
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier: 7QKgg0bNv5Y2j41rmvhSxLdskFoml8UYWtWaGlWlMzY=
Subject key identifier: 9B:B5:D2:C9:44:36:BE:D4:1D:72:5C:7B:E1:40:6A:6B:99:8A:65:36
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 046B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number: 045F
Signing time: Sat 04 Apr 2026 23:56:08 +0000
Manifest this update: Sat 04 Apr 2026 23:56:07 +0000
Manifest next update: Sat 11 Apr 2026 23:56:07 +0000
Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: AYuhLue0AvR51Z/fJhG0XwcaG+mArsRK4IR4wyeZPvM=)
2: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: EAZq5ICviDwHpkwl67AFkwJKvgTwEE2w0QqDhrDYQew=)
3: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: z0SpWhiQq8PZIb6gNqRYDPk3XAcQSbjGxmSYWbxSdVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131 (0x46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Validity
Not Before: Apr 4 23:56:07 2026 GMT
Not After : Apr 11 23:56:07 2026 GMT
Subject: CN=69d1a517-545b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:a1:a1:4c:06:d0:9c:ed:a1:c7:74:56:54:
1c:fa:2b:05:a6:68:a0:21:92:53:4c:d1:5d:1a:32:
ca:e0:e9:08:cc:0f:35:bf:23:87:03:b5:fb:3a:8d:
bc:df:18:91:9f:3c:69:cf:a8:f8:1e:d0:65:d8:4a:
81:33:d2:1f:de:71:cb:89:c9:4c:64:03:50:b0:e6:
e0:4d:eb:c1:83:cb:e3:19:6b:35:30:61:20:fd:19:
71:e4:7b:be:47:b2:04:80:cb:b4:83:a4:1a:0a:28:
0e:9e:58:51:58:17:a4:b0:7e:97:0c:f3:7b:e3:02:
83:1f:0a:d4:f9:15:bc:30:ec:b6:9e:83:aa:6c:01:
12:e9:72:00:3e:5a:02:3d:bd:8f:5c:30:41:1e:5e:
bb:6e:f7:45:ec:74:c9:84:cd:d5:e0:de:a9:b9:da:
48:9b:18:74:ac:73:c8:9e:7a:27:ac:ea:8d:69:70:
78:b7:c7:62:2a:9b:0f:8c:9b:58:71:c8:21:58:2d:
20:aa:59:b7:f4:5b:ce:8c:06:e8:ab:2e:93:6e:63:
6b:f7:e4:e3:f7:ba:2e:d0:de:a6:fd:05:57:81:fd:
6d:d1:e9:b6:e4:45:a1:7b:b3:77:36:ba:4d:d3:c4:
31:11:d1:4c:89:58:b9:a1:f3:c6:b4:4f:01:04:49:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:D2:C9:44:36:BE:D4:1D:72:5C:7B:E1:40:6A:6B:99:8A:65:36
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:2e:d9:b4:23:f8:a9:f4:95:f3:23:c2:a6:47:cb:d1:08:04:
0b:c0:25:45:e2:a1:04:82:55:20:bb:a6:9a:e3:06:f1:08:b9:
81:ce:7b:8e:75:3d:56:b3:33:2a:9a:39:fd:b3:c0:57:77:c0:
b4:f2:6f:3b:e5:b5:2e:40:91:c3:92:50:de:56:d2:e7:6b:7d:
a2:85:42:fc:0c:6a:6d:36:fc:02:69:b4:44:e7:35:d4:d1:26:
db:cc:9c:bb:ee:32:c3:c7:61:26:94:90:23:bd:73:5c:8e:1b:
44:43:a2:66:21:a4:cd:62:74:b7:8f:61:ca:fc:7b:cf:e5:ca:
1c:5c:c8:6a:d0:7c:f1:02:7c:89:f7:65:ef:d9:bf:17:96:1e:
01:5f:3d:dd:06:2d:6a:ea:e5:e5:ee:23:80:d5:e4:9b:b8:64:
99:53:2b:64:b7:95:9a:3f:88:38:90:25:17:af:29:92:d2:90:
68:6f:eb:7a:5a:40:04:c2:90:7f:ea:29:98:29:f1:8a:32:dc:
34:bd:c5:5c:3e:da:c7:1f:f0:f8:ba:e2:33:47:a6:cd:d3:af:
be:b0:80:23:0f:97:13:ed:df:89:e8:08:31:e1:93:b0:a2:0b:
08:33:92:9d:c8:90:43:85:2d:fa:ee:16:e3:57:43:1a:a7:26:
19:06:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:27 2026 by rpki-client