
$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier: uaazXhBxhvplDJADpQpQiU5dEGXLX15nNech2+4c650=
Subject key identifier: D6:48:81:1E:60:BB:F4:84:9F:BB:E6:61:28:6F:55:A8:A8:71:96:B5
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number: 016E
Signing time: Tue 03 Mar 2026 04:28:55 +0000
Manifest this update: Tue 03 Mar 2026 04:28:55 +0000
Manifest next update: Tue 10 Mar 2026 04:28:55 +0000
Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: BX6EKoY5Nf3bTno2IFbbxEz5WYXiuVS3HCSYc47kAtw=)
2: 47142068221311EFB680F113C4F9AE02.roa (hash: q1TM5Ebdt5SP+k07ZaaYP0AaM0RnbZZmHVQA7uMpDO0=)
3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: wtU3FReeveSRaGECvJZwcjQF5xOlaITNyX17soC/vMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Validity
Not Before: Mar 3 04:28:55 2026 GMT
Not After : Mar 10 04:28:55 2026 GMT
Subject: CN=69a66387-dad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:ba:70:87:31:56:b8:48:b1:c4:5c:16:6e:
d0:94:0e:56:28:49:14:25:ec:3c:dc:77:f7:94:69:
d4:bd:fd:ac:72:f7:2b:8e:af:ed:10:fb:e3:d2:08:
17:b5:45:37:e5:ee:2e:29:b7:46:58:a6:7e:4f:ff:
03:ea:5e:8e:72:82:8d:79:a5:39:80:fd:6e:b2:ce:
2e:8d:2c:e5:ab:0f:3c:b9:4d:60:88:c4:d0:47:23:
e0:3f:cf:18:1d:42:e8:cb:5e:82:d9:bf:33:6e:d0:
b1:54:7b:c9:35:70:6d:45:f2:b8:cc:75:d4:e8:b6:
23:a1:a3:9c:ef:84:f0:8c:4f:2c:ac:9b:37:61:33:
36:cc:c3:ca:c7:c6:cd:c3:68:f4:e1:a0:c1:9a:54:
38:c1:ea:d8:71:4c:0c:97:cf:50:ce:71:da:a4:51:
40:06:06:2d:23:70:1c:94:b7:90:1c:05:4d:4e:3c:
24:55:d2:61:de:1d:dc:46:b5:6a:91:0d:33:c3:03:
32:16:39:dc:ca:9c:33:c5:f9:90:8e:49:2e:10:76:
c0:4f:b6:a4:5a:05:dc:90:e3:79:63:07:36:05:61:
11:fc:72:bf:7d:50:fe:86:b1:26:f6:04:94:19:e9:
a3:00:c8:7b:a1:f5:18:6e:4a:7a:8f:24:94:48:16:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:81:1E:60:BB:F4:84:9F:BB:E6:61:28:6F:55:A8:A8:71:96:B5
X509v3 Authority Key Identifier:
keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3d:61:a2:af:e6:73:54:91:62:c1:e2:47:33:f3:89:6e:14:
46:c7:98:1f:9e:c4:21:d6:03:47:fb:30:71:65:b6:08:58:1e:
6d:5f:ab:88:27:3e:27:92:4f:28:39:2d:0d:11:dc:39:0f:39:
46:33:fa:65:ea:54:14:06:86:0c:43:64:f8:a3:f6:54:bd:4d:
90:30:fd:19:84:5f:49:b0:0d:e5:77:ae:5d:82:1a:ec:11:5c:
44:bd:06:f1:be:3b:c1:9d:a4:9d:5e:46:fc:cc:d5:bc:7e:7a:
43:dc:b3:46:12:9e:fa:b0:3c:61:46:8d:1e:1e:89:80:12:76:
9d:83:eb:65:46:04:c5:68:e9:e1:9e:b5:c4:30:dc:a3:8e:82:
f8:89:a8:9a:5f:ad:08:61:7e:1f:4f:db:71:7a:23:3b:0f:a6:
c3:98:db:36:5c:e0:ab:df:a8:a7:ff:28:8c:3c:a3:9b:a5:80:
ae:a3:40:a2:e4:5c:f8:22:25:5f:03:99:08:87:e2:6f:b8:ac:
ab:3e:40:1b:d5:d8:46:f4:69:8d:b5:04:3a:a8:66:4d:8d:5c:
de:82:a0:67:1e:b8:d7:c4:30:07:73:13:67:88:9b:b0:f1:e9:
e6:07:73:d0:35:0d:9f:6f:44:0e:b2:5c:31:f6:e4:26:8a:f4:
e3:52:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:06 2026 by rpki-client