
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json)
Hash identifier: fl7MKme0zWsIU5taM9K+eQfEBNBh476FmqL4VkbPdRM=
Subject key identifier: 83:13:5B:44:F8:3E:73:0C:D4:25:29:E2:24:12:9E:C9:91:13:9F:30
Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
Manifest number: 95
Signing time: Sun 19 Apr 2026 07:05:30 +0000
Manifest this update: Sun 19 Apr 2026 07:05:30 +0000
Manifest next update: Sun 26 Apr 2026 07:05:30 +0000
Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: pbYKFUYecr15ZPwbm36mj1vXGUhkHWJT25/qtQNPHlM=)
2: 4DB1CEBCF44311F08E818BA85F6F56BC.roa (hash: 28TOJyzIUoQ+gHS12Ia30yDze1P2PrrZaNrtbhDyvQI=)
3: 85B52606F44311F089BA68A95F6F56BC.roa (hash: Ex29dRzH8LkzDGimmK0Vm7ywjUej+dvGo6cnaEEBQnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Validity
Not Before: Apr 19 07:05:30 2026 GMT
Not After : Apr 26 07:05:30 2026 GMT
Subject: CN=69e47eba-c44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:9f:b5:38:f7:f4:e8:e5:ef:91:a0:c9:5e:
ed:55:71:a0:2c:fb:0c:88:aa:01:48:7e:75:11:31:
fe:71:3c:58:5c:66:c7:eb:ee:ff:b8:0b:20:c9:5f:
e2:14:cf:5e:17:7b:1b:6e:00:84:4c:a6:59:83:e9:
58:1a:42:dc:2a:3b:55:39:c2:4d:37:ec:65:6f:cd:
de:c1:4d:74:5a:1d:7e:55:d3:08:c4:52:d4:0f:ac:
72:cb:5c:87:b1:a6:95:f1:15:ae:a3:a8:ca:c9:12:
c4:46:4d:3a:25:f6:fc:fc:4e:71:e7:ca:3b:cb:7a:
7f:b2:60:62:e2:34:ec:17:21:95:5c:c3:3a:d9:5f:
e2:10:04:77:94:ba:c5:81:44:42:89:0e:db:dc:14:
c3:9d:c0:f5:ab:8c:6d:3f:76:e1:14:5b:4e:bb:2c:
21:f7:a3:4f:0b:d3:d7:bd:05:fb:ca:13:93:5b:e0:
c2:2b:c6:a6:f3:9c:36:51:49:2e:8d:02:f5:c8:41:
30:f3:25:e4:6e:f7:b2:7a:0d:c5:12:3b:d5:9c:e6:
55:b3:a1:37:68:1d:5e:04:3e:6f:a2:94:0e:32:fd:
23:21:b0:aa:46:11:5b:6d:4b:94:46:cb:f4:c8:8d:
90:3c:a1:2e:96:78:97:c7:7a:d7:90:4e:a1:88:64:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:13:5B:44:F8:3E:73:0C:D4:25:29:E2:24:12:9E:C9:91:13:9F:30
X509v3 Authority Key Identifier:
keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cf:ac:40:34:df:e6:4a:ab:52:64:2b:90:22:0f:45:91:66:
2c:c2:d6:f6:c2:56:de:fa:9f:87:d9:b0:05:79:c8:81:6f:1f:
3c:a4:0e:1a:61:ca:f2:dd:d8:6f:ef:0f:ff:be:e2:53:e5:e6:
5a:d2:52:82:d6:09:65:36:1a:9d:24:60:c9:12:6e:51:7c:d2:
30:70:19:74:d0:e7:be:81:39:c5:da:d9:7d:04:9c:13:3d:d6:
6f:a9:9b:dc:9d:49:99:dd:5b:b2:5a:25:2f:8c:93:3f:05:bf:
46:4b:dc:3d:fe:89:72:7d:65:15:65:80:0f:cd:16:65:a8:e8:
e1:98:74:46:22:41:df:c2:2e:c1:24:9c:d7:f2:72:97:a6:e0:
c2:0f:99:c9:24:94:df:3d:c2:67:c1:ad:fb:7b:72:5a:3a:dc:
c8:f5:6c:80:4a:43:80:22:75:0f:52:c4:71:13:30:5a:d8:22:
aa:70:ad:36:a9:a1:0c:90:a4:c8:88:a2:2a:63:45:2b:0d:38:
47:83:a6:e9:1d:d4:a4:b3:8f:86:88:dd:21:91:5d:4f:80:04:
c4:20:fc:26:c5:50:09:3f:a7:0c:4e:9a:13:a7:ba:9f:24:b5:
cf:04:e3:ab:61:94:d1:fb:fa:2d:23:dd:43:31:9b:bb:f2:90:
03:f3:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:15 2026 by rpki-client