
$ rpki-client -vvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
File: QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json)
Hash identifier: 3y1Ywm1RilfJ4P1KR7sUl5FWsPotGc4cb8864T0NJnQ=
Subject key identifier: F5:5B:83:7D:65:46:FD:E5:0D:65:C1:7A:0F:54:65:2C:36:64:68:FB
Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
Certificate issuer: /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Certificate serial: 087D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
Manifest number: 0875
Signing time: Thu 16 Apr 2026 20:33:39 +0000
Manifest this update: Thu 16 Apr 2026 20:33:39 +0000
Manifest next update: Thu 23 Apr 2026 20:33:39 +0000
Files and hashes: 1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: b87+qfMjBwKTkNiFmk25UXxXuoXgWCZYMCSoSIMqEgY=)
2: 6944587246B311F090CDB927C4F9AE02.roa (hash: hGp6bwwFeBV78RfPCjsM5O3StrZUexewSoAPhlPuLdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Validity
Not Before: Apr 16 20:33:39 2026 GMT
Not After : Apr 23 20:33:39 2026 GMT
Subject: CN=69e147a3-4dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:d5:5c:d3:90:24:e7:fc:61:ae:04:c9:e9:
69:18:d9:a5:80:f8:3b:b2:8e:aa:16:69:ad:6b:df:
bd:66:70:fa:0a:22:6b:62:34:2d:22:fe:a8:fe:f4:
20:9f:4f:6f:7b:c4:74:3c:ef:6e:5a:91:2c:44:4e:
46:c4:e7:24:66:04:f4:ba:27:79:57:4b:da:5b:f6:
bb:06:77:b9:98:4f:df:f6:5a:45:34:2e:7a:34:11:
36:18:da:81:a8:53:d3:c0:d7:c2:5d:5f:85:a0:14:
24:10:1a:1e:ce:6d:dd:fc:c5:2e:25:47:c8:7b:78:
62:f1:e3:85:32:24:c0:36:05:27:06:20:96:26:09:
88:dd:7a:11:7b:62:e3:d6:16:c9:3c:c3:87:af:3a:
81:48:cc:c3:55:89:55:15:71:bf:a8:7e:8e:fe:fe:
87:d6:e0:01:31:e4:4e:e9:c0:9e:96:98:a7:0e:fa:
d0:c4:66:39:91:d3:28:bd:5e:0b:52:2a:0d:8e:86:
e9:cb:18:40:b3:f3:ad:fc:eb:b5:ac:d6:80:81:a7:
0c:40:7f:5f:0d:dd:ad:77:f3:c8:2e:90:df:0a:d3:
8d:8a:99:e4:1c:c9:13:59:df:ad:bb:c4:79:d3:06:
21:6a:e2:a3:01:6f:61:7b:3a:87:1d:06:0d:d9:2c:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:83:7D:65:46:FD:E5:0D:65:C1:7A:0F:54:65:2C:36:64:68:FB
X509v3 Authority Key Identifier:
keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:38:2e:64:91:c3:ce:de:6c:84:c6:0d:38:05:11:23:32:98:
c2:78:df:13:bd:27:bc:8e:5d:9d:7c:ff:2d:10:de:fe:09:59:
08:5f:e4:63:ff:76:ba:24:8e:f1:78:ab:27:f2:a6:3c:d3:db:
b8:7b:4f:23:11:7f:8d:5a:61:f7:c5:c7:01:da:1b:3d:7a:63:
12:91:dd:d8:21:5b:c5:99:7a:17:06:a9:69:98:e8:25:da:9d:
3a:79:5a:99:db:26:7c:bf:39:a7:07:c4:c5:55:3b:48:1b:e0:
8e:48:48:f5:6b:7c:f0:6c:73:5a:54:a7:63:0e:cd:9f:94:95:
49:fd:a9:36:89:33:ed:7c:fb:01:58:ce:c3:4a:a2:0c:3f:72:
77:cd:cc:b9:11:f7:d8:88:b6:7d:59:dc:cc:0d:83:92:9d:0e:
e2:9d:a4:70:4f:f4:6f:ff:b1:68:92:10:e5:03:5b:a9:ee:0a:
02:7b:92:a1:0b:c4:17:11:95:26:90:ce:6b:8f:1a:b8:5a:59:
b7:89:74:74:80:e9:40:16:bf:d0:97:d4:41:12:20:56:57:8e:
f6:e2:fc:e7:77:b3:24:1b:11:30:92:09:10:12:f0:85:74:a1:
72:6c:77:b2:eb:0c:81:ae:58:70:a9:02:73:d8:a4:d1:cf:df:
cc:bc:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:54 2026 by rpki-client