
$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json)
Hash identifier: nV5V8tYxiY7F8Mmvagq10H67+H9Fw1brrZ/FAB4EODE=
Subject key identifier: 09:5A:C7:AF:9C:1B:92:3B:86:7E:3B:B4:8B:69:73:F5:CA:FC:C4:4B
Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
Manifest number: 02D7
Signing time: Fri 17 Apr 2026 01:15:37 +0000
Manifest this update: Fri 17 Apr 2026 01:15:36 +0000
Manifest next update: Fri 24 Apr 2026 01:15:36 +0000
Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: 3dmvqqpjJynD22WZ+Tw2dso28FArgEgR8h3yfl6OUg0=)
2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: /KIj4VbCDG5XB/rAb/Z+SKRxFKv9fYPAbyIf2+zzEmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Validity
Not Before: Apr 17 01:15:36 2026 GMT
Not After : Apr 24 01:15:36 2026 GMT
Subject: CN=69e189b8-bfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:b8:90:6c:59:58:0a:83:fa:57:38:70:5b:
a1:75:74:ce:82:9f:6c:2c:f4:55:d5:7d:ea:ee:a7:
bc:5c:fa:02:0a:1f:d8:6b:83:28:9a:8a:2a:93:e8:
d0:6f:1a:fd:1b:28:82:3e:cd:df:5b:3b:46:ee:b2:
cd:42:09:3f:60:ab:32:6a:2a:41:23:58:8f:fc:cc:
97:81:76:b0:bf:fa:d3:11:a7:90:d0:44:e8:5e:8e:
5c:9b:87:da:8a:77:f6:a3:a4:65:57:b3:ed:94:cb:
5e:b6:a9:3e:71:58:04:76:97:dd:1f:be:d2:e7:23:
35:7d:77:a2:40:3b:37:45:f5:a7:37:73:fa:d7:67:
ca:ab:54:14:63:2c:a0:35:25:9d:5d:9f:b6:0b:df:
2b:e9:42:9a:47:f1:7e:91:ff:1b:14:eb:db:fa:cb:
1a:e0:22:28:34:e0:99:c5:a1:d1:93:66:9f:55:17:
ca:52:29:86:d8:8b:a1:a4:52:0a:25:93:81:1c:ba:
89:c7:96:25:6c:a0:8d:62:4c:41:74:da:76:49:e4:
81:7d:45:23:e8:56:46:76:32:8e:b7:18:d6:5a:e7:
8a:72:ce:d7:91:81:f5:3b:1a:55:cd:85:6f:77:3f:
7f:37:36:f4:58:31:3d:f9:2d:01:be:55:9f:2d:b8:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5A:C7:AF:9C:1B:92:3B:86:7E:3B:B4:8B:69:73:F5:CA:FC:C4:4B
X509v3 Authority Key Identifier:
keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:73:d4:96:fe:65:aa:e7:b9:a8:f6:8c:b3:e1:67:ee:a8:2b:
45:67:48:1d:8c:dc:ff:ef:35:51:9c:2c:fc:e3:2e:f3:8d:78:
95:42:54:8e:f6:30:05:6c:37:28:99:f2:e0:1e:42:6c:2a:ed:
71:ab:d1:4f:19:0e:38:e4:14:77:7b:fa:01:e8:9a:8e:de:de:
4c:e1:26:ef:8e:c1:29:61:16:82:e6:db:a8:b6:2d:ab:91:73:
af:ea:8f:66:59:d3:48:86:ef:4f:f0:dc:f1:ac:59:b1:69:cc:
2d:27:84:fb:6f:2d:f8:26:4d:99:a5:c6:a8:16:fa:d2:39:e5:
6c:59:a4:6d:b9:d2:29:58:20:ee:b4:25:f2:f4:60:96:1d:75:
fb:da:98:18:30:41:8e:91:6c:84:9c:62:22:e0:04:6d:f3:f5:
49:fc:17:64:df:34:84:47:9b:b2:09:a4:8c:c2:9d:90:ba:55:
f3:17:f8:93:b9:16:59:1a:7a:06:89:6c:5b:af:6e:30:91:81:
eb:a2:56:16:89:d9:1c:8e:c7:c2:e4:9c:6f:c9:5a:74:99:6f:
d0:49:9f:46:25:7e:f8:c5:68:a6:3c:eb:c0:ac:07:9f:e8:2f:
fb:22:5f:cb:31:9d:4f:dc:0e:56:3e:79:e4:dc:df:be:41:b5:
80:68:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:08 2026 by rpki-client