
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier: NrZLe7JcVozG6Le+Xk8zPXMwh+p6DBv5BDqzFuX5jtY=
Subject key identifier: A6:16:98:40:73:B2:01:13:53:1D:B3:55:B5:CE:AE:58:3F:92:47:D8
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number: 01BE
Signing time: Sun 01 Mar 2026 04:39:47 +0000
Manifest this update: Sun 01 Mar 2026 04:39:47 +0000
Manifest next update: Sun 08 Mar 2026 04:39:47 +0000
Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: zYYQqKS0HWeJFRyv88P9+K0JrrhSAjpRmknQ1UbuWRA=)
2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: YyDBfzVVG7Y4R4RVtmCOmRwrmmvCpbOUWV0JKeds9m8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Validity
Not Before: Mar 1 04:39:47 2026 GMT
Not After : Mar 8 04:39:47 2026 GMT
Subject: CN=69a3c313-68b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:df:a9:b0:f1:3c:4c:c6:6c:15:97:42:ed:
05:19:ba:07:d4:46:59:c1:52:f2:d9:95:f2:7c:16:
83:d7:73:6c:07:9f:af:78:90:ab:63:c2:22:f7:3a:
2e:36:20:55:f7:97:0d:6a:d7:f0:3a:76:5e:1d:a5:
e0:2f:8c:fb:e8:7c:42:75:c4:8c:8c:f5:97:47:b5:
3d:56:53:d8:4f:6c:55:7b:c1:da:af:3b:11:2c:99:
46:37:5d:c6:52:99:b6:16:05:dd:7c:d0:1d:4f:84:
b9:1f:60:ba:38:11:16:ea:2c:f5:6f:54:2c:ed:fb:
e9:89:1b:37:7f:db:8e:76:ac:4b:9f:95:52:0f:5a:
2d:7c:e7:06:ac:72:8f:fd:5d:ef:97:86:6e:a2:80:
91:86:b1:42:5f:33:9d:ab:50:ee:91:ce:4d:fe:e4:
14:67:11:e2:f9:28:55:3f:50:32:2b:de:aa:69:59:
89:64:6a:99:8c:62:b5:6c:83:f3:bf:55:e2:b3:27:
7c:af:d3:9e:90:eb:98:ae:15:ca:c4:45:74:75:9e:
de:26:0b:f6:a2:84:c4:2e:1a:fa:00:50:84:97:48:
b9:98:d1:56:6c:c8:fc:81:62:9e:a9:04:9a:88:45:
26:7c:74:3b:24:56:3f:d7:a7:2e:5b:8a:05:0b:dd:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:98:40:73:B2:01:13:53:1D:B3:55:B5:CE:AE:58:3F:92:47:D8
X509v3 Authority Key Identifier:
keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:b1:31:ff:d9:32:cc:bd:92:70:a2:57:24:86:ec:10:b6:
ff:65:fc:9a:85:53:d7:16:3f:ed:bf:48:83:6b:0b:e9:34:59:
c7:e5:20:26:6b:32:1a:60:bf:4a:f9:b1:99:3c:8b:95:e1:c6:
23:69:0a:54:4f:08:78:96:85:ad:5a:04:9d:68:e4:e9:c7:2a:
78:60:9b:ea:59:91:75:bc:4a:45:46:20:6f:bb:71:b3:3f:17:
07:00:8a:c4:13:a8:b5:5d:28:24:46:96:c1:e2:bd:e6:cc:6e:
e7:eb:5d:f0:72:e9:34:35:36:a4:e3:2d:bb:dc:b6:e9:1c:28:
4d:de:02:11:7d:6b:20:86:17:2b:81:ec:c5:26:d1:df:10:2a:
d6:9a:a2:6e:07:05:2f:10:87:50:f3:e9:5c:7e:95:d9:b4:32:
ee:81:e1:6f:d8:00:39:87:c8:92:74:ec:8f:fe:7a:04:aa:d0:
56:a1:5a:0c:65:4d:d5:52:0a:b7:9f:ed:d9:e2:61:5b:bf:d3:
a7:63:c9:bb:15:99:dc:cd:6d:35:af:1c:68:fc:a9:1c:fb:b7:
30:30:d5:74:7c:56:57:b9:16:ee:ea:3c:59:fd:3a:3e:60:89:
2a:19:08:8c:40:92:c7:f6:31:25:4d:ff:a6:0f:dd:c0:1f:14:
a0:66:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:34 2026 by rpki-client