
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier: qbIRz9dlEpeMrV+mGWfRQOufJfsaVPjF0rRwjxRza9M=
Subject key identifier: AA:70:23:38:57:15:35:F2:A4:AA:0E:E8:92:C9:42:86:ED:4E:94:FD
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number: 01C7
Signing time: Fri 17 Apr 2026 03:27:34 +0000
Manifest this update: Fri 17 Apr 2026 03:27:33 +0000
Manifest next update: Fri 24 Apr 2026 03:27:33 +0000
Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: BKeAkQjWta6YMqSV+jdu3aWdCObDKXA/kR4h28n3v84=)
2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Validity
Not Before: Apr 17 03:27:33 2026 GMT
Not After : Apr 24 03:27:33 2026 GMT
Subject: CN=69e1a8a5-8d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:bd:0b:d3:2f:e2:15:90:36:0c:95:4f:1e:
41:31:9a:ce:4b:9d:1a:74:fb:13:94:cb:62:89:5b:
be:07:60:d9:0e:34:f9:f8:78:36:7b:b2:4c:04:fc:
7c:a2:76:15:08:55:94:68:d3:c7:fd:ce:0f:cf:b8:
e0:42:f3:47:b7:51:5f:31:0d:a6:fa:c3:7e:16:c7:
63:e1:e3:a8:ce:c6:98:7c:fa:da:f6:f7:d2:32:bb:
f9:4f:ce:24:27:b7:0d:dd:f0:fa:50:a9:49:8c:c3:
c6:8b:16:c8:d5:66:44:1b:b5:d1:17:12:bc:8f:58:
70:42:e7:b6:77:4e:4b:c9:38:a4:d9:4a:77:cc:8b:
6d:67:31:24:c4:59:ec:20:bf:4a:a2:9e:44:2b:13:
86:a5:cd:4b:e8:0e:da:1c:40:bc:0f:64:0a:5b:fc:
12:74:29:9b:59:11:a9:f6:69:96:39:b7:13:df:d5:
7e:69:d6:f2:9a:34:fb:c2:85:cd:4f:1d:09:a1:07:
e9:4d:fe:a6:2b:f2:c1:f7:1b:f5:15:2e:06:a2:1e:
ce:d4:c9:1f:1b:78:66:c5:5b:d4:49:24:a6:bf:c8:
88:84:fb:46:50:3c:f5:30:91:11:45:ee:f9:da:4d:
07:31:ac:6f:af:9c:ff:9a:3c:b3:de:7c:f2:24:a6:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:23:38:57:15:35:F2:A4:AA:0E:E8:92:C9:42:86:ED:4E:94:FD
X509v3 Authority Key Identifier:
keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:03:ef:cd:f2:5b:c1:96:35:4f:3f:c1:94:71:dc:b6:2b:35:
f1:9b:7c:c7:3c:b5:a3:b0:4f:94:2b:45:52:55:be:6b:65:2e:
23:fd:37:0e:e4:c1:0c:c0:9d:17:b0:ea:a2:db:f5:33:b8:b1:
59:7a:9c:55:ee:b5:33:9f:a9:98:61:bf:05:39:b9:fc:e8:6f:
2a:8a:47:aa:74:4a:44:aa:21:af:b5:e9:2a:9e:31:26:bb:55:
e9:e9:16:05:ff:9b:93:c9:01:81:96:16:ba:ca:5c:e0:c9:65:
ea:bb:81:02:87:4c:b1:75:ea:bd:83:f1:a0:c9:5d:cc:33:a5:
fc:b2:d3:64:ae:2d:bb:4e:71:88:c5:81:f3:61:c5:da:6c:d5:
53:3d:f1:8f:22:85:93:55:de:ef:fb:0a:60:b4:2b:0f:12:5c:
82:69:bf:82:62:be:a3:8f:28:22:78:e6:12:ff:71:39:e4:35:
12:ab:e3:43:d4:be:5f:8e:89:2a:d3:44:ff:87:1a:7d:2b:61:
c2:42:56:54:48:70:a0:3e:2d:f9:65:30:1a:3c:01:8d:ab:b4:
3a:10:84:f5:94:48:f1:8a:15:01:1a:b7:8e:56:a5:9b:c5:99:
6d:39:42:e3:5e:8d:f3:5f:a2:8f:69:e5:81:33:84:2e:44:e9:
51:ab:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:26:49 2026 by rpki-client