
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier: Wu+C68lpq8nRJED7/1yUgqDmhnHowmIN6vXFBSrfSMc=
Subject key identifier: E7:D8:87:16:98:41:BF:70:97:3E:7D:15:BD:59:FC:73:0B:7E:76:BC
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number: 95
Signing time: Tue 03 Mar 2026 07:12:57 +0000
Manifest this update: Tue 03 Mar 2026 07:12:57 +0000
Manifest next update: Tue 10 Mar 2026 07:12:57 +0000
Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: I06psP2GJSmK0Tp6WL2ZmNzamvwNDO9cYC1vu8l6bow=)
2: B87594FC08B311F1954B37591C3D8C67.roa (hash: wztUnu/AtmwGJSEKvUQ+sSvPTP/4Cs6eUYir69FLSaI=)
3: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: kYrLbQFT1ZzGHGGu97W4fdlheMT2k3tj7Vb3H/0HdO4=)
4: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: cG6u0zgjdvCrRZeQ4usyXAcEzT17uS3cbK/qREEeINU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: Mar 3 07:12:57 2026 GMT
Not After : Mar 10 07:12:57 2026 GMT
Subject: CN=69a689f9-4696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:4e:19:c4:37:39:fe:17:ed:e7:f4:47:0d:
51:0d:6b:b0:25:0f:33:4a:79:55:27:10:50:16:59:
b1:0b:04:5c:ef:83:86:cb:2d:d9:e0:17:6f:a7:db:
57:24:e6:e8:56:3a:a7:b7:ea:d0:82:23:21:29:c8:
04:a3:b9:d3:3a:68:57:b9:40:c8:91:2e:10:57:ef:
5f:7f:de:e0:21:71:97:89:b0:cb:4d:1d:a8:74:b6:
57:3b:65:4c:2d:5b:17:f6:98:38:66:76:ad:e7:a5:
ea:d7:62:f4:f0:f3:00:b3:82:19:cc:ae:c0:79:c7:
0e:50:f4:af:27:f4:36:95:36:fc:c7:90:d4:da:ad:
11:2c:b7:2a:af:a1:af:16:7d:6f:eb:50:8f:b0:21:
74:28:ed:45:bb:56:5c:a0:1d:6f:50:c0:ef:2f:c8:
5e:79:c0:55:de:3a:2c:f6:99:6c:97:7a:ca:fe:77:
ca:7e:e4:4f:97:43:89:b8:17:cf:2b:ef:6c:f2:3e:
57:93:df:9d:52:9d:13:17:eb:91:c9:e8:0f:f1:b4:
0a:bd:30:c1:e0:4e:4d:5c:8c:f5:98:1a:d4:7d:5d:
12:ec:ae:0c:30:1f:bd:73:c2:ea:2b:06:4c:1a:63:
29:44:e3:7e:fd:fb:58:e9:6c:cc:ea:b2:3e:4a:22:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:87:16:98:41:BF:70:97:3E:7D:15:BD:59:FC:73:0B:7E:76:BC
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:89:f6:47:21:f5:11:79:ab:25:00:da:35:e2:ed:94:17:a9:
c0:82:95:b4:61:c4:ad:10:da:d6:77:65:96:b5:37:99:d0:1b:
d8:1d:97:ad:e1:c9:e3:9f:aa:b3:d9:ff:c2:84:ac:14:35:e7:
d6:55:3c:de:96:67:dc:5f:9d:fe:fd:28:93:14:dc:72:39:1d:
bb:ae:7a:69:a2:9d:56:93:70:34:92:f4:cc:55:91:b5:94:83:
d5:b1:50:04:d9:40:41:8e:9d:e8:22:4d:70:b8:49:75:12:02:
1e:b8:71:e4:18:f5:dd:da:5e:40:56:f0:1a:60:2f:b3:79:5d:
ee:10:63:46:43:12:6f:c4:31:41:5b:4a:90:37:95:b7:36:3c:
9b:15:49:f8:cc:60:f8:ac:b6:46:d4:77:1e:2d:48:2a:39:b4:
f3:de:2b:df:9c:38:66:f3:4e:0a:03:8d:82:3f:0a:d3:3f:76:
f8:06:94:f9:91:5a:3a:5b:eb:22:ce:21:5b:c6:9c:52:68:75:
82:79:cc:c1:4f:54:19:a4:6c:02:a3:37:2f:4d:4e:19:84:a4:
9d:04:b5:43:49:e1:17:65:8f:3c:fe:45:4b:0b:2d:e7:d9:de:
6e:3c:38:35:9a:fb:cf:e1:68:10:90:d3:35:d6:f3:a3:69:19:
59:0b:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:35:32 2026 by rpki-client