
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json)
Hash identifier: 8WBjFQsdpjQSx3tTV7YCx2grewcwJfR2HVinkwe19nM=
Subject key identifier: A2:E4:E5:94:83:1F:69:8F:6A:5D:7A:6C:95:61:EC:11:06:FC:30:35
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
Manifest number: 02C5
Signing time: Sun 05 Apr 2026 01:09:49 +0000
Manifest this update: Sun 05 Apr 2026 01:09:49 +0000
Manifest next update: Sun 12 Apr 2026 01:09:49 +0000
Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: vn8Fko2KSt+uYDWoIov4yNyqAJ3zNjoRWMCNjomDzI4=)
2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: x/yz1V4NDuS6R8Q19YYrXkxZ59RztmqTLn+CKfG3QlQ=)
3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: BJ0AXwywDrh3L6h1jOokV2ePgsQC41EcTflOVzlWuFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Validity
Not Before: Apr 5 01:09:49 2026 GMT
Not After : Apr 12 01:09:49 2026 GMT
Subject: CN=69d1b65d-dc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:56:3e:2e:ed:73:e9:7f:2b:63:f1:39:f3:
9a:3b:95:74:6e:41:b1:59:8b:41:f0:87:e1:20:de:
07:a8:cd:da:41:65:f9:7f:a5:8e:f9:47:dd:2c:f0:
7c:81:86:c5:06:41:41:a6:d9:dc:29:79:28:d7:f3:
de:9a:48:f8:37:13:fe:f2:87:3d:b9:f6:a2:2a:95:
05:67:e2:9e:6a:71:4e:13:e2:ca:20:12:b1:f1:42:
67:93:29:12:94:21:7a:42:4f:44:ce:e0:21:91:d7:
29:d6:0f:f4:51:68:58:88:b2:ca:69:d5:0b:9a:2f:
4d:ce:d0:bc:01:e8:48:8a:28:ef:bb:d8:74:66:8d:
36:0c:8d:58:84:b7:4e:87:a6:9e:6f:3c:29:ae:69:
67:87:cc:12:71:60:4e:f0:87:e4:58:8a:3a:fc:9b:
9b:b8:68:0a:e5:ad:a7:b1:07:a4:86:57:76:43:ab:
0b:d1:4a:c2:e9:35:8d:25:cd:b9:15:55:2c:d4:1f:
05:e8:5d:29:1e:7c:07:ab:db:c6:08:82:24:7d:4e:
7e:d9:95:b1:97:5f:39:7e:64:41:62:f5:c8:94:f3:
47:b5:86:36:4b:e2:ec:63:5b:27:82:e8:b0:8e:e1:
c7:52:2d:bf:31:49:c2:10:f7:3c:9b:16:c9:77:08:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E4:E5:94:83:1F:69:8F:6A:5D:7A:6C:95:61:EC:11:06:FC:30:35
X509v3 Authority Key Identifier:
keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:4f:d7:5e:eb:83:8d:9d:3d:62:d8:41:4d:7c:99:73:a7:
cd:d9:a7:86:9b:1c:df:08:e8:98:75:fd:4b:eb:62:90:b6:a4:
06:60:47:20:bd:2d:83:f4:42:eb:95:20:97:82:5e:19:b2:f4:
bb:f7:79:54:a0:1a:c1:af:22:29:e4:fa:a2:80:f1:94:99:2f:
e9:14:bd:35:79:db:d7:3e:2a:b9:5f:d4:a0:0e:b4:ad:ed:6c:
97:4f:17:a8:46:0d:6b:e8:7a:0b:51:83:02:f5:73:ba:13:bd:
84:b4:89:7a:54:8d:d7:8e:f1:8e:fa:68:15:83:1c:2a:11:a1:
5b:7b:29:1b:e8:05:8e:2a:13:08:8a:02:a2:c7:94:2b:58:b8:
0b:4b:eb:b2:00:09:d2:80:9e:1c:c0:d5:f1:2b:31:91:2c:db:
10:0f:e8:27:53:8c:2e:f6:1d:81:1b:c6:c8:da:cf:dc:d7:ba:
e8:4b:dc:1c:d6:3c:f1:f3:6c:5c:1c:84:8b:b7:b2:a9:07:a2:
02:a6:ad:8c:33:26:16:f2:7d:af:09:3c:36:6c:75:e0:f4:ba:
39:32:3b:44:93:d2:d0:99:71:a6:38:fb:ca:34:9b:06:4c:6e:
df:cb:e8:23:6a:86:d7:12:d6:f2:cd:73:d4:53:b5:84:d5:92:
d7:60:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:33 2026 by rpki-client