
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json)
Hash identifier: qb0XGRjR2l07wKLmvxQEzOTmYJE7gS+16KfG6C+ahkg=
Subject key identifier: 37:14:B3:0E:88:94:26:03:4C:22:58:8A:CA:E4:C9:E8:81:C0:05:94
Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Certificate serial: 0E61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
Manifest number: 0E56
Signing time: Mon 02 Mar 2026 03:08:46 +0000
Manifest this update: Mon 02 Mar 2026 03:08:45 +0000
Manifest next update: Mon 09 Mar 2026 03:08:45 +0000
Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: qoBfCyu7o852ul4BMwfTDApoetE9vCyW42s65c+fpV4=)
2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: zMc87DnSy73TYxx1wBAiz0nMEO5+508OWj9MKWr4ZGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F783D, serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Validity
Not Before: Mar 2 03:08:45 2026 GMT
Not After : Mar 9 03:08:45 2026 GMT
Subject: CN=69a4ff3e-8c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:85:30:eb:8a:dd:34:5d:11:f8:f6:bb:83:
e1:3b:4f:28:85:f1:7c:7e:05:40:3e:11:4a:8b:a2:
b1:ae:c0:a7:3f:f3:e2:23:fb:93:4c:7e:ae:e5:fe:
6a:e7:89:f2:b0:1d:f1:50:61:ed:c7:31:57:c1:73:
db:1c:4e:60:0f:71:c1:dd:f2:6b:35:7a:63:2e:70:
07:dd:5b:35:ce:7a:fd:cd:bf:c5:8c:70:ae:4b:a8:
5d:8b:8c:17:c3:b1:e4:26:f2:14:57:6d:85:9f:6f:
b4:7b:30:b8:dd:e4:ca:ba:bf:6d:49:f3:d9:c8:d2:
3f:aa:79:d1:97:86:68:40:1a:d3:18:3d:fa:19:ae:
30:99:48:c5:dd:0a:54:08:e9:25:fc:eb:dc:57:11:
43:c6:ad:ef:80:ed:78:ea:e5:87:d1:fe:aa:c4:be:
23:5d:f7:d8:84:5e:da:fe:76:ef:7f:c1:8c:52:db:
01:40:33:1b:8f:df:4e:96:6b:23:08:40:dc:da:08:
9e:4e:44:18:58:b4:8a:93:3c:3e:ed:25:61:95:4a:
30:52:9c:1b:c0:e4:15:ec:aa:0c:cf:73:89:50:79:
2c:1f:30:4b:cd:dc:ce:75:45:4b:e9:3c:32:c9:a7:
35:a8:14:98:89:5d:71:13:14:06:1f:b8:e5:7c:1c:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:B3:0E:88:94:26:03:4C:22:58:8A:CA:E4:C9:E8:81:C0:05:94
X509v3 Authority Key Identifier:
keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:13:27:94:c2:ce:7d:58:da:6b:21:0e:35:dc:a6:bb:c8:70:
62:95:14:e2:c8:c5:21:18:58:d4:e6:79:73:f8:c9:6e:44:c5:
6a:43:df:27:8e:c0:8c:77:48:dc:42:e8:ab:a3:2c:32:98:97:
77:ca:c2:4d:83:71:40:9c:3d:8a:10:dd:cd:3a:97:8f:c6:c1:
05:de:57:29:58:33:08:23:db:dd:78:60:9f:ff:f0:29:b5:99:
ed:c0:d9:6b:17:e7:eb:02:70:7c:b6:88:bc:23:df:74:42:07:
62:9b:3b:4f:56:73:b9:50:be:41:28:18:32:03:53:da:75:79:
e9:75:d0:87:4a:62:71:97:ba:fb:7f:aa:8a:1e:f0:40:17:bb:
16:c2:bb:1b:1e:ce:42:c6:14:7f:b7:f2:1a:e4:37:a8:b3:90:
e3:a0:64:d6:8a:53:87:c8:06:fa:32:5d:ff:3d:77:9f:12:0a:
7e:44:6c:7e:d3:a4:04:07:92:f7:63:b3:0b:1c:99:3f:c2:a8:
c8:08:e6:5d:21:b0:6e:2f:61:8b:4d:de:0a:8d:dc:db:84:98:
fa:f5:57:95:a0:e0:86:79:33:33:c7:9c:b3:d9:10:c5:c2:a8:
b1:05:9e:02:a0:cd:34:9d:13:70:55:e0:b1:0b:72:a1:fd:f1:
b4:34:b2:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw
QjBBQjlCRUUwHhcNMjYwMzAyMDMwODQ1WhcNMjYwMzA5MDMwODQ1WjAYMRYwFAYD
VQQDEw02OWE0ZmYzZS04YzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt92FMOuK3TRdEfj2u4PhO08ohfF8fgVAPhFKi6KxrsCnP/PiI/uTTH6u5f5q
54nysB3xUGHtxzFXwXPbHE5gD3HB3fJrNXpjLnAH3Vs1znr9zb/FjHCuS6hdi4wX
w7HkJvIUV22Fn2+0ezC43eTKur9tSfPZyNI/qnnRl4ZoQBrTGD36Ga4wmUjF3QpU
COkl/OvcVxFDxq3vgO146uWH0f6qxL4jXffYhF7a/nbvf8GMUtsBQDMbj99Olmsj
CEDc2gieTkQYWLSKkzw+7SVhlUowUpwbwOQV7KoMz3OJUHksHzBLzdzOdUVL6Twy
yac1qBSYiV1xExQGH7jlfBzF2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcUsw6I
lCYDTCJYisrkyeiBwAWUMB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5
QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV
OXZLdE1uc09hN3dMQ3JtLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAphMnlMLOfVjaayEONdymu8hwYpUU4sjFIRhY1OZ5c/jJbkTFakPfJ47AjHdI
3ELoq6MsMpiXd8rCTYNxQJw9ihDdzTqXj8bBBd5XKVgzCCPb3Xhgn//wKbWZ7cDZ
axfn6wJwfLaIvCPfdEIHYps7T1ZzuVC+QSgYMgNT2nV56XXQh0picZe6+3+qih7w
QBe7FsK7Gx7OQsYUf7fyGuQ3qLOQ46Bk1opTh8gG+jJd/z13nxIKfkRsftOkBAeS
92OzCxyZP8KoyAjmXSGwbi9hi03eCo3c24SY+vVXlaDghnkzM8ecs9kQxcKosQWe
AqDNNJ0TcFXgsQtyof3xtDSyGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:08 2026 by rpki-client