
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json)
Hash identifier: oevufqG6jvgt9dTMejjnnB/QKucZX7yHf+rqTwszskM=
Subject key identifier: 4C:3D:74:D8:C9:FE:3F:5B:39:DD:A4:C8:59:D9:7C:23:6E:B0:2C:A0
Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Certificate serial: 04D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
Manifest number: 04CB
Signing time: Sun 01 Mar 2026 23:47:21 +0000
Manifest this update: Sun 01 Mar 2026 23:47:19 +0000
Manifest next update: Sun 08 Mar 2026 23:47:19 +0000
Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: liigNKsgZUubyBS3IJ28OeteRND9i7Kz8wW8+hPNypc=)
2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: 8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Validity
Not Before: Mar 1 23:47:19 2026 GMT
Not After : Mar 8 23:47:19 2026 GMT
Subject: CN=69a4d009-a174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:35:01:0d:b3:86:ae:22:97:8f:af:3b:ea:
6c:f9:65:79:fe:58:ee:8d:45:55:ea:9a:ab:6e:e4:
07:42:90:43:9b:2f:50:6c:2e:69:ed:ca:e5:dc:cb:
62:5c:8c:25:a5:87:f5:15:88:ed:1c:cc:88:6d:67:
90:a2:f3:99:32:30:23:3b:50:df:41:09:dd:bd:55:
ec:8a:d9:11:68:a0:67:0c:b4:7f:da:c0:be:12:ce:
e3:96:e8:fc:9a:1e:a6:c5:ec:7c:f7:3b:b4:6b:d7:
36:a8:35:44:c1:3e:5f:41:6e:80:28:9a:53:bf:e7:
a3:ae:38:b4:a0:ee:3e:ce:bf:18:bb:4c:45:cc:12:
86:c4:be:8c:95:b0:a2:48:8e:25:35:20:da:54:6b:
fd:4c:ce:cf:5a:47:4f:87:0c:3c:b8:4e:b5:2b:0e:
51:6d:6d:31:e6:4c:ef:4b:e4:07:96:aa:36:27:5f:
93:ee:b0:d2:78:ab:6d:72:56:7e:fc:e5:95:70:09:
b0:78:e2:38:04:87:ad:f3:84:bc:aa:37:30:bb:5c:
b1:31:a4:be:ac:ec:7e:8a:04:8f:04:55:08:11:8f:
0d:b3:85:01:b5:e7:28:09:68:94:fb:6b:3c:2a:24:
ba:84:ac:1f:0e:54:d7:71:39:3e:ed:a2:98:7a:81:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:74:D8:C9:FE:3F:5B:39:DD:A4:C8:59:D9:7C:23:6E:B0:2C:A0
X509v3 Authority Key Identifier:
keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:d8:d8:21:08:c4:24:4a:c3:bd:65:2f:23:84:f5:14:fd:
07:d5:24:7f:c1:c9:83:83:e6:c9:af:68:59:ce:e1:d8:3b:7c:
22:8c:ef:81:8f:76:1d:20:45:82:a8:a3:d6:77:b0:42:47:0f:
44:70:2d:36:1e:bc:31:66:2e:4f:25:2c:b7:54:9c:cb:94:1c:
c6:49:66:67:42:06:ce:fc:e4:78:7a:d1:b9:b1:2a:2e:6c:6c:
19:c3:94:30:ad:5b:a6:96:f6:2a:59:f7:41:b9:55:ac:82:32:
04:98:66:1d:a7:f1:d9:99:d4:40:1c:b5:ad:a0:29:f2:b2:23:
cc:a8:34:6e:28:5e:90:95:b8:70:cf:68:12:17:a8:34:c5:ee:
57:5b:64:95:a9:45:d7:8d:30:19:c7:65:9e:4f:0e:f6:8f:79:
6d:43:94:fa:bb:60:11:14:3b:d8:22:a8:52:68:f0:b3:29:3a:
be:1a:2f:f1:fd:f1:f7:64:49:a2:51:62:0f:be:c9:ff:09:65:
dd:1b:45:60:10:62:9d:1e:2b:35:e3:68:68:d1:1b:1c:7c:e4:
9e:98:c3:8b:db:2d:41:88:b0:e7:54:4e:78:85:c3:96:fc:0b:
8d:e8:6a:f4:f5:fd:c4:9d:98:61:c7:58:ff:96:81:46:30:44:
30:b9:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:53 2026 by rpki-client