
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier: 1IAab/DtRF0jOnfW/j80PSn1RKFDt62L1wuzj0w5O2w=
Subject key identifier: A8:41:64:36:D1:29:4C:A3:07:81:D7:87:BA:B1:30:9E:18:65:07:F5
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial: 0AFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number: 0AF3
Signing time: Sat 04 Apr 2026 19:11:47 +0000
Manifest this update: Sat 04 Apr 2026 19:11:47 +0000
Manifest next update: Sat 11 Apr 2026 19:11:47 +0000
Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: +qaFK+ZIN/b1Vwxfn6ak+KCk72SDdAZXi+2stLEAyfc=)
2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: r0lCb8PmrHuRVFml8CXtx2AwxypyCR8m21BT5Lcfkrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Validity
Not Before: Apr 4 19:11:47 2026 GMT
Not After : Apr 11 19:11:47 2026 GMT
Subject: CN=69d16273-106d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:40:f1:d4:09:99:9f:52:2a:61:0a:33:d9:
63:c3:18:b8:de:7c:70:d6:80:80:3e:ef:b5:3e:b7:
0f:c0:4e:45:9e:4c:44:44:32:9e:81:48:ac:39:b3:
97:1d:c0:7f:2b:e8:62:ca:24:eb:5f:c9:21:36:b3:
50:56:eb:8c:67:12:9d:8f:d8:04:71:15:34:9e:be:
c8:ce:fb:6d:46:ad:06:72:ac:c0:ba:a3:eb:f2:55:
2d:a4:31:33:36:24:a5:e8:e4:63:d4:83:3d:39:3e:
38:e9:cc:61:ba:60:ee:65:da:10:7b:2a:fd:16:bd:
c7:56:cf:b0:61:90:85:29:2e:ba:9f:b8:38:53:23:
37:cd:77:08:4d:de:d5:1b:e2:54:ff:1c:16:d3:df:
76:58:f0:4d:26:0f:d5:61:ef:55:8f:5c:6a:41:09:
b9:f2:a8:ac:b3:34:f6:01:f1:1b:9b:5c:f4:f1:b6:
b0:ba:05:1d:d8:e7:9d:53:b0:0a:54:86:74:6d:8f:
e8:d1:78:f5:04:a8:c1:91:63:1d:4a:f9:f5:62:33:
10:40:3e:b6:35:0e:f0:55:3c:e5:0c:0d:0f:52:39:
7a:52:13:c4:9c:49:62:fc:1c:d4:22:3d:62:d7:4a:
53:f0:69:34:c6:cd:4d:7f:03:32:33:2a:69:ce:a9:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:64:36:D1:29:4C:A3:07:81:D7:87:BA:B1:30:9E:18:65:07:F5
X509v3 Authority Key Identifier:
keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:53:0c:b1:57:db:be:9c:3a:41:a7:84:c4:ba:8a:cd:f0:
bf:41:75:a8:31:bd:ad:f3:50:c3:9b:14:15:8a:5d:84:1a:d2:
b5:23:69:03:02:0c:05:fd:76:37:e6:f1:79:85:7b:d6:63:9f:
9e:b3:f8:25:c5:d9:7b:e9:85:00:a9:99:43:0d:02:d6:3c:4a:
c6:21:79:07:b5:63:a8:8c:fb:72:80:0b:7c:5b:dc:93:9d:b2:
0f:89:ac:00:5d:9e:a4:e7:e9:9e:79:ad:5c:2d:7c:b1:c6:a0:
db:b3:7b:1c:d1:47:0c:1f:8d:17:40:fd:b5:d8:9f:d4:e5:51:
8b:47:b6:00:1d:fe:ad:78:bb:58:e1:c5:58:c5:00:4b:61:68:
f0:4e:71:51:8c:27:71:14:26:cd:60:18:98:4b:8c:6f:8d:b8:
84:4c:4e:56:21:ed:2a:14:7f:24:33:24:b2:27:ad:b3:3a:c2:
df:1f:de:5c:75:52:18:2f:eb:f7:5e:5a:67:51:b0:cd:83:5c:
52:15:1c:51:8f:43:fb:bb:70:1c:45:5e:72:4a:b8:45:9b:c2:
07:34:7e:d9:ab:fc:31:7d:b4:e0:5d:ea:b3:0c:19:8a:51:54:
ad:de:d1:e5:c6:3d:73:4c:0b:1e:ff:8c:9f:05:f7:3d:7c:03:
30:65:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:26:00 2026 by rpki-client