
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier: zymB8sqzQlsBH7qmCT91OUhvOdXWoI8nGQTBLSAAwog=
Subject key identifier: 50:D2:01:C6:0E:0B:AF:12:27:78:15:BC:D7:19:7B:AB:2F:75:EF:64
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 088A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number: 07D4
Signing time: Thu 16 Apr 2026 22:10:53 +0000
Manifest this update: Thu 16 Apr 2026 22:10:53 +0000
Manifest next update: Thu 23 Apr 2026 22:10:53 +0000
Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: Sky2rERX9msK25ra1pg9bOPVhnqYC/xdYCNggM3BrTw=)
2: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: Lm/etLW+a8iA8U3fIGSLVJlAVzOtMN4HXySfF1Iy9aw=)
3: 632982C478E411F0B36C2173C4F9AE02.roa (hash: UtqQafx0h06qwOypkuCDjZ74Np/tgEr24FgtNODhVKE=)
4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: kyKxV3VQw07XD8uKTIJt+ZdfuJMUmQwq1AHH7KKutYc=)
5: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: iQfhc9O2c/j6hNKmqolyh0eDzRYj6oaCAwEBH6T74Jw=)
6: 03BA8B36824411EF94479387C4F9AE02.roa (hash: 7saA9eD4Xel2+PqxmlA+ByvWIztbk9nQa5McF5WCrKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Apr 16 22:10:53 2026 GMT
Not After : Apr 23 22:10:53 2026 GMT
Subject: CN=69e15e6d-b7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:1f:28:0b:51:98:a8:08:78:5d:51:a0:2e:
e5:d2:85:7f:66:8e:28:3b:21:14:f8:02:ba:9f:d9:
4c:35:6d:88:42:47:54:5e:31:19:0d:9f:be:e5:dc:
5c:bf:dd:0f:90:72:23:6c:28:47:b9:2a:10:33:5f:
72:ff:9c:d4:9f:75:6d:a4:df:c1:5c:17:d9:54:6b:
e5:a3:ef:a2:a4:4c:04:09:08:a4:1f:a2:35:35:52:
15:9d:9a:39:62:ab:a0:cc:a0:41:f9:94:c0:90:3d:
e5:34:c8:5c:15:e9:78:39:2f:34:fe:56:84:fa:85:
1b:13:19:d1:b9:e7:f8:d1:dc:34:bb:d1:6d:e5:95:
72:24:de:ed:f6:47:88:88:d4:a9:15:93:b7:8d:dd:
c1:5a:2d:1a:25:8a:1f:0f:fb:4b:02:34:7c:0a:ed:
25:f9:d4:67:08:1e:16:55:5e:7e:9c:ff:6c:aa:9e:
8f:fa:22:16:31:23:1c:41:41:48:e0:82:ea:47:ff:
8c:33:74:4a:0a:32:70:0f:88:4c:bb:48:fd:10:1f:
d1:cf:9c:dd:22:b3:99:1e:a4:98:da:4b:3a:93:8d:
2b:8c:55:ba:3b:a6:04:3e:13:ef:7b:4e:40:10:cf:
37:5b:86:60:4b:7e:6f:c4:f6:ce:4e:c0:83:42:7e:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:01:C6:0E:0B:AF:12:27:78:15:BC:D7:19:7B:AB:2F:75:EF:64
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:c9:fc:aa:e6:bd:27:55:1c:3b:27:2c:cd:6b:70:4c:54:1a:
83:10:9d:eb:59:a7:35:7e:9d:31:b1:07:05:4a:90:e3:eb:9d:
98:78:77:9e:44:2f:fe:36:81:fe:8b:58:18:8b:d5:b1:8d:71:
75:88:15:1d:83:c6:f0:31:31:e0:12:4c:3f:4a:78:b8:3e:0a:
8e:41:80:75:b6:0f:86:25:6d:83:3c:c5:6a:8c:4e:58:11:0c:
30:05:bb:79:07:ae:15:b2:61:bf:b7:d7:0b:45:d7:f8:6b:c2:
9d:8f:15:d6:a8:50:f4:8d:8d:3c:aa:c0:76:d3:18:6e:d5:ed:
3b:41:04:32:af:8b:48:01:6f:dd:32:a6:a4:24:15:dd:31:04:
ea:fe:80:8c:2e:db:db:2d:26:f5:68:6e:6c:18:e8:4f:31:90:
58:3a:2b:d9:19:ff:77:1a:38:1f:c3:bc:55:33:9f:02:78:4c:
bc:11:8e:72:90:ea:f8:a1:dc:ef:06:f9:46:a1:04:b9:7c:11:
0d:4c:ad:57:0b:46:41:64:cf:05:7d:b9:e0:24:fe:95:42:9e:
e0:c7:0b:36:aa:b5:06:f9:62:f5:c6:52:ca:30:a2:2a:9f:b1:
bb:e0:b5:20:64:de:a6:99:1d:9f:66:74:f4:99:4d:30:fb:a8:
f6:de:1c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:32:46 2026 by rpki-client