
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier: 8/d9pDlP36+hrt743nD7sMpqXfpVP5AE7H9uJOYizaA=
Subject key identifier: 88:F8:C7:28:29:87:E7:50:EF:6C:E6:BA:E8:96:F3:EB:3D:AA:E5:EA
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial: 1E70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number: 1E64
Signing time: Sat 04 Apr 2026 15:59:49 +0000
Manifest this update: Sat 04 Apr 2026 15:59:48 +0000
Manifest next update: Sat 11 Apr 2026 15:59:48 +0000
Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: YIFy6x+0XkE4qajAidIOxPI1Y9/acVVz/2TX71mS0uc=)
2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: 9fJ1ri6IaNU9VtWg8Hqy+rRwD5x8nCDjNKKvvrEFZII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7792 (0x1e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Validity
Not Before: Apr 4 15:59:48 2026 GMT
Not After : Apr 11 15:59:48 2026 GMT
Subject: CN=69d13575-e533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f9:a3:f4:55:61:3f:b6:de:df:41:85:ee:e9:
43:ac:4b:22:61:44:eb:12:c7:1b:59:6c:fb:25:f6:
08:59:28:f6:26:78:76:ec:55:a2:59:1a:c5:99:09:
be:62:87:6d:17:9e:54:0b:bc:82:dd:ab:af:a0:af:
ce:be:5e:b7:1b:53:68:2b:90:4b:c2:b8:ca:fd:f0:
1e:f3:91:df:4f:be:1a:65:ed:d9:75:8e:9d:b2:3b:
a7:a7:e9:cd:a1:5b:09:b7:78:ea:1f:26:14:7b:5c:
22:3e:ea:28:6a:e8:ae:74:0b:20:58:00:3d:de:a3:
24:f5:c4:33:56:63:30:64:95:2e:76:91:5e:8d:62:
a2:e3:40:72:15:e5:b3:f7:71:3c:db:c6:cc:23:59:
09:4c:77:1c:ec:ca:12:8c:de:88:53:1a:b1:69:f5:
1e:da:e9:21:1b:88:49:99:7e:ab:25:4f:d7:2b:5b:
5a:cd:b7:2f:d0:79:6b:49:45:d8:6b:b0:63:2e:9c:
7e:6e:ac:3c:78:4a:7c:e8:3d:8b:f6:e4:72:26:bc:
13:f6:78:72:c1:89:a7:7c:8c:e7:26:e2:5f:ef:65:
aa:9c:b9:7f:25:dc:68:53:b7:24:21:e8:a9:e4:dc:
d0:10:a1:96:ea:b2:68:23:cf:e6:71:bc:a4:ce:91:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F8:C7:28:29:87:E7:50:EF:6C:E6:BA:E8:96:F3:EB:3D:AA:E5:EA
X509v3 Authority Key Identifier:
keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:a8:3a:2d:1a:33:ba:78:11:a5:06:3a:a6:bb:1b:b5:01:
34:18:04:3d:07:4b:b9:59:38:a9:f5:35:ae:7a:11:eb:96:9e:
ee:bf:62:8f:8d:27:2b:7a:ae:1f:7e:03:64:e6:d3:28:62:4e:
c9:34:99:02:97:d6:a1:ea:00:6e:75:1a:f3:56:93:de:da:74:
c7:7b:13:a3:d3:33:e4:93:ef:38:bd:2a:f2:2a:5e:4b:2a:9d:
8a:41:5d:5d:37:3b:d9:b1:0f:7e:6a:f0:39:2f:dd:2e:61:ab:
6f:74:fd:3a:b6:b7:74:b4:29:9d:3a:f1:05:20:58:e7:5c:d9:
1c:8d:0e:f1:cf:4c:79:94:dd:81:dc:82:5d:5e:e2:0f:57:aa:
c1:8b:0d:99:e9:01:48:78:a6:64:84:bc:24:78:a6:bf:c0:ae:
af:3f:71:a9:60:e5:dd:89:3c:07:88:6d:4a:78:d8:d0:41:c1:
82:6f:35:d4:4e:13:07:77:0a:50:ae:33:15:2e:f4:a0:06:ac:
79:3d:a3:05:7d:27:a8:37:47:43:a6:73:3f:fb:25:64:71:72:
fd:df:1f:3c:e9:4c:ad:49:3d:0a:b5:8e:7f:a6:8b:5f:66:ff:
cb:7f:17:24:da:a7:0f:b3:7b:2c:3d:02:77:c9:62:b0:0f:26:
12:27:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:25 2026 by rpki-client