
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier: zkJnpIl1kSStZt80DJvQ9KoL8JUKib5qfVtGDFA0TmA=
Subject key identifier: 39:03:2D:35:10:6B:34:05:DB:0E:2E:74:1D:64:56:02:D8:D5:54:B4
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number: 01D5
Signing time: Sun 05 Apr 2026 03:32:34 +0000
Manifest this update: Sun 05 Apr 2026 03:32:33 +0000
Manifest next update: Sun 12 Apr 2026 03:32:33 +0000
Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: 9gmH2vBrLkhpIgjGN7nXI2FriiJPAbVr8lE9jgQOnac=)
2: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: p6zGTgqZJ7iiiCzsm415AfpPsLOlXyGxbt61Izp1Z6U=)
3: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 6JnWBHrw4ffDiGiVWAOckF4qnqqFhoHfVR3johcA4II=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Apr 5 03:32:33 2026 GMT
Not After : Apr 12 03:32:33 2026 GMT
Subject: CN=69d1d7d2-260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:44:ab:07:55:c0:35:eb:66:2e:55:04:1b:
18:05:3a:60:06:32:ac:b2:50:ce:c6:39:05:fe:bb:
3f:a4:fe:32:7c:d4:f0:7c:a5:44:99:4b:37:eb:1d:
44:dd:8a:62:71:78:e3:16:a0:76:e3:22:19:ca:5e:
b4:f7:2e:71:04:15:1f:40:a4:09:51:93:d0:c5:3e:
96:e2:88:2d:e0:5e:0f:f0:e9:98:a6:97:5b:41:99:
b5:0d:44:e2:bd:66:6c:14:98:aa:c8:3a:98:62:6b:
7b:52:3b:aa:d2:28:bd:89:7f:cb:09:ed:e6:c4:5a:
65:64:db:58:40:28:01:7b:8b:ef:3c:b5:14:4e:25:
06:e6:a4:98:17:6f:cc:8d:ca:c3:80:04:57:7e:c8:
46:71:6c:b0:6e:10:98:9c:09:de:82:11:d4:99:59:
bf:d7:6e:b8:24:e7:c6:31:a1:ee:fd:da:5b:b5:c0:
01:3a:bc:35:36:d4:34:39:bf:e7:de:37:fa:79:40:
45:d8:24:7a:b5:b7:f1:fe:d9:a0:b2:1c:19:2f:c1:
55:3d:b5:86:0f:c6:ab:20:c9:45:69:5f:9b:5e:6a:
8f:35:30:01:cf:c1:01:b8:cf:97:e1:bf:6f:d9:b7:
07:ba:3b:63:0c:2f:c2:13:58:94:04:d5:7e:27:75:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:03:2D:35:10:6B:34:05:DB:0E:2E:74:1D:64:56:02:D8:D5:54:B4
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8b:4f:ae:7a:cb:54:90:56:ab:97:87:51:72:41:c3:5f:46:
f3:42:0d:9b:e9:bf:0f:63:11:21:c2:e6:00:f1:38:42:94:9d:
ca:d7:b6:97:bd:22:1f:9a:ed:46:5f:1c:94:a5:29:cd:22:80:
63:34:97:e9:34:2f:e6:a6:a9:06:b2:ff:1a:de:13:78:f1:b3:
06:db:ed:5b:ea:e4:46:8f:1b:84:15:3a:95:23:06:84:38:3b:
2b:cc:83:01:29:44:6b:59:53:c9:8d:3c:d4:7f:0e:4b:6c:0a:
b8:d4:23:5b:16:0b:90:17:aa:53:35:db:ea:c9:b2:0a:82:d4:
a3:fd:72:55:64:61:37:27:05:13:a2:d4:b2:bb:25:da:8e:81:
af:f9:ca:d7:25:da:0f:95:c6:bf:d4:ef:b6:f2:2b:0b:81:e4:
41:ba:dd:0c:dc:00:1e:42:09:fa:12:35:8f:56:85:a7:96:0b:
1a:d7:4d:ad:64:0f:f8:bb:a8:eb:43:76:f1:9d:3e:e7:ef:a2:
5a:67:2f:5e:96:82:c5:0a:2b:7b:82:b7:16:ab:c1:51:78:b2:
9b:96:d9:0d:13:a9:b9:1c:3d:ae:4e:7d:8c:0a:0e:b1:e4:22:
5e:f2:65:33:01:6d:d1:88:a5:b4:a3:f6:2b:1a:93:ab:e4:5b:
4f:10:41:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0
RDQ2RkQwMjQwHhcNMjYwNDA1MDMzMjMzWhcNMjYwNDEyMDMzMjMzWjAYMRYwFAYD
VQQDEw02OWQxZDdkMi0yNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdxEqwdVwDXrZi5VBBsYBTpgBjKsslDOxjkF/rs/pP4yfNTwfKVEmUs36x1E
3YpicXjjFqB24yIZyl609y5xBBUfQKQJUZPQxT6W4ogt4F4P8OmYppdbQZm1DUTi
vWZsFJiqyDqYYmt7Ujuq0ii9iX/LCe3mxFplZNtYQCgBe4vvPLUUTiUG5qSYF2/M
jcrDgARXfshGcWywbhCYnAneghHUmVm/1264JOfGMaHu/dpbtcABOrw1NtQ0Ob/n
3jf6eUBF2CR6tbfx/tmgshwZL8FVPbWGD8arIMlFaV+bXmqPNTABz8EBuM+X4b9v
2bcHujtjDC/CE1iUBNV+J3WhkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkDLTUQ
azQF2w4udB1kVgLY1VS0MB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0
QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O
MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArYtPrnrLVJBWq5eHUXJBw19G80INm+m/D2MRIcLmAPE4QpSdyte2l70iH5rt
Rl8clKUpzSKAYzSX6TQv5qapBrL/Gt4TePGzBtvtW+rkRo8bhBU6lSMGhDg7K8yD
ASlEa1lTyY081H8OS2wKuNQjWxYLkBeqUzXb6smyCoLUo/1yVWRhNycFE6LUsrsl
2o6Br/nK1yXaD5XGv9TvtvIrC4HkQbrdDNwAHkIJ+hI1j1aFp5YLGtdNrWQP+Luo
60N28Z0+5++iWmcvXpaCxQore4K3FqvBUXiym5bZDROpuRw9rk59jAoOseQiXvJl
MwFt0YiltKP2KxqTq+RbTxBBEA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:11 2026 by rpki-client