
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File: q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier: CZrjYLlanEg52vBU3LN+yDokCDDof8wapPLd+yIZb2A=
Subject key identifier: AA:63:63:CC:0F:73:D8:98:13:34:FB:AA:8B:2B:F7:41:99:CC:29:B9
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial: 0978
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number: 0963
Signing time: Mon 02 Mar 2026 01:13:41 +0000
Manifest this update: Mon 02 Mar 2026 01:13:39 +0000
Manifest next update: Mon 09 Mar 2026 01:13:39 +0000
Files and hashes: 1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: 5uPx6o/wDIm9wrcE5TfU2DT/zNhy/jTsQa79uWzeuxM=)
2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: zZu8aFP4Al6GJRPpJKXmBtYypvXABswMl/UMkW8uCT8=)
3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: elXGzOAXv/vOs6kbXOd59T9g8u/dR7mHNS46gVlolLM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2424 (0x978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Validity
Not Before: Mar 2 01:13:39 2026 GMT
Not After : Mar 9 01:13:39 2026 GMT
Subject: CN=69a4e444-9463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:22:4f:f5:fe:5f:20:50:7a:4c:6e:50:89:
e4:ff:a8:07:5e:44:3a:2c:fa:b7:5b:7e:4b:91:6a:
20:73:55:0f:bc:a7:9d:df:c4:b6:ab:7b:62:dd:49:
e0:3c:c0:9d:9d:60:bc:a4:3a:e8:88:45:b8:6c:6d:
11:ad:d3:ab:54:78:76:39:ae:a3:e7:56:14:46:99:
5f:d8:be:32:4a:8b:ec:6d:cb:38:94:9b:5f:92:6b:
e2:fb:43:a8:6c:ab:7d:ee:2b:9e:77:77:50:b9:19:
9d:42:85:a0:70:0c:98:67:8a:7d:71:cb:9b:ac:48:
d3:28:c9:61:43:47:95:4d:a5:08:d3:7c:ea:d4:e1:
6a:77:62:a3:57:23:51:e5:0a:47:4a:0a:8c:35:9e:
3f:c8:3b:de:3c:92:6b:40:36:76:87:cb:18:14:12:
a2:6d:75:7e:d9:d4:a9:7e:45:16:fb:b2:d4:9c:e5:
83:6c:7a:4b:e2:fa:5f:84:94:d2:fb:e0:7b:be:48:
7a:bb:29:d1:aa:ac:1a:17:ef:14:24:a1:0f:a7:50:
74:d9:3a:9d:d5:74:ce:6c:ea:bc:25:37:d3:32:9e:
0b:f8:f3:cb:d3:56:83:8a:1c:b3:86:7f:99:b0:da:
0e:16:a7:72:dd:14:70:cb:42:50:4d:87:8a:5a:d3:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:63:63:CC:0F:73:D8:98:13:34:FB:AA:8B:2B:F7:41:99:CC:29:B9
X509v3 Authority Key Identifier:
keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:4a:c2:9d:10:1a:e7:da:88:2d:64:e0:6c:e8:9f:2c:09:
44:32:21:1a:0a:21:de:43:cd:ec:15:ef:b0:f9:6d:8d:2c:ec:
52:e6:2d:f4:82:7d:10:cd:9e:ae:4b:06:f6:02:7c:da:9d:82:
e1:a4:e5:59:44:06:bd:52:e0:2e:c1:de:e4:3c:1c:c5:e0:1d:
cd:7d:ab:fe:bc:69:a2:b0:b6:c4:c5:bc:be:6a:c2:e7:d2:c0:
b8:cf:3e:33:d0:d0:a1:63:56:aa:8d:6e:56:8d:57:c8:b1:9e:
6e:bb:f2:21:55:1f:98:f5:ac:54:7c:91:19:a1:8b:d6:76:3f:
59:95:20:17:b0:4b:d5:1c:f7:d1:7b:8f:80:03:11:4a:40:2c:
5b:f1:e1:bf:6b:95:36:ec:90:b5:47:eb:4f:99:12:a4:fa:11:
b9:c3:80:5a:fa:0c:57:6a:f4:40:87:aa:2f:cb:63:93:8d:2c:
e2:3c:e5:4a:ba:26:b4:87:22:a3:b2:94:3b:43:41:c2:ce:68:
f1:9d:9c:c7:d2:d9:50:fb:3b:31:41:69:2a:9e:6d:60:18:38:
db:48:7b:bc:1f:6c:66:25:77:0b:aa:f2:f4:32:d5:03:f2:cc:
74:9b:1e:5c:a6:04:98:8a:61:e1:32:aa:fd:28:07:74:09:fc:
86:ff:29:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx
OUFGQThGRDUwHhcNMjYwMzAyMDExMzM5WhcNMjYwMzA5MDExMzM5WjAYMRYwFAYD
VQQDEw02OWE0ZTQ0NC05NDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4MiT/X+XyBQekxuUInk/6gHXkQ6LPq3W35LkWogc1UPvKed38S2q3ti3Ung
PMCdnWC8pDroiEW4bG0RrdOrVHh2Oa6j51YURplf2L4ySovsbcs4lJtfkmvi+0Oo
bKt97iued3dQuRmdQoWgcAyYZ4p9ccubrEjTKMlhQ0eVTaUI03zq1OFqd2KjVyNR
5QpHSgqMNZ4/yDvePJJrQDZ2h8sYFBKibXV+2dSpfkUW+7LUnOWDbHpL4vpfhJTS
++B7vkh6uynRqqwaF+8UJKEPp1B02Tqd1XTObOq8JTfTMp4L+PPL01aDihyzhn+Z
sNoOFqdy3RRwy0JQTYeKWtMwoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpjY8wP
c9iYEzT7qosr90GZzCm5MB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix
QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjdGNS9CRDEwQjREQ0IxQzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhw
V1NrWGFhQm5BM01acjZqOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh8pKwp0QGufaiC1k4GzonywJRDIhGgoh3kPN7BXvsPltjSzsUuYt9IJ9EM2e
rksG9gJ82p2C4aTlWUQGvVLgLsHe5DwcxeAdzX2r/rxporC2xMW8vmrC59LAuM8+
M9DQoWNWqo1uVo1XyLGebrvyIVUfmPWsVHyRGaGL1nY/WZUgF7BL1Rz30XuPgAMR
SkAsW/Hhv2uVNuyQtUfrT5kSpPoRucOAWvoMV2r0QIeqL8tjk40s4jzlSromtIci
o7KUO0NBws5o8Z2cx9LZUPs7MUFpKp5tYBg420h7vB9sZiV3C6ry9DLVA/LMdJse
XKYEmIph4TKq/SgHdAn8hv8p6w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:11 2026 by rpki-client