
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier: M4AogHcMZrXjp3G8P3IvAQ5xiaoTMD4Yac7rfdFBJ0g=
Subject key identifier: D8:EA:CB:C2:17:DD:48:66:21:00:E9:C9:73:7E:FD:EE:0C:45:29:A2
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number: 010C
Signing time: Fri 17 Apr 2026 05:40:39 +0000
Manifest this update: Fri 17 Apr 2026 05:40:38 +0000
Manifest next update: Fri 24 Apr 2026 05:40:38 +0000
Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: NiIs10CKwjNIEQiv1YvlFKdyywxLLm3eNZsi0OQUm8U=)
2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: jxhoNvhc+MHJtTBpxrrKXdZBqlL2SJCnjwyJaGHJC6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Validity
Not Before: Apr 17 05:40:38 2026 GMT
Not After : Apr 24 05:40:38 2026 GMT
Subject: CN=69e1c7d7-059a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:b1:9e:ac:5c:45:a9:d8:91:4a:7d:ba:1c:
9d:52:46:bf:75:c7:d3:74:6e:40:f3:07:29:84:08:
43:08:53:6e:32:06:31:c1:5f:42:61:8d:e7:d4:38:
45:71:a3:c9:aa:5b:cd:61:cb:c1:a4:29:8f:9d:dd:
56:1e:2a:9b:c5:97:74:d2:e6:5e:bb:be:e8:c3:fc:
bd:80:45:73:ba:4c:61:09:f2:c5:96:eb:5d:18:7b:
b7:10:14:fd:b0:9d:3f:d8:32:cc:e1:7e:7f:13:6b:
aa:22:47:cc:2b:e6:fb:9a:ae:22:25:c9:37:f6:34:
e0:2f:4e:ad:82:52:4a:d5:b9:1f:de:63:7d:29:ac:
7e:50:e1:a1:65:04:77:40:5a:2c:e3:ae:f0:31:00:
60:81:38:0a:bf:e9:bd:50:ed:c8:36:a0:48:56:1a:
ff:8b:b2:63:f4:eb:ca:7b:00:f2:05:9f:20:eb:24:
0e:b8:dc:97:da:d1:89:b4:f9:2a:c8:34:cf:93:5a:
ae:38:89:3b:a0:30:a7:1a:4b:e7:88:d8:3d:ff:f5:
49:51:66:39:38:fd:d8:3e:ed:88:06:1d:d3:66:af:
f9:7d:08:e9:4c:28:49:1b:4c:dd:83:99:48:87:59:
b2:ee:e3:44:5f:bb:92:2b:bc:5e:2c:34:03:91:d9:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EA:CB:C2:17:DD:48:66:21:00:E9:C9:73:7E:FD:EE:0C:45:29:A2
X509v3 Authority Key Identifier:
keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:13:d2:43:8c:c4:5b:0f:06:ed:73:50:d9:d1:92:53:46:2b:
04:0a:79:02:46:ca:0d:78:e5:e1:c3:00:57:ae:3e:6e:e0:50:
72:3a:c8:47:bb:18:53:81:78:6f:8d:9c:61:90:22:9a:86:f0:
b7:69:03:41:4e:44:7b:8b:ef:0a:db:ce:02:c0:d6:a4:35:30:
c2:58:5a:bb:50:c8:15:77:b9:d6:12:60:a9:a8:18:00:80:b7:
21:9d:d9:55:d1:cc:30:3d:f9:95:8f:d4:7a:8d:73:ef:29:9b:
8d:33:25:01:51:8d:76:8b:38:7c:70:84:a3:0d:eb:5e:bf:2b:
95:af:ec:b5:fb:5d:63:ad:8b:a9:c2:05:8f:5c:b5:17:99:06:
c0:da:5a:62:ac:0e:0c:89:b3:b6:77:90:4a:21:92:97:1a:18:
cd:72:25:89:f9:fc:2f:44:f8:1b:0e:50:0d:da:5a:c7:c4:af:
4c:e1:17:7c:0e:2e:55:2b:04:de:ab:7f:bc:67:8b:70:4b:73:
f2:ad:4f:bb:d3:08:5f:1f:74:18:59:17:ca:7e:12:8d:c3:dd:
f7:ee:3e:d3:df:f5:44:b9:00:7e:d5:37:2b:8a:28:fc:66:69:
12:c4:70:25:b9:47:f3:41:b4:8b:c3:4a:50:df:26:aa:8b:7b:
2e:c3:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:55 2026 by rpki-client