
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier: 0Tp1QYjTxYgJP8DIxNJv5v2xel/GcqLXBLnH9KteSY0=
Subject key identifier: 5E:BF:45:10:2C:66:BE:72:6D:AF:C8:A9:96:33:69:FE:1F:86:DD:17
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial: 06A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number: 06A0
Signing time: Mon 02 Mar 2026 22:22:46 +0000
Manifest this update: Mon 02 Mar 2026 22:22:46 +0000
Manifest next update: Mon 09 Mar 2026 22:22:46 +0000
Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: dTEeQdVm0YZcWB6W1x5SByDpvklvzAgopuFJbbSP2pE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Validity
Not Before: Mar 2 22:22:46 2026 GMT
Not After : Mar 9 22:22:46 2026 GMT
Subject: CN=69a60db6-cfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:38:1d:72:e6:ff:5c:83:4b:51:47:43:f0:
bd:d8:2c:2b:25:b0:8c:39:de:87:bf:47:5f:42:0a:
32:2c:50:e9:a2:f5:e3:9a:6f:6d:c0:20:62:f6:d6:
d0:a0:2b:99:72:35:14:5d:9c:f5:74:bc:2b:70:e8:
c7:65:58:55:ab:7f:85:61:1c:0b:8e:2c:b6:ff:2d:
f0:fa:87:83:80:69:47:cc:06:93:39:76:7b:23:d6:
fe:3f:5b:8b:8f:31:e5:22:3c:a6:fb:32:f9:e5:58:
41:86:eb:08:2c:cf:24:15:c1:c9:79:6a:e8:ea:46:
17:95:81:da:a0:a1:c8:3f:45:a2:e2:a7:1a:b0:b4:
51:73:a1:ca:66:05:19:da:fd:c8:43:59:62:e0:f8:
61:67:8f:b6:77:0c:af:ac:7e:48:52:70:21:06:1c:
34:53:ed:ea:f0:ee:ee:93:11:90:03:6e:59:f1:c0:
6f:cb:93:a4:e1:ab:c3:7b:4b:b5:34:75:15:3d:c1:
f1:6d:e7:ec:e4:01:35:3c:11:1a:e0:ef:0d:fc:43:
67:75:09:4a:cc:6e:93:81:e0:24:16:19:f9:1b:18:
bc:f2:1f:c1:06:08:2e:8f:cf:5a:73:27:a1:c4:4b:
5e:a2:26:40:96:7f:2a:5b:80:3c:18:37:7c:a2:8f:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:45:10:2C:66:BE:72:6D:AF:C8:A9:96:33:69:FE:1F:86:DD:17
X509v3 Authority Key Identifier:
keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ee:cd:da:d3:18:be:45:b2:de:db:be:b8:8d:3b:99:9c:bf:
c6:4f:76:98:a4:09:66:7e:08:35:87:3a:0c:50:ba:f6:45:1e:
4f:53:ad:c0:90:5f:5c:97:5a:5b:86:55:f8:ba:76:d5:70:31:
81:94:b0:a7:d4:19:36:f2:d0:5d:62:31:6b:ca:36:b3:6e:ee:
60:b2:f4:c9:e8:a1:30:e7:da:41:43:8d:0c:07:17:57:06:64:
a7:95:8b:fa:01:ad:55:53:01:d6:94:cd:af:32:0e:17:7a:7e:
b3:05:51:44:d6:29:9f:6c:1f:38:db:06:f1:dd:f0:74:c6:12:
d0:dc:7a:5d:e7:80:db:be:5b:4d:a2:e5:d5:1b:dd:67:88:53:
4c:fa:8f:7f:12:88:11:f3:8b:ae:81:ed:6d:4d:c8:53:5f:f5:
36:3d:ec:3f:21:07:61:c2:ec:8d:0f:51:59:4f:c4:b8:a3:4e:
0c:b1:02:79:09:c9:9a:c6:6e:25:b8:37:6f:ab:d9:18:17:1c:
c7:7a:4e:c0:9f:d7:02:4f:11:cf:43:1e:3f:e6:25:51:57:38:
83:33:71:d8:d9:72:6f:8f:a6:bb:bd:b8:35:69:76:9b:3b:dc:
32:86:c7:24:a2:1c:d9:45:1b:2e:94:7f:55:75:ee:e3:0a:22:
0f:52:f8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:04 2026 by rpki-client