
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier: eemJJ0jbEeNDgWkNDUmNrdNjSoEgQGXriB/gioNcW6A=
Subject key identifier: 6E:1F:25:40:51:E2:FE:63:CF:96:D1:2D:3E:88:7C:7B:7C:E0:24:37
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number: 012D
Signing time: Fri 17 Apr 2026 05:19:01 +0000
Manifest this update: Fri 17 Apr 2026 05:19:00 +0000
Manifest next update: Fri 24 Apr 2026 05:19:00 +0000
Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: tcarJAWS72CBo2ODhQBRiEzB1OO0qTadzkwtpgjCEuA=)
2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: BsUN/x3WheMuDM+8ji5PasFXfHjRNRnwP8p4d3XtEUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Validity
Not Before: Apr 17 05:19:00 2026 GMT
Not After : Apr 24 05:19:00 2026 GMT
Subject: CN=69e1c2c5-c0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:c0:4b:b6:3d:b8:2d:4d:72:99:60:35:85:
f6:72:00:46:d7:19:a3:c6:4f:2f:1b:23:0a:4f:7a:
c5:82:18:a9:38:fe:07:ee:59:f4:8a:2c:e1:9b:eb:
ca:6d:9e:52:b7:58:82:c7:9a:7a:5c:90:9f:75:8b:
54:0a:73:79:c7:3d:09:35:23:b1:5a:5b:58:12:e4:
6b:9d:c0:af:e7:d5:b6:bb:80:f6:11:7f:f5:9a:71:
8b:83:07:71:11:2c:0e:d3:0f:4c:83:d6:ab:45:b3:
4f:74:57:12:96:2f:16:7d:23:cb:aa:1e:97:83:09:
81:84:cb:e3:a3:44:b9:25:00:58:e8:f0:46:1a:e7:
79:d7:3f:85:a6:e6:18:48:91:a5:3d:c8:2f:62:5f:
87:b9:06:82:74:41:c8:a7:65:10:66:db:ae:63:7d:
a1:5e:11:e6:61:91:68:f0:27:05:29:4c:ad:3b:27:
15:ff:8d:9a:3b:44:fc:b3:88:24:9b:fb:8f:38:dd:
83:8a:20:ab:af:0c:81:66:1f:52:20:dc:9f:16:1f:
04:d9:e3:7c:c9:1f:2a:90:3e:d2:f2:35:bb:d2:78:
21:5f:44:97:31:cb:58:c7:7e:15:02:6b:0c:2d:0e:
75:77:8c:fc:e2:48:f0:e2:0f:39:91:f2:eb:34:ea:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:25:40:51:E2:FE:63:CF:96:D1:2D:3E:88:7C:7B:7C:E0:24:37
X509v3 Authority Key Identifier:
keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1c:fc:b5:34:aa:18:1e:ff:2d:cf:25:bf:b1:e8:25:65:55:
07:e1:e1:9d:db:3a:0c:35:ee:c8:d0:e4:bb:ef:97:22:7c:ad:
d5:1d:73:f2:bd:57:36:d4:31:9f:18:f3:1f:26:a0:f8:cc:a5:
df:78:b2:43:1c:31:b9:b6:0c:be:e6:0a:16:7a:46:fd:1d:c7:
e7:93:1f:1a:0f:67:5e:4f:04:b4:e1:84:a6:7f:0f:d6:a4:a0:
f6:03:21:d6:40:99:33:e6:a2:bc:8e:ac:24:53:cf:8c:99:66:
3b:fe:6c:31:7b:f5:72:15:90:ef:73:6a:4c:f9:7c:7c:23:27:
32:0e:e7:e1:7c:be:1d:d3:a7:09:0f:6c:8f:fd:8d:96:19:0d:
d6:dc:95:73:dc:b2:9c:79:80:5d:6c:cc:ce:56:70:ce:ba:f0:
40:f2:fe:23:d9:fa:d2:a9:d1:66:a9:fa:b4:8a:a3:2d:4b:37:
06:4d:da:cb:3c:c6:0f:c6:e5:0c:89:8f:09:fd:14:6a:09:7e:
38:2b:d4:6c:12:1d:3f:be:ac:fb:79:9b:ac:66:45:ba:3b:c0:
ee:95:5e:6d:68:a0:fe:c1:3b:de:37:49:9d:6e:38:40:36:28:
d3:e3:73:95:85:9f:72:fe:31:61:54:4c:29:d7:38:8a:97:20:
62:7c:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:25 2026 by rpki-client