
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json)
Hash identifier: z4Y8Z7xhiKEaSOVNod+jxt0zxbTMtlVA1excubWKkw0=
Subject key identifier: 2B:D3:0A:53:D3:F4:BB:39:0D:26:BB:53:CA:F8:84:4A:6B:2C:2B:A7
Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
Manifest number: 0240
Signing time: Sat 28 Mar 2026 15:51:13 +0000
Manifest this update: Sat 28 Mar 2026 15:51:12 +0000
Manifest next update: Sat 04 Apr 2026 15:51:12 +0000
Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: dNBguVlrnzhuFwuiIvaYFeF+GOC3wL2lq8bE7usJ1BE=)
2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: 49BUIWXY2kRKbxVwv8L7UkKYY+v5irFyHsawrnEYjXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 15:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Validity
Not Before: Mar 28 15:51:12 2026 GMT
Not After : Apr 4 15:51:12 2026 GMT
Subject: CN=69c7f8f1-2b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:39:30:21:b9:ac:cc:48:45:d1:0a:18:ad:
12:28:da:1f:79:ef:28:1b:d6:60:ba:26:cc:a7:de:
e3:fe:a4:04:52:8b:df:ec:cf:66:58:b5:e5:9c:f0:
da:4b:ff:d7:88:b9:1e:b9:5e:d1:48:d1:d3:89:95:
f4:87:de:85:46:22:40:49:b2:e7:f2:ba:2c:b4:f4:
59:d9:be:dc:34:70:1f:f1:29:18:52:98:1f:c6:a3:
ea:5a:69:ac:50:e4:c7:10:92:fa:84:2d:3f:ea:1d:
6b:10:1b:d2:a2:2b:f7:7c:0c:53:b7:cf:f8:c1:c8:
86:db:ef:0a:16:a0:03:b8:27:14:73:51:7c:85:6d:
bd:f5:05:df:55:e6:04:8a:86:48:58:55:65:b3:db:
29:89:8e:ac:7b:de:50:85:a3:ba:a4:b9:95:28:06:
ee:48:e8:80:fa:f7:ad:c7:a1:a8:60:bc:68:bb:89:
d6:f8:8b:9b:b7:dd:ec:0f:0f:a4:b7:1f:d9:e8:aa:
dd:b9:7c:4a:8e:f2:f0:9a:34:b3:e0:ff:54:6b:ff:
d7:8c:8c:34:82:66:b3:9f:0e:c8:d1:1c:ce:c4:9b:
d6:81:ad:f5:09:f1:2e:4e:2a:28:3f:4c:dd:4e:5b:
e7:84:72:09:16:2e:d2:f8:19:18:74:53:9b:a7:11:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:0A:53:D3:F4:BB:39:0D:26:BB:53:CA:F8:84:4A:6B:2C:2B:A7
X509v3 Authority Key Identifier:
keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:47:91:6c:66:a1:cf:f7:19:4a:13:ed:32:f4:1d:dd:46:9b:
8d:d3:8b:6d:c3:2f:bb:17:bb:f5:7c:fd:31:70:80:d2:7b:3b:
f6:e0:03:58:9d:cd:95:bc:bd:db:31:92:5e:65:82:88:20:19:
7f:59:a1:27:1b:8a:b4:98:8d:17:84:8e:3b:ac:91:fd:73:c9:
34:5d:2d:fe:ed:4d:6d:60:b4:8d:a7:ed:b9:32:5d:e0:50:d5:
7e:4c:8c:62:06:df:86:24:ab:28:09:cc:01:09:68:61:33:04:
4e:f3:23:1d:c7:29:a8:fc:bb:1f:fb:54:d7:48:ee:d0:80:3f:
2c:c5:66:2c:76:b1:54:70:3d:02:28:d7:f0:b1:24:ae:16:a8:
30:08:54:90:6b:d6:34:fa:57:de:2d:c5:9e:38:70:c9:6e:6d:
52:92:9a:b1:a6:fb:7c:66:77:4c:58:56:23:8a:3d:cd:d5:23:
8b:8c:09:24:d0:d4:ed:da:3a:63:8e:f9:ba:15:c1:56:22:9b:
88:99:6c:29:f9:f9:ff:66:f7:eb:98:73:b6:2b:5d:d7:21:d4:
a2:4a:e2:69:e3:35:00:3a:42:89:f0:10:a4:23:da:91:ab:5e:
78:a0:80:25:af:8b:c9:17:95:c7:02:ca:98:01:c1:76:53:cc:
b3:30:91:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE
NkJDMzE3RTEwHhcNMjYwMzI4MTU1MTEyWhcNMjYwNDA0MTU1MTEyWjAYMRYwFAYD
VQQDEw02OWM3ZjhmMS0yYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr0o5MCG5rMxIRdEKGK0SKNofee8oG9ZguibMp97j/qQEUovf7M9mWLXlnPDa
S//XiLkeuV7RSNHTiZX0h96FRiJASbLn8rostPRZ2b7cNHAf8SkYUpgfxqPqWmms
UOTHEJL6hC0/6h1rEBvSoiv3fAxTt8/4wciG2+8KFqADuCcUc1F8hW299QXfVeYE
ioZIWFVls9spiY6se95QhaO6pLmVKAbuSOiA+vetx6GoYLxou4nW+Iubt93sDw+k
tx/Z6KrduXxKjvLwmjSz4P9Ua//XjIw0gmaznw7I0RzOxJvWga31CfEuTiooP0zd
TlvnhHIJFi7S+BkYdFObpxHtqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvTClPT
9Ls5DSa7U8r4hEprLCunMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy
N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl
ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATUeRbGahz/cZShPtMvQd3UabjdOLbcMvuxe79Xz9MXCA0ns79uADWJ3Nlby9
2zGSXmWCiCAZf1mhJxuKtJiNF4SOO6yR/XPJNF0t/u1NbWC0jaftuTJd4FDVfkyM
YgbfhiSrKAnMAQloYTMETvMjHccpqPy7H/tU10ju0IA/LMVmLHaxVHA9AijX8LEk
rhaoMAhUkGvWNPpX3i3FnjhwyW5tUpKasab7fGZ3TFhWI4o9zdUji4wJJNDU7do6
Y475uhXBViKbiJlsKfn5/2b365hztitd1yHUokriaeM1ADpCifAQpCPakateeKCA
Ja+LyReVxwLKmAHBdlPMszCRLg==
-----END CERTIFICATE-----
Generated at Mon Mar 30 06:38:29 2026 by rpki-client