
$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json)
Hash identifier: +9wdz3FhRkVq4mxickjwoiiwnky6w7axDNw6wBo7rVI=
Subject key identifier: 0C:FD:0B:FB:43:01:65:DB:4A:23:DA:4F:07:4E:A7:F0:BD:D5:14:C2
Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Certificate serial: 352D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
Manifest number: 352D
Signing time: Thu 16 Apr 2026 14:48:30 +0000
Manifest this update: Thu 16 Apr 2026 14:48:30 +0000
Manifest next update: Thu 23 Apr 2026 14:48:30 +0000
Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: lAfrjEtmxCoOscLr2yOaAaHali4gBZfvQh4uHcuqcDY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13613 (0x352d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E
Validity
Not Before: Apr 16 14:48:30 2026 GMT
Not After : Apr 23 14:48:30 2026 GMT
Subject: CN=69e0f6be-ab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:cb:04:aa:a9:cc:a4:d6:d9:2f:5f:5c:42:
35:e5:64:c7:13:89:03:42:83:41:60:d1:39:e1:84:
a7:87:cf:c6:0b:54:ad:3b:bb:e3:49:02:71:4e:e1:
8f:5c:e2:c1:08:7e:8b:a3:9c:bf:78:46:8c:b1:90:
98:91:33:29:81:e3:2d:5a:f5:8b:12:ec:01:03:93:
04:c7:b7:78:9d:cb:5d:ce:15:af:3d:b7:fd:e8:95:
89:8a:d1:84:49:e8:78:b4:cd:d8:a2:38:2b:c0:6b:
3b:f0:7a:56:f3:f5:c9:43:e5:c9:21:72:e2:b1:51:
7e:9a:d9:9d:c4:dc:15:d7:a1:9e:98:6d:3b:a6:bf:
d3:1d:c2:61:9f:fc:98:97:11:1d:c1:62:17:d1:fd:
2a:e1:1c:00:88:46:25:65:7f:8a:7c:7b:d1:c3:59:
f9:a6:62:a9:08:14:21:82:64:3f:4a:5c:d6:ee:1b:
7b:c1:fb:8e:92:cd:68:26:e4:a4:f8:18:51:aa:28:
9b:a6:76:7a:bc:28:50:0a:cd:5f:cf:64:e5:18:37:
54:25:3f:d6:de:e4:2a:0b:67:da:c8:24:86:f9:d0:
77:e2:8a:6f:ee:93:df:e0:3a:68:e3:65:3c:c6:13:
01:b3:75:12:18:74:3c:7c:0e:1f:50:eb:1c:bd:40:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:0B:FB:43:01:65:DB:4A:23:DA:4F:07:4E:A7:F0:BD:D5:14:C2
X509v3 Authority Key Identifier:
keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:d6:e1:fa:5b:ec:61:4c:ac:a8:b2:95:e8:69:21:b9:7d:
ca:f3:5c:2a:53:e2:ee:ff:7c:35:a8:b6:1c:4f:3f:16:97:af:
a5:a8:61:c2:e3:64:d6:9a:d8:cb:2c:48:73:7f:3a:19:5c:af:
0f:70:5d:bb:9e:b1:89:16:4f:47:d2:e0:36:45:66:54:98:fa:
0a:3b:27:f6:90:04:8b:f1:15:a6:d9:b6:e6:43:86:ba:bf:2e:
dc:77:43:e3:d0:10:a9:80:ce:05:a1:ac:fd:08:11:29:9d:02:
58:12:ac:c4:33:f2:90:5a:ff:92:ff:c8:a9:6d:62:77:98:9d:
67:47:80:a2:51:bd:eb:08:98:96:74:c6:61:1d:a4:96:3a:97:
17:27:2b:3a:66:11:c8:b9:c6:78:05:c4:95:73:20:8a:a5:75:
fb:e5:bc:c5:be:98:da:9f:03:59:4f:fa:67:8f:10:6c:53:85:
7e:e9:1d:f4:3e:d7:c6:71:90:d2:7d:d0:f6:e4:8e:70:7b:48:
fe:30:b9:90:fe:59:1d:52:9d:15:89:00:4b:e8:2b:d3:a4:5e:
72:ca:ba:89:a0:bf:fd:4d:e5:0e:c7:3e:d2:8f:bb:1e:19:6d:
ca:b4:5f:13:a7:3e:eb:b8:2a:10:4e:49:f6:17:4a:20:95:86:
92:f8:1d:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB
NjU4MjIzMUUwHhcNMjYwNDE2MTQ0ODMwWhcNMjYwNDIzMTQ0ODMwWjAYMRYwFAYD
VQQDEw02OWUwZjZiZS1hYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurbLBKqpzKTW2S9fXEI15WTHE4kDQoNBYNE54YSnh8/GC1StO7vjSQJxTuGP
XOLBCH6Lo5y/eEaMsZCYkTMpgeMtWvWLEuwBA5MEx7d4nctdzhWvPbf96JWJitGE
Seh4tM3YojgrwGs78HpW8/XJQ+XJIXLisVF+mtmdxNwV16GemG07pr/THcJhn/yY
lxEdwWIX0f0q4RwAiEYlZX+KfHvRw1n5pmKpCBQhgmQ/SlzW7ht7wfuOks1oJuSk
+BhRqiibpnZ6vChQCs1fz2TlGDdUJT/W3uQqC2fayCSG+dB34opv7pPf4Dpo42U8
xhMBs3USGHQ8fA4fUOscvUB67QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAz9C/tD
AWXbSiPaTwdOp/C91RTCMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE
OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ
MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAigXW4fpb7GFMrKiylehpIbl9yvNcKlPi7v98Nai2HE8/FpevpahhwuNk1prY
yyxIc386GVyvD3Bdu56xiRZPR9LgNkVmVJj6Cjsn9pAEi/EVptm25kOGur8u3HdD
49AQqYDOBaGs/QgRKZ0CWBKsxDPykFr/kv/IqW1id5idZ0eAolG96wiYlnTGYR2k
ljqXFycrOmYRyLnGeAXElXMgiqV1++W8xb6Y2p8DWU/6Z48QbFOFfukd9D7XxnGQ
0n3Q9uSOcHtI/jC5kP5ZHVKdFYkAS+gr06Recsq6iaC//U3lDsc+0o+7HhltyrRf
E6c+67gqEE5J9hdKIJWGkvgdkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:14 2026 by rpki-client