
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier: gLD3h1wP9edt0T3Wu8PJAJKGV3epN9qm8ZIe3+k5Gb0=
Subject key identifier: 13:E5:B9:4B:72:0E:E2:DF:C1:9B:9A:AA:9E:61:28:01:31:6A:25:22
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number: 0262
Signing time: Sun 19 Apr 2026 02:00:26 +0000
Manifest this update: Sun 19 Apr 2026 02:00:25 +0000
Manifest next update: Sun 26 Apr 2026 02:00:25 +0000
Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: k82Yu3C/n4r8qB8MJB+oPrPZGSgc3niCamDAXLGXTYo=)
2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Validity
Not Before: Apr 19 02:00:25 2026 GMT
Not After : Apr 26 02:00:25 2026 GMT
Subject: CN=69e4373a-e0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:5a:8f:fa:8b:ab:b1:11:6b:72:15:75:b2:
f1:e1:a4:ad:f0:35:3e:d6:7a:85:77:be:80:41:0c:
17:02:93:91:68:17:4d:ae:2c:7d:8d:01:eb:f3:45:
5a:cf:23:48:24:81:bd:7b:34:72:d7:4a:5e:b7:24:
d5:77:c4:3d:a6:2b:7e:79:b8:84:21:fd:30:bf:08:
5a:83:63:94:2f:7d:e7:77:45:56:6f:2a:d7:d8:bc:
f1:2b:5b:3e:02:1e:fa:70:d3:21:c3:c6:5e:16:1e:
48:07:15:0a:ca:01:40:37:a5:a2:da:79:47:19:8d:
03:77:9f:39:1e:42:aa:45:69:3a:7b:d4:9d:18:b4:
31:19:ae:58:72:3c:bd:be:a1:70:58:73:9a:f7:eb:
54:92:d5:7e:9d:4c:dc:23:10:63:3f:ea:9d:01:6b:
03:7b:65:9c:75:1b:34:44:f0:97:56:d3:15:8b:53:
59:30:c0:74:95:9c:c5:b5:e4:03:52:0a:10:3b:9d:
35:09:64:ff:6b:0d:e3:8b:0e:fe:5a:60:4b:61:d9:
90:36:5e:88:87:26:fd:69:77:e6:24:44:c4:32:45:
75:38:48:57:f2:31:ab:49:87:f9:c9:63:07:4d:a4:
27:46:8f:78:d0:09:cc:39:30:d1:a8:b1:9e:64:dd:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:B9:4B:72:0E:E2:DF:C1:9B:9A:AA:9E:61:28:01:31:6A:25:22
X509v3 Authority Key Identifier:
keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b2:42:eb:69:0f:c0:0a:9f:71:6b:a6:28:65:85:fa:9e:bd:
69:2c:68:f6:29:e9:90:4d:4c:c8:5a:ba:2c:71:0b:fb:33:e2:
fa:c3:26:6b:e3:9b:75:b2:a3:a5:40:df:97:33:65:3c:f9:aa:
b8:d4:6e:7b:ee:99:dc:af:7d:3f:c1:f9:66:6a:d4:64:be:5c:
dc:54:d1:7b:73:e0:67:57:88:d1:78:e1:ad:11:c7:c3:46:2d:
2e:42:b1:76:d8:ae:44:60:7f:10:31:7e:fc:c5:f7:69:8d:d4:
2c:0e:a9:75:a1:5c:e3:16:e6:8a:fc:a0:bd:ca:4a:f4:d4:e3:
db:a2:79:44:e5:f1:3e:a5:e6:78:84:ab:9d:8c:9b:c7:4a:72:
7e:a0:77:c2:10:59:cd:d1:70:39:4b:26:b3:57:e9:71:7c:9c:
3d:cc:55:32:8c:ad:64:db:15:5a:99:df:38:4b:8e:ca:4e:85:
60:8b:3a:db:3e:ef:13:2e:43:3c:e3:16:04:29:50:4c:41:68:
67:6e:c7:84:a3:fa:3a:46:af:42:89:4d:99:99:18:a6:18:87:
2d:3b:0c:39:b2:dd:ba:1f:ff:dc:91:76:eb:c1:67:bc:d4:0a:
64:9e:3b:2a:39:1b:3c:0d:f0:17:dd:49:0b:e7:b8:b5:ae:16:
3e:c1:0b:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz
Mzc0NkNFODcwHhcNMjYwNDE5MDIwMDI1WhcNMjYwNDI2MDIwMDI1WjAYMRYwFAYD
VQQDEw02OWU0MzczYS1lMGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGRaj/qLq7ERa3IVdbLx4aSt8DU+1nqFd76AQQwXApORaBdNrix9jQHr80Va
zyNIJIG9ezRy10petyTVd8Q9pit+ebiEIf0wvwhag2OUL33nd0VWbyrX2LzxK1s+
Ah76cNMhw8ZeFh5IBxUKygFAN6Wi2nlHGY0Dd585HkKqRWk6e9SdGLQxGa5Ycjy9
vqFwWHOa9+tUktV+nUzcIxBjP+qdAWsDe2WcdRs0RPCXVtMVi1NZMMB0lZzFteQD
UgoQO501CWT/aw3jiw7+WmBLYdmQNl6Ihyb9aXfmJETEMkV1OEhX8jGrSYf5yWMH
TaQnRo940AnMOTDRqLGeZN3/xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPluUty
DuLfwZuaqp5hKAExaiUiMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD
MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6
b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE
QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv7JC62kPwAqfcWumKGWF+p69aSxo9inpkE1MyFq6LHEL+zPi+sMma+ObdbKj
pUDflzNlPPmquNRue+6Z3K99P8H5ZmrUZL5c3FTRe3PgZ1eI0XjhrRHHw0YtLkKx
dtiuRGB/EDF+/MX3aY3ULA6pdaFc4xbmivygvcpK9NTj26J5ROXxPqXmeISrnYyb
x0pyfqB3whBZzdFwOUsms1fpcXycPcxVMoytZNsVWpnfOEuOyk6FYIs62z7vEy5D
POMWBClQTEFoZ27HhKP6OkavQolNmZkYphiHLTsMObLduh//3JF268FnvNQKZJ47
KjkbPA3wF91JC+e4ta4WPsELHA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:13 2026 by rpki-client