
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json)
Hash identifier: uKaWkjb91X3Lb3K5oO6zNC3NGgyGFvTB1PpIVucUh/g=
Subject key identifier: 75:7A:16:C7:08:D9:58:1A:1E:3A:9F:75:06:47:EF:AA:41:2C:63:4B
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial: 1304
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
Manifest number: 12E8
Signing time: Thu 16 Apr 2026 16:59:14 +0000
Manifest this update: Thu 16 Apr 2026 16:59:13 +0000
Manifest next update: Thu 23 Apr 2026 16:59:13 +0000
Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: +C88lHyjMHAUOhdV2UnAoAUTaaAnvwsARCEjeaJam88=)
2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: m5xuNZTplMCUcjHyNtIG3B2SyKlaJh5IOTk259XuenA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4868 (0x1304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Validity
Not Before: Apr 16 16:59:13 2026 GMT
Not After : Apr 23 16:59:13 2026 GMT
Subject: CN=69e11562-1f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:22:e1:fa:83:49:e8:9a:ce:70:60:0f:62:
0d:9e:b6:b3:e8:f6:61:bd:12:26:0a:da:a7:e8:60:
5b:2f:bd:c8:67:2c:10:8e:38:ba:98:75:be:a4:b6:
a3:ec:43:81:02:a8:58:f4:2c:ec:25:9e:9c:5c:e1:
41:f7:5f:59:36:3b:3d:85:77:98:13:04:bf:92:c1:
30:0d:81:ed:3d:33:08:b3:bf:d1:1f:d9:87:58:e9:
09:99:66:d2:ee:e7:68:c5:97:c1:71:34:cd:3b:63:
89:1d:46:4a:4d:63:c8:9f:4d:48:45:28:f2:f5:b5:
ce:c5:4f:4a:7e:bb:c9:df:c6:78:82:52:8d:ea:f0:
42:f4:22:d2:19:70:13:2f:46:61:4f:8a:72:72:3d:
cb:1d:5b:5c:3b:9e:0c:33:65:f1:0e:9d:47:2e:bd:
b3:8f:d1:7b:ee:35:0a:8f:42:97:fa:f9:80:28:61:
ad:57:33:03:b2:55:84:4e:14:a5:5e:d9:3b:a0:d5:
17:1a:3a:a0:a7:07:80:28:ee:6e:68:de:73:bf:93:
29:85:e5:d5:17:09:05:cf:20:fa:28:28:af:6a:77:
77:3b:25:15:be:81:96:6f:0b:fa:b9:ed:cf:36:31:
68:13:b3:5f:0b:5f:6f:8a:1e:b4:fe:9f:89:6a:63:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7A:16:C7:08:D9:58:1A:1E:3A:9F:75:06:47:EF:AA:41:2C:63:4B
X509v3 Authority Key Identifier:
keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:87:aa:02:f8:2a:2a:58:a9:e9:f6:1e:3f:5f:42:6a:21:79:
e3:f2:1c:da:d9:3c:40:3c:d8:35:7e:0c:b7:bd:65:09:bc:e5:
8a:d3:ad:79:9a:8f:5e:5d:31:10:34:c8:12:56:4b:5e:52:3b:
71:0e:2c:d0:f3:e4:6e:a2:a2:b0:e2:34:61:db:cc:25:c1:74:
66:cc:92:0f:82:dd:7f:4d:dd:7d:6d:8a:56:fe:b5:db:5d:5a:
5b:5b:36:b5:b9:fe:c7:b2:7a:70:9d:01:15:f6:aa:78:19:9b:
5d:a7:a1:b4:79:e8:f1:a2:70:3a:65:7e:cf:25:ef:34:7f:78:
5f:2c:5f:66:a7:d6:e8:59:7b:c2:56:a6:13:f3:e5:19:74:ef:
3a:fc:21:ae:bb:56:81:90:cc:7d:04:18:9c:82:02:da:5f:c1:
63:f2:81:61:e5:60:bd:49:2a:fe:89:c0:db:41:90:5a:e4:73:
2a:21:18:c4:ec:90:82:ea:8e:9f:e2:c6:2a:22:89:89:90:a2:
82:27:b6:d5:8f:bb:10:43:4d:4a:3b:1a:76:54:42:52:6f:e3:
cf:69:f1:e8:80:64:99:f7:73:e8:92:d8:01:35:80:52:62:dd:
20:5b:72:9a:78:7c:c5:b2:ff:15:1a:5f:63:58:7f:79:f9:30:
52:9c:95:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:14 2026 by rpki-client