
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json)
Hash identifier: 9/29QH6YFcR7RCrz3bJYieG3WE9UtUDHx/APdn61P0A=
Subject key identifier: 81:48:78:76:0F:4A:FA:A5:46:64:AF:D6:C9:C0:79:42:96:32:E6:C6
Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B
Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B
Certificate serial: 01E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
Manifest number: 01E3
Signing time: Fri 17 Apr 2026 03:07:54 +0000
Manifest this update: Fri 17 Apr 2026 03:07:53 +0000
Manifest next update: Fri 24 Apr 2026 03:07:53 +0000
Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: q/sGEnGGkIUBrudgoal7rerCJWCL8AEmJxN02i/vGL8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl
rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B
Validity
Not Before: Apr 17 03:07:53 2026 GMT
Not After : Apr 24 03:07:53 2026 GMT
Subject: CN=69e1a40a-170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:67:dd:55:60:eb:4d:ae:14:c1:0f:43:69:
14:9a:cf:d6:41:2e:37:4f:c3:bf:15:ca:b6:f1:ba:
ba:28:2a:fe:93:79:f6:bb:bd:46:6c:02:4c:99:57:
4f:02:2f:33:88:76:bd:6e:44:44:6f:d5:a2:26:88:
38:1f:63:cd:c0:a1:03:4c:3c:3e:6b:54:7f:5e:4b:
e0:80:06:08:d7:cd:bc:34:36:5e:90:25:3f:a7:f7:
a4:46:78:28:85:23:84:8b:75:7b:e0:a9:ad:b1:0f:
3e:96:11:83:30:6f:45:86:ca:ce:59:84:0a:86:7b:
a9:34:f3:f8:0b:bc:f3:9f:00:2d:47:e6:2f:3f:38:
5f:2f:db:18:a0:86:46:dd:a1:2b:73:c3:a3:f6:13:
7b:df:c3:e2:d5:fb:99:9b:1d:bc:ee:15:77:a2:3d:
3b:9f:21:1f:f6:f9:69:b2:ff:12:03:4a:0a:50:44:
84:42:e5:e2:23:e7:df:76:2d:dd:82:f2:85:55:1c:
99:59:3b:c5:06:44:9d:e0:fa:7a:b6:6c:3c:36:67:
6d:9e:ee:df:b3:0a:a7:ee:7b:af:b8:80:45:38:2d:
ea:fa:84:8a:b8:0b:70:e0:34:1a:5c:3f:a9:c5:be:
e3:c5:af:28:64:76:ba:b4:d7:26:a9:6a:6c:50:8e:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:78:76:0F:4A:FA:A5:46:64:AF:D6:C9:C0:79:42:96:32:E6:C6
X509v3 Authority Key Identifier:
keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:44:33:fe:4a:45:f9:97:8f:1b:84:cc:c0:9d:82:5d:9d:7a:
a8:1f:74:47:af:90:ad:f4:3d:3a:e6:5f:81:5f:5a:5d:c5:85:
91:e1:d2:16:ff:cd:a2:28:dc:63:79:3c:da:e1:68:ad:29:63:
08:76:55:ae:58:44:21:bb:03:81:15:f3:93:0e:d7:2a:fc:9f:
35:4d:c2:b7:1a:c2:bb:39:f2:62:a6:79:e7:28:17:c8:fb:ca:
1e:ce:59:3a:c8:ee:5a:c8:50:19:e2:0e:b3:18:4e:2e:4b:35:
35:57:12:ad:89:56:8d:31:3c:f1:46:14:03:a7:aa:3f:72:eb:
d4:1f:e6:d0:aa:70:77:9a:da:32:95:4c:fd:0f:66:4c:c4:30:
57:07:e0:77:4f:d1:96:4b:33:55:07:3f:b5:f0:74:2a:9f:6e:
83:09:71:af:9a:2a:51:55:c4:8a:16:a3:de:31:19:f8:4f:68:
4d:9b:ab:84:82:ea:0c:b7:4b:59:d1:84:0f:07:b2:65:f3:5f:
7e:d8:13:4a:6e:b7:1e:08:dd:b5:8c:32:30:b2:be:73:66:b0:
62:c4:8e:3c:1f:20:83:df:0e:fe:c0:0d:56:63:25:64:e2:63:
84:84:aa:5a:65:1b:66:17:56:78:ce:73:69:a7:9e:fc:34:a4:
ce:89:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:44 2026 by rpki-client