
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json)
Hash identifier: NpXFXKcuHCuNyDrOzhNv6D5P/33mIsxiVEvjXfqzI6g=
Subject key identifier: AA:1B:D2:40:05:E9:3B:DD:F1:49:A1:DD:0F:51:E5:D5:0D:1B:B7:E1
Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Certificate serial: 0839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
Manifest number: 0827
Signing time: Fri 06 Mar 2026 20:42:34 +0000
Manifest this update: Fri 06 Mar 2026 20:42:34 +0000
Manifest next update: Fri 13 Mar 2026 20:42:34 +0000
Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: KEvTglD6FDqDKN8L1dAUbYIniGpn714gB8qztJwrLx4=)
2: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: Gz3paIMkIc2ePietK++Ou+oRymIz2aw9Ky+sSIACdH4=)
3: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: YumOATI/4NppEFAS3vwXFXSjDtb9xmsE1aBFsK6y/JI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 20:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Validity
Not Before: Mar 6 20:42:34 2026 GMT
Not After : Mar 13 20:42:34 2026 GMT
Subject: CN=69ab3c3a-f0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:e2:b0:77:4d:38:2e:a9:81:5c:ce:2a:01:
21:fa:7c:c8:86:71:6e:80:2f:09:0a:46:46:9a:f5:
05:16:5f:a1:ad:ef:2b:71:e1:f2:51:f6:d0:93:bb:
e7:88:8e:9a:5f:e3:21:51:1f:51:c4:60:99:6a:11:
ec:95:24:57:b9:3a:b8:23:1d:f4:43:42:f2:f3:08:
93:18:5e:e8:02:52:56:8a:2e:19:b2:5b:2f:ed:31:
52:2b:a2:5f:91:ad:40:d5:34:3e:22:f9:35:93:68:
fb:72:4c:e1:c9:96:41:4f:cb:e3:f5:cc:89:ed:02:
ff:db:58:38:e8:e1:b3:8b:ed:9c:cf:f5:59:b6:ae:
95:10:3b:47:ff:d8:4b:55:79:73:0c:4e:b5:c0:ad:
07:2b:4c:66:93:10:6c:2a:f9:24:e3:c7:bb:af:b3:
65:27:23:4a:47:51:42:c8:4e:9a:a0:c2:c1:19:a3:
0c:97:05:7f:2b:11:b9:87:ee:d1:44:8f:a4:31:bf:
d1:e1:e7:ff:9b:16:1b:5d:03:16:20:2f:e1:e0:84:
bc:be:8a:7f:8e:1d:10:0b:89:d6:28:09:23:23:16:
7a:b3:53:d9:02:37:64:bf:c3:8d:7b:94:d4:4d:e7:
80:96:5d:e8:37:f5:7d:09:ad:0d:36:4b:84:94:a1:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:D2:40:05:E9:3B:DD:F1:49:A1:DD:0F:51:E5:D5:0D:1B:B7:E1
X509v3 Authority Key Identifier:
keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:f9:b6:7e:42:69:65:c4:90:55:ca:9c:22:c3:8e:85:55:68:
4e:87:cd:65:03:91:23:b8:f0:51:d1:ee:3b:41:8f:e7:6d:a5:
1a:f1:79:aa:2b:74:5d:ed:b4:4b:ef:61:d8:f3:0f:a4:fb:01:
ae:8b:0c:4c:b9:1d:48:85:d5:2e:e3:7d:d5:d2:4e:13:a5:17:
b9:c1:cb:2c:20:87:a0:87:96:57:46:2c:7b:1d:8b:fa:40:00:
c2:ef:f4:a2:d0:fd:84:85:d8:df:60:92:6d:f8:46:d3:31:aa:
09:ee:41:43:b2:63:d4:64:ba:5e:33:32:85:41:16:3b:0c:af:
08:f9:46:0f:ce:81:ae:68:42:fe:81:d9:0d:db:20:b9:a7:32:
28:ef:2a:40:7b:41:48:01:c0:e9:e3:5f:ad:71:98:ed:c1:cd:
36:09:d0:8a:c2:65:43:4c:78:96:ec:5b:ed:bc:30:8a:2b:34:
6d:2d:5d:1e:53:66:b9:55:85:9f:80:4f:ef:20:09:6c:9b:95:
d4:a6:4f:ce:be:95:0f:5e:a2:19:bb:3f:a7:39:90:fc:43:72:
b2:6e:08:83:96:d1:a0:b3:ce:8b:f1:53:e5:bb:00:4e:62:37:
e2:57:e2:89:54:c8:c6:6f:87:7d:44:6c:1d:05:7d:2d:5d:96:
a0:93:c7:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2
OEY4ODA3REQwHhcNMjYwMzA2MjA0MjM0WhcNMjYwMzEzMjA0MjM0WjAYMRYwFAYD
VQQDEw02OWFiM2MzYS1mMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFrisHdNOC6pgVzOKgEh+nzIhnFugC8JCkZGmvUFFl+hre8rceHyUfbQk7vn
iI6aX+MhUR9RxGCZahHslSRXuTq4Ix30Q0Ly8wiTGF7oAlJWii4Zslsv7TFSK6Jf
ka1A1TQ+Ivk1k2j7ckzhyZZBT8vj9cyJ7QL/21g46OGzi+2cz/VZtq6VEDtH/9hL
VXlzDE61wK0HK0xmkxBsKvkk48e7r7NlJyNKR1FCyE6aoMLBGaMMlwV/KxG5h+7R
RI+kMb/R4ef/mxYbXQMWIC/h4IS8vop/jh0QC4nWKAkjIxZ6s1PZAjdkv8ONe5TU
TeeAll3oN/V9Ca0NNkuElKGWFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKob0kAF
6Tvd8Umh3Q9R5dUNG7fhMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD
RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC
OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu
R3pUb2gwN3JHNWhvLUlCOTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcvm2fkJpZcSQVcqcIsOOhVVoTofNZQORI7jwUdHuO0GP522lGvF5qit0Xe20
S+9h2PMPpPsBrosMTLkdSIXVLuN91dJOE6UXucHLLCCHoIeWV0Ysex2L+kAAwu/0
otD9hIXY32CSbfhG0zGqCe5BQ7Jj1GS6XjMyhUEWOwyvCPlGD86BrmhC/oHZDdsg
uacyKO8qQHtBSAHA6eNfrXGY7cHNNgnQisJlQ0x4luxb7bwwiis0bS1dHlNmuVWF
n4BP7yAJbJuV1KZPzr6VD16iGbs/pzmQ/ENysm4Ig5bRoLPOi/FT5bsATmI34lfi
iVTIxm+HfURsHQV9LV2WoJPHPw==
-----END CERTIFICATE-----
Generated at Sun Mar 8 00:16:35 2026 by rpki-client