
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier: WDFwb0w//P22QVM3X1B8NO0perjInVGeeW11eELdV5A=
Subject key identifier: C5:8B:5F:77:77:C0:6C:F3:6F:8D:87:1E:C1:FC:41:5F:42:4F:98:59
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number: 0154
Signing time: Sun 29 Mar 2026 04:47:28 +0000
Manifest this update: Sun 29 Mar 2026 04:47:28 +0000
Manifest next update: Sun 05 Apr 2026 04:47:28 +0000
Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: tHxYW8u4V1csrCxv5kBFh8wHPVXZKc3htwE7WZ0t0j4=)
2: C06D45B6961611F0870D4413C4F9AE02.roa (hash: hIpv58h7Px9PA6uLUl6YRPJ1ini2ySNj91INQdwC5XY=)
3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: FcyMfOj2hcMJUJHyK83l34d3Lj+tu/xZiBykgdbj9QM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 04:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Validity
Not Before: Mar 29 04:47:28 2026 GMT
Not After : Apr 5 04:47:28 2026 GMT
Subject: CN=69c8aee0-a958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:b1:4a:b1:c4:05:37:16:2c:8a:df:d8:59:
86:0f:3d:05:d8:eb:d2:c3:d2:de:78:39:bf:ab:a1:
61:83:41:bc:d7:2e:b7:f2:31:1d:cd:21:69:0e:b3:
92:f3:ac:d1:ec:4f:fb:52:64:a5:78:09:8f:2e:a9:
75:e6:d6:d1:81:01:1a:ee:83:fe:b7:35:64:ca:27:
15:d2:98:5f:a2:8a:9c:91:59:3f:c5:43:d4:d8:e6:
26:be:06:c9:83:c8:e8:d4:c2:9e:e9:29:4d:d0:82:
ef:27:41:33:b1:7d:0d:29:80:e5:ce:e1:86:76:f8:
5e:58:44:f0:c9:ed:22:23:d3:15:37:ad:fc:62:2d:
86:4c:54:10:d7:7a:8b:f4:50:6f:e9:10:11:36:04:
c5:9f:5c:c3:1c:76:e6:62:35:c1:b7:70:a9:14:4d:
46:e9:c6:7b:90:07:b4:79:07:ea:49:87:18:19:e5:
3e:7b:92:61:5f:c9:20:76:a8:28:e4:6d:22:57:48:
17:8d:be:55:6e:f1:41:10:26:72:69:01:1d:4d:8a:
13:82:c7:03:d5:f2:ae:e7:8c:dc:c4:09:aa:e1:6a:
be:01:a7:c4:dc:69:7e:bb:ce:68:3c:73:a0:69:15:
29:d2:fb:c9:2c:37:96:8a:05:3d:58:d1:82:ce:34:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:5F:77:77:C0:6C:F3:6F:8D:87:1E:C1:FC:41:5F:42:4F:98:59
X509v3 Authority Key Identifier:
keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:10:7e:8a:fa:80:9e:d4:a2:32:97:fc:96:ef:2a:c8:27:0f:
d1:e5:99:40:86:8b:8b:bc:92:c1:41:3d:55:07:12:aa:24:06:
40:be:3f:36:df:a2:f1:ed:1f:d6:4a:8b:af:30:17:f9:30:c3:
bc:99:28:15:b9:b2:c7:04:a0:84:74:dc:9a:c0:b1:15:b5:04:
33:2a:c6:b7:e1:a8:73:3e:8b:33:09:5a:f0:9c:51:a5:9d:86:
6b:a2:da:e2:7d:2b:40:ec:b9:01:bc:3a:66:0c:bf:21:aa:50:
60:c9:7b:71:cf:b7:a7:62:3a:e2:de:9a:82:2b:4e:dc:b2:4b:
af:e5:73:cb:bf:3c:29:10:57:52:dc:7f:23:c3:55:9f:40:21:
e0:25:69:6e:63:21:a6:ac:e6:42:e3:29:b8:92:7a:6d:55:7b:
a8:38:0b:c0:e4:e7:53:dd:93:70:e3:c1:57:2b:c7:d1:a8:95:
d8:95:18:27:30:71:de:40:04:5f:cb:ea:23:55:83:84:54:ba:
fe:d5:3d:c8:b4:83:9e:7d:3d:7d:e3:ba:06:43:59:fe:8f:2d:
aa:2f:6d:e5:93:ea:d2:3d:ac:33:60:03:bf:6c:51:e2:e9:06:
fa:b9:0b:53:f1:10:a0:2a:a6:88:58:f5:f4:1f:85:67:45:d9:
28:a4:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 22:55:55 2026 by rpki-client