
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier: QNq6rdXWJ62aq+DtVIa9O5T8u9eHQRGoJ8y386F3k0A=
Subject key identifier: B0:2A:C5:7A:1A:A7:86:25:DF:DA:9E:4C:DD:27:B8:BD:DF:4D:B2:9E
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial: 0B10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number: 0AF5
Signing time: Sat 28 Feb 2026 19:38:44 +0000
Manifest this update: Sat 28 Feb 2026 19:38:44 +0000
Manifest next update: Sat 07 Mar 2026 19:38:44 +0000
Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: 1r0dIhHjtqrSQwO8moqraI591aif01RKo1BrWq9XKDU=)
2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Validity
Not Before: Feb 28 19:38:44 2026 GMT
Not After : Mar 7 19:38:44 2026 GMT
Subject: CN=69a34444-e689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:91:12:90:f8:5c:39:37:a4:82:bb:06:c6:
01:6d:e9:82:32:cc:a4:be:2d:9a:63:ca:4e:45:c9:
69:1e:85:34:9c:96:71:25:25:85:66:56:99:09:bf:
b0:71:40:a5:bc:db:4c:fb:2e:b1:ad:c7:d9:d7:cc:
ae:4b:a6:6b:e3:e8:4d:8c:9c:a6:f5:51:cd:ec:d4:
ad:00:6c:95:2e:cf:ba:98:a0:76:c1:fc:6e:ff:ab:
21:79:0e:f2:03:c8:da:03:4d:c8:49:43:f0:7c:5b:
af:e7:3a:04:7b:b3:d1:6f:d1:58:0c:4f:31:4d:ba:
95:f5:54:f8:ee:12:09:d4:e3:59:a2:04:75:0c:8f:
bd:55:b0:7b:43:a5:63:be:5b:f5:dc:73:a2:c2:e0:
cc:9e:c2:9a:98:d1:34:88:49:35:23:f6:c7:17:0d:
42:64:83:4f:6f:3e:08:f1:0b:97:59:78:59:23:db:
e0:40:ba:f1:2d:a3:da:c1:bd:3c:9a:b6:ca:a4:96:
df:6e:c6:26:df:5e:97:09:f1:6a:29:ef:51:f1:c1:
75:ee:73:2b:42:68:c4:88:1a:e0:f2:bb:86:a8:27:
a1:61:09:04:60:df:54:ab:14:1d:4a:70:14:94:c8:
29:d5:21:2b:93:d8:14:84:e0:52:d0:31:3e:19:ad:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:C5:7A:1A:A7:86:25:DF:DA:9E:4C:DD:27:B8:BD:DF:4D:B2:9E
X509v3 Authority Key Identifier:
keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:49:6a:e4:0d:b1:70:c9:b0:8b:c8:ab:8b:3e:5e:81:96:47:
c5:a9:41:f6:42:9d:2e:0d:35:c6:bd:a7:31:95:aa:c7:e4:79:
0c:d3:94:1a:59:e7:62:07:43:a1:66:55:04:b9:fd:68:54:19:
b5:b2:b8:21:9f:10:59:f7:60:9a:af:24:77:91:c9:99:b3:0c:
d4:8d:c7:76:61:8e:52:29:5e:44:83:97:e0:b2:de:c0:99:5d:
dd:bf:28:b7:9b:f5:82:8e:2e:3b:37:2d:7b:fc:d7:6a:a8:bc:
e0:66:9e:c1:9e:e5:d2:8e:c8:d4:d5:ee:99:d6:50:00:25:a3:
0f:d1:da:5f:ff:61:60:c8:a8:95:12:2c:af:d9:46:68:ec:c7:
cc:2b:19:e5:80:81:b2:5c:c3:19:d2:ce:12:17:d4:ba:3a:a8:
a1:90:ef:9a:10:fa:0f:5d:de:6b:4e:8a:b3:d5:0c:42:34:b8:
8a:53:bc:c8:6d:c6:a9:8d:0c:4b:45:ca:89:eb:1e:75:62:59:
1f:8f:9c:6c:a0:e9:b6:7e:8d:f5:e7:34:7d:6d:88:20:22:a6:
d6:7a:c1:4e:60:07:57:f1:8a:9f:d9:46:90:0d:14:fe:a2:9c:
80:14:17:bf:ee:3b:c6:28:9e:55:bf:51:d6:4d:7d:c6:9d:64:
05:0e:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:12 2026 by rpki-client