
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier: ZJM8eMl6Jhht9HH0ZXUK0e83MzewEuYT9Z2o43p5alY=
Subject key identifier: 2F:BC:93:C5:C5:77:19:F6:BD:36:2F:E2:25:99:BE:B5:D8:EA:28:87
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial: 0288
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number: 0286
Signing time: Fri 17 Apr 2026 01:33:07 +0000
Manifest this update: Fri 17 Apr 2026 01:33:06 +0000
Manifest next update: Fri 24 Apr 2026 01:33:06 +0000
Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: dWo5SGRZRRKMKoi64V9eQAAqeIDEfpvuS7vi4VfQzMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Validity
Not Before: Apr 17 01:33:06 2026 GMT
Not After : Apr 24 01:33:06 2026 GMT
Subject: CN=69e18dd3-2e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:03:f6:65:81:c1:ad:9c:9a:5f:0e:15:f5:
5e:fa:4d:2f:7d:db:a4:0e:5b:24:c4:18:b9:6c:69:
25:e1:77:f1:06:a3:9c:b7:eb:eb:11:78:68:97:60:
17:b4:48:e4:f6:ab:be:8c:9f:cf:ee:28:6d:7e:f4:
d6:86:4e:79:41:04:bd:13:6c:ad:7e:a1:2b:fa:82:
aa:50:6c:5b:f2:3c:d2:cf:67:d0:f5:eb:43:c4:3a:
e3:07:f0:94:ad:02:02:73:b8:f1:ec:76:21:b7:7d:
d5:bb:2f:3a:a2:f2:dc:cb:42:a9:bf:2b:05:a4:bf:
2b:a9:96:c8:54:8a:ed:8a:67:8e:b9:1b:fa:a8:b6:
5a:da:bd:7c:71:89:16:dc:fc:51:60:63:61:b0:9e:
8f:21:c9:92:d2:5c:e3:44:ff:99:92:00:ee:f0:e5:
95:39:f0:4e:8e:78:78:c2:e7:2a:4f:fe:48:3a:6c:
5e:39:6c:50:4a:23:8f:67:e2:66:b3:42:53:ba:88:
6d:4a:a7:51:a4:39:13:82:14:c2:f9:87:80:93:62:
be:5e:04:93:ad:5b:3e:57:79:5d:4a:58:a8:62:0c:
e1:75:ca:6c:b2:5e:45:1f:d1:db:b0:2a:8d:47:54:
3c:4d:9f:c5:a3:a4:78:f8:2c:31:58:c3:f2:2b:61:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:93:C5:C5:77:19:F6:BD:36:2F:E2:25:99:BE:B5:D8:EA:28:87
X509v3 Authority Key Identifier:
keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:64:0c:00:2c:e1:3a:4a:c7:b3:6e:a6:6f:2a:a5:fc:7f:f9:
98:c0:56:ae:44:bf:29:a1:77:23:15:bf:4b:78:41:5f:3a:13:
18:bd:29:ab:1b:0c:fd:76:b9:38:dd:85:31:54:cb:76:95:31:
60:75:53:3d:f0:ba:d9:c8:46:ea:ba:06:2b:d7:5c:4b:fc:64:
fe:b0:a7:cb:57:dc:a0:45:dc:4e:2a:51:e3:bd:c6:6b:62:55:
23:c3:d5:dc:0f:79:91:99:0b:4b:bc:f3:86:b0:74:54:d0:7e:
08:ec:55:be:a8:81:70:c3:c7:e3:68:71:53:63:72:6b:ad:1d:
49:e9:ea:f1:bf:8c:8b:7e:4e:d8:b8:76:d5:f4:b5:57:ad:b3:
13:19:e7:b6:cb:6a:7d:b5:3b:a7:60:49:ca:21:53:00:2a:c3:
09:2e:39:4a:b0:36:31:47:79:dd:8b:d5:54:de:ab:3c:e6:0d:
f3:29:04:55:eb:c5:5b:dd:f4:1e:63:de:c7:26:e7:6a:03:38:
1f:84:f7:84:a0:3d:8b:bd:22:2c:08:d9:1c:d9:fd:09:6b:2c:
27:b8:7e:65:36:a9:2e:f8:ca:7e:a1:f8:3e:f2:65:6a:14:f6:
fa:91:3e:ee:b5:29:b4:d6:a9:8a:0c:63:85:d8:2f:e3:99:a2:
a3:46:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:12 2026 by rpki-client