5f:23:e8:27:e5:94:15:c2:ba:40:98:7f:1f:86:96:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AA:B2:2A:0E:84:9C:0B:98:BE:E2:77:47:B1:FC:A6:F5:84:B0:27
X509v3 Authority Key Identifier:
keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:37:8b:62:87:94:d4:43:4a:8f:4c:d5:5d:fa:bd:0d:44:57:
8d:e5:4a:44:66:6d:35:4d:82:c7:8c:9f:27:be:45:a7:f4:eb:
a3:51:2d:1b:bc:d7:c0:37:b4:b4:5a:b5:d4:c0:3a:00:3f:44:
07:a0:c3:a0:8e:b6:b1:ef:a0:e6:fb:8a:4f:20:90:c9:1b:46:
6d:9a:21:c1:0f:4b:f7:cd:1f:ce:b0:45:1d:0a:fc:0b:90:bf:
b1:74:27:1a:cc:c5:20:8e:ec:ab:ab:67:4b:5c:3a:d4:6d:74:
7c:18:42:b9:fb:20:3e:50:ce:f1:1c:92:b5:d0:fd:77:bf:15:
99:19:52:4b:29:1f:cb:de:09:d5:f2:de:73:cb:a0:0e:c8:c5:
55:26:30:63:95:6c:67:ae:11:79:80:c7:64:d9:7e:c4:8c:22:
79:85:fb:f7:db:e7:8d:ee:32:fb:f6:e2:9f:a2:c8:7b:34:82:
d1:1b:83:5b:a7:fe:47:86:89:39:6d:dc:d7:72:8d:15:e7:3c:
92:b0:54:a3:a9:05:85:af:09:6d:a0:97:82:e1:04:4d:7a:4d:
c1:ec:9b:d4:20:98:6b:e9:b1:b5:07:ae:c1:c3:97:d2:a8:ac:
64:21:5d:70:6b:45:8a:7a:f7:5e:58:95:47:c1:86:8b:da:d9:
38:7b:4a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:09 2026 by rpki-client