
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier: lfW33RtMaH98MwIwhtn8Z7gUvdVllwJpGzYcWeCc+LQ=
Subject key identifier: A6:7A:C9:27:21:20:ED:EC:01:64:C2:51:11:20:55:A2:EA:D9:AE:33
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial: 04D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number: 04D1
Signing time: Sun 01 Mar 2026 00:28:22 +0000
Manifest this update: Sun 01 Mar 2026 00:28:22 +0000
Manifest next update: Sun 08 Mar 2026 00:28:22 +0000
Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: nVQGXMLBDwOySD6f+oOek6QWYdnxYXnFoDwowoUJsGc=)
2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: p+J79GzKxldX7yAyLksNWjFs41wwGXOLgTyuIVmZY2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Validity
Not Before: Mar 1 00:28:22 2026 GMT
Not After : Mar 8 00:28:22 2026 GMT
Subject: CN=69a38826-923c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:97:04:6c:fc:a3:c5:2a:01:2b:49:3f:6a:
2d:6d:e0:f5:d7:58:c3:b6:72:02:6a:1d:79:c6:97:
b7:ce:39:12:f1:33:bf:9d:68:e9:75:9e:4a:d9:bb:
66:31:9f:bf:cc:19:93:d9:9d:6f:92:18:e8:01:f6:
cb:f5:03:6d:69:15:14:2b:12:79:d7:9b:78:b8:78:
79:43:f8:a6:cf:3d:94:3f:9b:06:c7:e4:85:d9:8c:
b5:d2:34:46:2d:b3:19:f3:52:ca:9c:5e:9a:d0:b0:
b2:c6:22:02:e4:5c:4f:91:fe:73:62:61:a0:82:69:
4a:9a:fe:78:90:f7:52:53:ab:d0:47:1b:5f:e5:c9:
ef:04:b0:f2:bc:15:92:03:a5:37:a9:f0:d1:ad:43:
4e:e5:6e:ef:c0:3c:45:b1:f8:df:fe:e7:f1:7f:22:
b3:6c:75:b0:01:d0:1b:04:80:1e:b8:87:dc:bd:38:
09:a6:1e:8b:b4:85:7a:08:5d:d3:40:d5:ff:1d:26:
48:1b:67:1b:d3:56:5a:0b:fb:c7:e6:c3:00:71:92:
85:21:6f:ec:05:92:bc:ab:f4:cc:c3:78:6b:85:44:
95:f1:a6:d7:ad:30:b9:38:8c:fc:f3:f4:83:d1:c0:
bf:c6:15:e4:9a:a0:3c:b1:d5:ab:85:07:e3:9d:eb:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:C9:27:21:20:ED:EC:01:64:C2:51:11:20:55:A2:EA:D9:AE:33
X509v3 Authority Key Identifier:
keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:15:fe:f4:7a:e6:66:47:f4:eb:f1:9f:3a:2c:57:7f:4c:3f:
b3:8e:22:89:92:31:b3:c8:3b:07:ff:32:e3:36:6a:79:77:20:
ce:14:2b:62:25:12:0c:26:55:92:7d:d0:70:f3:fc:ea:1e:79:
73:22:57:5f:51:b6:42:1c:c6:6c:c0:76:8c:32:0d:22:09:25:
81:6f:67:e3:86:ee:25:81:da:5f:9c:d7:4e:76:ef:69:dc:41:
0b:67:d3:58:7b:25:72:28:39:2c:d9:1a:e1:3f:a7:0d:1d:66:
a9:60:e4:70:4f:a4:6c:45:f4:23:1c:8c:4a:e3:c8:06:95:ac:
82:77:6a:d8:11:bb:48:1e:cf:25:2a:8d:b0:44:95:35:5f:c7:
09:80:26:73:f6:e2:34:83:e9:c0:34:64:b6:5b:a2:b4:81:13:
9c:94:8b:88:23:37:04:e3:18:84:dd:95:1d:3e:98:fc:e1:ab:
f7:31:c2:aa:b2:dc:31:0f:49:fb:4e:4d:db:3c:f6:7a:aa:41:
12:4e:77:dd:53:73:ee:f1:b0:93:5a:8d:a4:ea:47:04:7c:98:
63:b5:a8:d3:de:12:b6:79:b2:0c:b5:65:04:28:8a:23:3e:50:
8c:d9:57:de:51:95:a4:f6:58:59:48:ef:08:53:f0:b6:b6:04:
88:04:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:55 2026 by rpki-client