
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json)
Hash identifier: ZCAUvF2AujHv10/lCgY1fOActffIZn/UhV3ZgxLijIU=
Subject key identifier: 25:61:43:20:A3:41:39:39:00:BC:2C:BC:A2:18:E4:D1:CC:EE:25:90
Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Certificate serial: 066A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
Manifest number: 065F
Signing time: Thu 16 Apr 2026 22:33:45 +0000
Manifest this update: Thu 16 Apr 2026 22:33:44 +0000
Manifest next update: Thu 23 Apr 2026 22:33:44 +0000
Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: dYYJN4UwG9KgLtsp6kPq0eKI9N2an1BoWCgul/7wrLg=)
2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: RpPhdY8+tXmNKm2CO6PsrLMjG0gZZmTjNB6euQu9tho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Validity
Not Before: Apr 16 22:33:44 2026 GMT
Not After : Apr 23 22:33:44 2026 GMT
Subject: CN=69e163c9-4f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:cb:1a:63:0a:ae:42:0c:eb:d5:73:a4:48:
4c:66:95:0b:7e:05:6b:06:f9:42:2f:26:c3:8f:0e:
e2:43:52:2c:1f:b7:5c:ec:16:72:0f:b0:da:05:ee:
0c:20:8a:82:e2:78:45:a0:99:ad:5c:50:51:07:00:
04:6c:97:c9:d8:76:bd:87:14:74:5e:fa:48:8c:dd:
aa:1d:a7:0d:fc:ce:fd:c7:97:a4:84:ab:75:ca:56:
7d:96:ff:3d:e7:c7:31:26:03:6d:9a:91:0b:aa:4f:
20:da:bd:06:ac:df:cb:0c:5c:d4:8d:f2:fc:ec:8a:
75:6f:0a:55:df:7b:06:6e:e8:dc:55:ab:3a:4f:e7:
cf:d1:f6:96:68:bc:78:62:0b:f4:b8:d0:cc:77:16:
9d:e5:5a:91:c5:41:6b:7c:2f:4c:06:10:ae:79:67:
ab:df:8a:66:27:d2:0c:eb:da:91:13:b8:3b:1f:96:
11:48:22:04:69:eb:cc:e4:44:dc:31:15:1a:d9:b2:
47:8a:a0:ab:1f:cc:63:64:70:96:15:5e:3f:78:dd:
04:b1:15:19:f8:1e:5e:b7:24:86:77:b3:d1:d2:c2:
6e:19:28:4d:65:6c:44:50:00:1a:c8:f4:c7:41:18:
43:79:c9:b1:76:ec:6d:3e:a5:b9:bf:01:95:74:d1:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:43:20:A3:41:39:39:00:BC:2C:BC:A2:18:E4:D1:CC:EE:25:90
X509v3 Authority Key Identifier:
keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:bb:52:89:bd:70:75:da:79:8e:bd:58:d0:64:e9:77:d2:62:
d2:6e:19:45:cb:d9:f2:bc:5b:c5:37:ed:fa:90:95:03:6c:b7:
0b:a1:84:fb:78:a0:83:5a:e6:78:6a:0c:c1:0d:3b:fa:19:12:
0a:51:4d:a3:1c:4e:2d:7a:38:be:29:ad:be:c3:a4:20:61:23:
bd:bc:3c:9e:55:c8:73:ce:0e:03:95:c9:c4:84:bc:5f:63:20:
85:ef:07:9e:00:0f:78:df:c6:9a:56:34:48:15:73:fe:c2:dd:
af:46:7a:c8:86:ab:86:cb:32:5b:01:58:8d:c5:73:ff:5b:f7:
49:0d:ee:10:9b:b1:71:e7:77:e4:d0:68:c7:fb:78:64:18:f2:
c6:7d:8f:22:4d:4b:3f:fa:b8:6e:6a:3f:70:6c:8c:b4:f8:df:
5f:ad:9e:d3:e4:dd:83:8a:db:3a:2c:96:40:4b:7f:3f:34:c9:
c9:6e:09:11:9b:02:3d:70:2a:5f:5f:16:b6:4c:07:0a:7f:7f:
92:42:f5:cb:6c:1d:78:8d:3b:9e:9e:1c:04:10:3e:62:a1:34:
7d:88:8f:0c:f0:87:d3:22:c3:fa:4c:bf:f4:ec:7d:94:f1:56:
61:e5:9b:a2:2e:a5:30:d4:b8:66:bb:1e:a9:56:12:f0:2c:b2:
e0:9b:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:11 2026 by rpki-client