
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json)
Hash identifier: EOpEHWNxazzSRBROWmm+bJ+GwgRPRfqbXLCmKHmT4eU=
Subject key identifier: B9:32:46:5A:70:2F:9A:5E:B2:C2:9C:C5:AA:D1:EA:84:54:E3:2A:67
Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7
Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7
Certificate serial: 1249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
Manifest number: 123F
Signing time: Thu 16 Apr 2026 17:02:45 +0000
Manifest this update: Thu 16 Apr 2026 17:02:45 +0000
Manifest next update: Thu 23 Apr 2026 17:02:45 +0000
Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: tq68j0RMEuSkMOlUr8nO8YaezyFjTMQPO10//A0hwJk=)
2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: haDczAt/oRlo22edPz5C27xE4ffdwsxRT0uAhldT0vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl
rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4681 (0x1249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7
Validity
Not Before: Apr 16 17:02:45 2026 GMT
Not After : Apr 23 17:02:45 2026 GMT
Subject: CN=69e11635-5236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:c7:59:02:4f:26:26:ba:08:ea:04:f1:19:
ed:23:dc:c2:c0:df:fb:34:96:71:3d:e3:91:6e:b2:
de:04:fe:c7:4e:6d:30:9f:38:ce:fd:0f:d2:3d:48:
7d:32:eb:45:b8:12:fa:24:8c:c2:52:f2:3f:d1:d6:
22:34:d1:9a:6e:26:7a:52:05:8c:65:0d:e5:0e:ba:
ba:1c:50:bd:ea:cd:bc:eb:1a:29:cb:f9:c1:20:bd:
54:1a:e7:8f:a8:9f:87:05:d0:81:ca:3c:fe:3e:b2:
bb:af:5c:57:1b:01:1c:06:60:69:a6:a8:0f:7a:a2:
f7:d5:43:3e:d0:3e:ff:f6:05:b7:4c:70:13:3c:f4:
32:c6:99:a0:38:ee:7c:ae:18:72:02:45:ed:cb:68:
56:86:c6:ca:03:fe:0a:70:27:cb:47:e6:7c:82:a1:
f9:d3:0a:21:b4:31:1a:e0:40:9b:19:43:06:a5:f1:
32:58:9d:d6:ba:ff:24:74:df:15:7b:ec:07:47:f3:
63:af:6b:99:0b:e4:0f:35:35:c3:4b:0a:f3:9b:fa:
48:42:af:f1:d4:97:1c:e1:f9:68:b6:25:27:59:19:
9d:0e:8d:e8:3c:29:f4:1e:0d:51:ab:16:7b:c1:f5:
87:7c:2f:57:14:da:ab:83:ae:f2:fa:a7:64:29:17:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:46:5A:70:2F:9A:5E:B2:C2:9C:C5:AA:D1:EA:84:54:E3:2A:67
X509v3 Authority Key Identifier:
keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6b:65:89:de:a5:d5:73:cd:2e:d9:1f:6f:7f:d0:5c:fe:50:
d9:7f:cd:78:b3:25:ad:90:79:e5:02:b9:fb:f0:a6:63:16:0f:
a1:0b:99:0d:cd:42:d1:53:b1:44:2b:9d:5c:5d:f4:8a:70:9a:
8d:e1:1f:86:f5:fa:ca:b1:a4:69:10:c8:97:eb:c5:c4:cf:0e:
3c:d0:a2:eb:c2:09:e2:4f:36:3f:f2:0a:9a:8b:ba:e9:de:7c:
39:41:69:ee:f3:97:92:38:a8:30:10:70:21:e9:4e:a5:28:31:
ff:4c:6c:dd:9e:13:18:4f:e5:f0:24:d8:34:95:79:eb:b1:73:
c8:89:86:cc:63:fe:8a:6a:c3:85:21:98:30:0c:11:da:10:1b:
32:66:fe:a6:e4:1a:5a:06:d6:74:ac:e1:b6:b2:bf:4e:fb:40:
ce:80:ec:bc:83:8a:3c:59:c2:b4:12:44:60:65:39:8c:ae:a0:
07:5c:dd:b6:6d:f1:b1:f3:bf:81:dc:f6:6a:88:5d:95:3f:91:
61:2b:d2:2f:4f:17:c6:e1:c0:a5:1f:34:00:2c:ee:ed:0b:ca:
d3:81:d5:31:f7:cb:9a:eb:45:af:89:39:e2:d8:64:b6:6c:db:
91:b4:29:8b:82:5a:8a:fb:e9:91:c5:aa:65:f0:cd:80:56:db:
e2:0b:ca:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4
NUI1MDBFQzcwHhcNMjYwNDE2MTcwMjQ1WhcNMjYwNDIzMTcwMjQ1WjAYMRYwFAYD
VQQDEw02OWUxMTYzNS01MjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjbHHWQJPJia6COoE8RntI9zCwN/7NJZxPeORbrLeBP7HTm0wnzjO/Q/SPUh9
MutFuBL6JIzCUvI/0dYiNNGabiZ6UgWMZQ3lDrq6HFC96s286xopy/nBIL1UGueP
qJ+HBdCByjz+PrK7r1xXGwEcBmBppqgPeqL31UM+0D7/9gW3THATPPQyxpmgOO58
rhhyAkXty2hWhsbKA/4KcCfLR+Z8gqH50wohtDEa4ECbGUMGpfEyWJ3Wuv8kdN8V
e+wHR/Njr2uZC+QPNTXDSwrzm/pIQq/x1Jcc4flotiUnWRmdDo3oPCn0Hg1RqxZ7
wfWHfC9XFNqrg67y+qdkKResjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkyRlpw
L5pessKcxarR6oRU4ypnMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4
M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp
dzZOY2NCeUhaYWFGdFFEc2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAimtlid6l1XPNLtkfb3/QXP5Q2X/NeLMlrZB55QK5+/CmYxYPoQuZDc1C0VOx
RCudXF30inCajeEfhvX6yrGkaRDIl+vFxM8OPNCi68IJ4k82P/IKmou66d58OUFp
7vOXkjioMBBwIelOpSgx/0xs3Z4TGE/l8CTYNJV567FzyImGzGP+imrDhSGYMAwR
2hAbMmb+puQaWgbWdKzhtrK/TvtAzoDsvIOKPFnCtBJEYGU5jK6gB1zdtm3xsfO/
gdz2aohdlT+RYSvSL08XxuHApR80ACzu7QvK04HVMffLmutFr4k54thktmzbkbQp
i4JaivvpkcWqZfDNgFbb4gvKfg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:00 2026 by rpki-client