
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier: XtFKb2hZarmp0CrdnBw2SCGo+QLAXRMP+6815/a5fRo=
Subject key identifier: 87:82:D5:3B:80:54:90:71:BF:04:79:02:58:B9:7D:98:E0:53:7B:49
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number: 01CE
Signing time: Sun 05 Apr 2026 03:10:32 +0000
Manifest this update: Sun 05 Apr 2026 03:10:32 +0000
Manifest next update: Sun 12 Apr 2026 03:10:32 +0000
Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: PF9sgE4uz09Dic6rrrCqPCuDpVuZWxCS1kb57cBufNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Validity
Not Before: Apr 5 03:10:32 2026 GMT
Not After : Apr 12 03:10:32 2026 GMT
Subject: CN=69d1d2a8-6996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:cf:39:8b:cb:55:48:a6:c1:f4:cb:3f:16:
c5:b5:bb:3d:23:58:17:8b:09:8c:1a:85:ba:29:ab:
07:23:cf:10:c9:b0:a3:b9:a2:2a:c4:52:9b:d6:d3:
12:fc:60:36:11:dc:97:52:36:2f:69:4e:41:0e:53:
68:02:3d:2c:b4:ac:70:ef:39:1d:df:53:20:78:e9:
ad:d4:49:45:be:7f:99:08:cf:cc:4b:57:6a:5b:bc:
5e:03:8e:6f:0c:ac:70:e2:47:1f:9e:e8:6c:de:d5:
32:ba:03:fa:23:f0:75:9a:e1:df:e3:f3:65:a4:7c:
d5:80:5d:41:c8:54:8b:1d:02:34:51:ec:de:44:99:
59:a5:70:21:68:c3:77:14:3e:8a:68:aa:b2:51:62:
8b:ea:33:ab:cb:c4:97:41:b0:ea:ae:8f:1e:0f:f3:
86:29:3e:35:92:39:1f:16:7d:6f:1d:c8:4c:76:3e:
dd:c8:1c:3f:97:a3:2d:cb:a4:cc:d1:f7:2d:c3:fc:
69:02:6a:dc:e1:7b:ca:b1:d8:80:69:60:5f:0b:a3:
3a:c8:4d:1f:95:25:19:ad:43:68:13:3e:17:df:b1:
07:ae:26:c0:f2:62:ac:f2:f5:fa:03:71:e0:08:a2:
df:5b:06:62:91:f6:ac:06:ab:55:d1:42:12:3d:9a:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:82:D5:3B:80:54:90:71:BF:04:79:02:58:B9:7D:98:E0:53:7B:49
X509v3 Authority Key Identifier:
keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:66:ac:24:01:6f:53:53:2d:e2:7c:18:e7:3c:4a:4c:89:f9:
f2:b3:54:2b:e3:c2:c4:da:bc:92:0f:37:ed:d9:f5:fc:f0:f2:
4a:58:7e:f0:b2:4f:7c:81:a2:d9:74:87:3e:00:f0:ba:a3:71:
16:29:1e:cf:bf:05:78:a2:15:a8:85:e1:e2:86:ec:00:5b:9c:
e3:d6:10:77:af:bf:73:85:95:21:d0:d7:97:00:ea:88:0c:dc:
4a:af:94:46:95:6b:73:4c:ec:41:58:cb:98:3d:2d:1e:77:ef:
a6:80:6d:a7:09:ae:fc:a7:c9:c8:03:2f:03:e8:4c:94:fb:f7:
86:19:de:76:97:f1:d3:8f:27:f9:50:53:1d:38:d2:ec:89:99:
1a:91:39:11:59:7d:fc:57:99:81:e7:60:42:26:f2:d1:67:1a:
36:cc:08:ba:6c:dc:dd:c4:9a:33:2f:47:b5:58:3c:04:77:53:
d0:30:5b:50:d5:cd:1e:3c:24:04:f3:ab:7b:ab:73:15:3e:5b:
80:24:8b:bf:19:63:7e:01:61:42:d2:ad:eb:df:c2:bd:e9:f3:
cd:c1:d2:2a:9e:85:a5:a4:b2:bb:97:6b:4a:93:18:d6:71:e0:
51:09:fa:48:ab:67:d3:de:4a:62:54:81:64:e4:5f:7c:49:26:
fe:05:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client