
$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File: QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier: ps1fKbbb42dJ/0/elPCEdZnvdRobYpVlh7kYM3COytY=
Subject key identifier: 59:7C:25:62:35:E2:6B:1C:C1:DF:E3:C2:4F:5D:AC:7B:90:D3:24:89
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer: /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number: F1
Signing time: Fri 17 Apr 2026 06:03:38 +0000
Manifest this update: Fri 17 Apr 2026 06:03:38 +0000
Manifest next update: Fri 24 Apr 2026 06:03:38 +0000
Files and hashes: 1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: GEYpviIwusi5O3vZ5Wy5gYscG7MqU9vWMUlRwlH/68k=)
2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: tykKMCNyhL8YIODSIbVTOG4k2NzgIkvRLrrP9k8uYXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Validity
Not Before: Apr 17 06:03:38 2026 GMT
Not After : Apr 24 06:03:38 2026 GMT
Subject: CN=69e1cd3a-cc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:18:97:8e:bf:cc:b4:36:f9:a6:f4:fd:26:
0d:99:af:79:fb:80:f3:40:ce:fa:0e:79:e5:78:df:
3e:bd:61:63:e7:f5:95:b6:71:77:2a:8e:35:17:24:
4d:04:0b:36:55:03:ed:dc:1a:27:42:cc:a9:52:27:
88:6b:fb:e6:48:9a:fa:c6:bb:1f:af:52:38:5e:96:
b5:f8:da:4b:25:0e:c5:11:42:cc:7a:43:3b:0f:31:
d1:dc:2e:f4:d1:2f:23:99:16:18:99:b6:e6:2c:61:
9e:18:22:4f:bf:b6:23:87:fb:27:d6:04:d3:c4:08:
0f:03:f0:b2:f0:06:ed:4b:8e:26:55:33:d3:2b:92:
9f:a8:61:53:1f:0a:7b:ea:65:77:85:5c:3d:32:40:
8f:df:02:c8:8e:a5:00:29:c5:eb:82:0b:9b:79:4a:
e8:20:5f:a0:ab:0c:aa:8f:7e:94:af:ee:ca:23:ac:
6c:a5:11:7c:c4:ca:69:52:73:36:58:db:49:96:e6:
65:4a:0f:a3:4a:b0:ad:16:4b:c8:f7:0c:c6:99:69:
ee:e3:c3:ad:d9:51:e5:ac:77:4d:27:51:86:22:c3:
ae:48:91:98:c7:6e:98:db:ec:35:4e:ca:08:77:bb:
46:38:3f:17:54:97:da:07:13:89:52:1a:64:ed:66:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7C:25:62:35:E2:6B:1C:C1:DF:E3:C2:4F:5D:AC:7B:90:D3:24:89
X509v3 Authority Key Identifier:
keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c4:e3:60:ac:87:4f:e7:4f:9a:05:27:e3:58:9b:97:33:e0:
17:a8:f0:88:ad:7e:df:50:1e:e1:46:c0:7e:31:75:59:40:81:
3a:5d:14:8d:a3:4e:af:6e:a8:0f:0b:d2:ee:d2:3d:e3:1f:3b:
85:64:09:82:d0:7c:1d:34:f1:36:a4:87:71:9f:d2:75:ff:bb:
46:b6:93:6b:56:ff:75:11:a8:9f:44:a7:94:f9:68:2f:9f:06:
1a:54:48:43:4d:0b:c0:28:74:31:cc:5c:5f:af:65:f0:e6:f6:
d1:32:e8:90:47:a1:4c:d6:32:98:72:4d:0e:7b:8b:24:1b:78:
2d:46:3c:03:bc:8d:47:b0:95:a3:79:43:5b:f1:a3:3f:5a:1d:
5e:6b:9e:33:a5:f8:6d:c5:1c:31:bb:e2:cc:62:4d:97:e8:61:
51:48:68:df:96:22:a4:dc:f8:ae:54:88:51:ad:ab:d3:2b:0e:
22:d8:4b:87:40:06:c4:f2:6a:59:aa:d0:e5:df:f3:05:a0:b1:
53:ab:fa:22:0d:42:d0:bc:73:d7:34:a5:c0:22:b2:cf:e5:d8:
42:b1:de:da:06:7a:88:02:1a:83:9a:5d:88:0b:3d:e4:fc:6d:
90:f0:25:e4:0a:b6:92:b6:58:73:43:91:6f:e4:18:fa:eb:a6:
a7:0b:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:49 2026 by rpki-client