
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: FmKphAk1XOKe5CvAEDlyYd377RuV3W6fUg70MEk0CsE=
Subject key identifier: 99:78:5D:32:16:B2:51:83:7A:DF:75:03:F4:46:7E:03:2F:72:06:B7
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: 0109
Signing time: Tue 03 Mar 2026 05:43:48 +0000
Manifest this update: Tue 03 Mar 2026 05:43:47 +0000
Manifest next update: Tue 10 Mar 2026 05:43:47 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: TBvfZyl4l3SKFsT3umhUYtGcFKB6b0vWEAKjoeUva4U=)
2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Mar 3 05:43:47 2026 GMT
Not After : Mar 10 05:43:47 2026 GMT
Subject: CN=69a67514-b303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:64:7f:9a:8b:ca:ae:96:74:0c:66:76:9b:
b6:4b:78:a1:05:1a:5e:e7:17:16:0d:3f:fd:57:fe:
2c:e5:a8:25:3a:ab:4d:cd:bd:20:81:e0:35:59:c9:
aa:d9:a0:72:f5:a3:8b:cc:c4:c4:9e:07:7d:34:5e:
13:14:6b:f4:0e:e0:5c:a8:47:fe:c1:52:93:9a:ed:
d6:9e:13:9b:6c:a2:17:ab:1b:86:10:5c:a2:9b:49:
6f:1b:6b:e4:dc:b3:db:6e:7f:1a:cd:7e:72:3f:f9:
54:36:c6:5a:fd:80:88:04:1d:77:07:da:55:62:ef:
10:1e:53:0a:b7:12:a0:50:58:05:7b:70:8c:03:0a:
61:ba:99:b0:f8:97:51:d8:e9:1f:55:f5:89:40:10:
68:5d:46:38:0c:25:2f:b8:fe:a6:1f:a3:d1:e1:b8:
29:d8:4d:bb:6a:53:97:1f:6e:3f:36:26:00:e1:fe:
11:a5:d0:bd:d3:f6:f3:5f:eb:74:94:68:23:08:b3:
19:b0:cd:4e:48:94:df:b8:ab:01:57:4b:5a:e6:c9:
c4:ed:6d:67:65:ce:33:83:80:99:22:b4:85:59:83:
0e:08:ac:25:8d:06:bb:04:46:be:ac:7e:89:d1:82:
d6:b1:b7:00:3a:73:3a:e6:38:4e:50:66:41:59:64:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:5D:32:16:B2:51:83:7A:DF:75:03:F4:46:7E:03:2F:72:06:B7
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:24:91:d0:a2:3d:89:1e:cf:6d:93:f1:89:95:f7:dc:8b:3c:
49:3d:13:91:d2:52:9a:a6:70:b3:a4:bd:bb:10:12:7b:5f:d7:
59:b6:14:01:01:cb:b4:d3:03:1d:fa:4d:a2:f0:71:34:6e:ca:
05:42:74:44:a3:3c:51:c6:f3:6b:7e:be:50:ac:ab:8e:be:dc:
c5:ca:31:1e:f6:b8:21:f6:d1:03:c0:a1:3b:84:79:e8:a6:44:
c4:05:52:56:a0:6e:3d:cd:10:c4:df:1e:b3:ee:e7:3c:9f:25:
a7:fb:b2:03:11:ac:23:8e:0a:f4:ee:ce:80:4a:f5:2b:b5:32:
36:f9:1a:82:d3:42:23:85:4f:57:6d:22:b2:ed:a0:28:f1:dc:
f6:8e:1c:c1:fe:35:83:a3:9c:e0:1f:d2:a0:8f:7c:cf:a9:0c:
07:08:2c:fc:aa:38:3a:93:94:2f:0b:1f:30:99:be:a8:65:cf:
cb:7e:5d:41:f7:5b:d6:1f:0c:d1:44:69:55:b4:48:84:c9:79:
c9:e0:79:56:67:9c:09:98:e3:f3:52:2d:51:ce:49:c6:01:0a:
05:f1:c8:02:62:cb:35:04:59:ae:3e:9e:8e:23:43:90:47:bd:
99:73:43:07:e4:54:12:fd:e2:f6:8e:86:59:3c:86:31:74:4b:
d2:14:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:51 2026 by rpki-client