
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier: QVq7ZvwtRu+duuhcsTEceKrE/UYq5dnJFJtd33VjXiQ=
Subject key identifier: 3E:64:DC:F9:B1:0A:7E:46:8E:E8:39:17:B5:6A:43:90:D4:08:ED:F2
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial: 0C2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number: 0C24
Signing time: Sat 18 Apr 2026 15:09:29 +0000
Manifest this update: Sat 18 Apr 2026 15:09:29 +0000
Manifest next update: Sat 25 Apr 2026 15:09:29 +0000
Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: Il7exAXmp6lvFx63P4cBbjEY/Thbfa8wDfNF84GmOGc=)
2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /lTemBonHucyHdLH99iEZJS0pkpWT8EtwFhDtf78iXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Validity
Not Before: Apr 18 15:09:29 2026 GMT
Not After : Apr 25 15:09:29 2026 GMT
Subject: CN=69e39ea9-01a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:2f:5f:94:e5:80:ef:2d:ce:c8:2c:df:67:
48:69:36:3a:69:64:0f:f8:52:09:29:d4:cc:13:15:
84:87:51:f8:84:38:bf:3a:76:46:54:c3:1e:f7:0c:
d1:13:1c:83:87:99:2b:79:c6:59:dd:41:88:6e:4c:
7c:ee:77:15:e3:ba:1e:29:5d:a4:a6:e8:4a:e5:f8:
2c:e3:1e:6a:b1:f9:7e:0c:6b:75:32:b3:7b:b0:ef:
55:93:31:73:e0:4d:56:17:f9:74:36:0a:53:af:ba:
fb:68:db:7d:c7:c4:99:18:2b:93:ad:cf:63:6e:ac:
fd:07:a5:6b:17:14:82:8b:ab:84:00:88:20:62:69:
de:02:fa:72:5b:17:b1:ea:c4:98:2b:c7:7a:7b:6a:
7a:15:7c:9b:29:c3:a6:b0:0c:5b:ce:d9:ac:8f:63:
5b:9d:65:96:2f:84:16:22:7c:19:7c:4c:a6:52:5f:
b5:5f:82:b5:28:7e:24:96:5a:f0:c9:dd:ff:fa:3a:
b0:a0:33:a1:dc:3e:a0:b8:a0:63:cd:fb:78:c0:7e:
ec:61:82:18:39:d9:93:27:85:89:4a:c3:48:5d:2a:
e1:3d:4b:07:80:3c:9b:b9:23:be:23:8d:42:38:26:
d8:24:6e:65:6c:4f:be:64:6a:2f:6d:47:27:3b:e4:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:64:DC:F9:B1:0A:7E:46:8E:E8:39:17:B5:6A:43:90:D4:08:ED:F2
X509v3 Authority Key Identifier:
keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:df:34:f2:1a:ee:3d:81:cc:4b:4e:77:b3:c2:55:86:d5:09:
7d:27:8a:e3:f5:b8:8f:58:b5:05:58:25:00:b9:cf:9e:03:a5:
88:3e:a4:14:8e:79:b9:be:40:9c:9d:1b:03:2a:06:48:21:25:
a7:66:16:c6:63:69:92:b9:d5:a9:c8:27:a2:d5:75:1d:3f:c9:
05:87:c2:1c:99:ef:03:2f:bc:bb:f4:01:4e:3b:aa:de:a4:1b:
61:48:90:06:ce:0a:b4:bf:eb:ed:c3:50:82:c7:db:cb:20:0a:
c1:39:78:89:93:43:7a:0a:a4:50:4f:ab:57:67:29:a8:8c:e6:
79:21:cd:c6:19:4b:a6:88:68:e5:f4:f4:09:0b:f0:47:c5:fa:
a8:25:4b:67:2c:cc:49:fc:65:df:0b:e2:6f:c6:e0:9e:4d:3e:
48:1c:16:1f:eb:db:20:22:08:12:d8:2d:d0:c6:48:84:b0:10:
c5:60:4b:ae:f3:4c:72:4e:ea:3e:18:ac:9d:5f:f7:66:0d:b6:
79:14:16:7a:95:35:bb:c7:d9:9c:0f:38:1e:a5:2f:4d:b5:d7:
1f:c4:18:79:c7:4b:f8:21:5a:c8:e9:38:e4:60:df:02:a8:2c:
06:a8:18:1c:fe:64:fc:d1:a6:22:e6:1c:03:4b:88:89:76:96:
a0:68:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:33 2026 by rpki-client