
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier: 3u6Cq88z6LENCSTfojdAi14iq9QnshQAlh6u3lyUttc=
Subject key identifier: 8E:7A:83:48:A7:2A:B6:95:40:7D:3A:4B:41:85:D4:A3:77:6D:A4:67
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer: /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number: 0229
Signing time: Wed 15 Apr 2026 02:37:11 +0000
Manifest this update: Wed 15 Apr 2026 02:37:11 +0000
Manifest next update: Wed 22 Apr 2026 02:37:11 +0000
Files and hashes: 1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: jJbUcNDRUReSmJV/00lY+vKmt+srYq4xHkKdfrfw4EY=)
2: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: Hhuce/k2Nig26k0PhaoBK79YcGuzei5AcpeXnj1kphs=)
3: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: /3te3zobVZswJsFFIn071Wgbe9BzUFq7AKG46skLDvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 02:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Validity
Not Before: Apr 15 02:37:11 2026 GMT
Not After : Apr 22 02:37:11 2026 GMT
Subject: CN=69def9d7-4642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:5d:30:03:db:76:fd:d5:a2:e9:cb:94:75:
82:de:24:14:5e:a6:79:cb:0b:0c:f6:ea:14:72:98:
fe:d3:eb:56:6f:eb:91:dc:97:06:fb:4d:b6:ea:99:
7c:8c:dd:39:57:02:3a:13:c4:da:54:df:69:db:a3:
4d:94:97:f3:6e:cc:32:58:ce:c3:a0:c0:62:18:49:
f8:63:32:37:38:c0:13:da:67:6e:cc:b8:fd:f8:fa:
ad:ce:69:15:3c:e8:15:ae:f3:a6:77:0d:b0:84:47:
a5:dc:b8:a7:02:0e:10:0d:bc:87:4b:3a:ad:df:fa:
aa:78:49:51:c3:82:44:a5:45:37:55:cc:2d:b1:19:
2c:d2:4a:cd:b0:0d:cc:99:2a:a3:af:b5:45:9c:6e:
b3:d7:85:a3:93:18:66:75:f1:ef:4a:a7:41:de:cd:
34:29:6f:14:6f:1d:ae:aa:1d:9d:b2:52:ce:cc:d5:
fe:56:47:74:8c:26:d8:41:7c:a2:5f:a2:0e:05:cb:
6c:8d:6c:7f:0e:85:41:42:db:cc:7d:75:08:bc:f8:
43:a0:cf:94:7f:ab:6e:4f:52:20:bc:77:a0:17:01:
2a:7a:00:e4:cf:51:07:7c:3b:a7:2a:86:17:b1:28:
e6:e1:a8:aa:1c:ce:52:8f:31:de:2e:e1:62:a9:fb:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7A:83:48:A7:2A:B6:95:40:7D:3A:4B:41:85:D4:A3:77:6D:A4:67
X509v3 Authority Key Identifier:
keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4e:7b:7b:de:b7:01:a0:d7:f0:84:c3:30:82:72:48:0f:da:
7b:c2:50:24:88:3d:06:85:e6:e2:1f:45:54:6c:6a:19:64:ab:
1e:da:05:b5:87:26:8b:55:87:6f:45:c8:a2:92:23:6c:f4:fa:
e9:6a:ce:04:e9:a0:4c:53:40:8c:6e:0f:f6:29:9d:eb:50:12:
86:a0:d0:70:bc:a0:c0:39:68:af:b6:36:ad:9d:64:b9:be:eb:
f7:24:e5:6e:52:3c:22:5c:f8:b3:a9:e5:43:84:06:10:ab:e8:
35:b4:90:43:b1:1d:8c:31:c6:0b:68:b7:fd:2e:85:72:fe:dc:
8d:e8:75:68:88:c3:16:22:73:01:74:3f:e4:a3:f9:49:65:e8:
d8:77:98:a4:9e:2b:a8:d4:2e:cc:c6:0c:05:5b:c9:1c:23:4d:
4e:44:22:79:ef:67:95:9f:fd:ed:92:a4:4f:2a:f7:02:52:36:
d1:65:c7:7a:33:ed:37:06:bc:6a:90:ee:a4:95:33:cf:2f:ef:
d0:b6:8e:e3:f1:27:58:4e:21:72:89:e2:f4:b3:74:e8:60:3d:
7b:53:f8:d1:91:2f:65:1b:ee:39:69:b7:f1:8e:00:e2:8c:c2:
28:9f:14:5a:a2:64:07:ca:b4:aa:0c:c8:8b:73:48:8b:3c:ee:
4d:44:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:41 2026 by rpki-client