
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier: WtTW+Hv5V3VgZLvIqiJDlI7TQqRRFbxsf+Ofm54/qnA=
Subject key identifier: 63:F3:64:BC:F4:BE:EA:BC:87:6F:67:D7:27:AB:2F:32:0D:15:FA:41
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial: 1913
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number: 18F0
Signing time: Thu 16 Apr 2026 16:23:57 +0000
Manifest this update: Thu 16 Apr 2026 16:23:57 +0000
Manifest next update: Thu 23 Apr 2026 16:23:57 +0000
Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: Yw+Oiv0YpmVQ3BpUox5qTqBLO6s9lKDJRt7ApGaSt9w=)
2: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: gpPf8YHxUumqTPOX7/waaXvtALxStgij8JmqlVAXhlc=)
3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: QtWEc3antTd2K+91CBKQnCvQy2+FDNwa+QWniiVB1lI=)
4: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: awYe5rrh007RCSjsVd7jO0qaN9guB6y5rbMfa7rSYvk=)
5: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: aze7oRbnjZ11dpJLkBi4xyiEoCsX64SwDqIgSioB2cM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6419 (0x1913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Validity
Not Before: Apr 16 16:23:57 2026 GMT
Not After : Apr 23 16:23:57 2026 GMT
Subject: CN=69e10d1d-ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:fb:09:e9:1e:1d:52:cc:30:2f:38:7e:38:
de:3b:27:b2:f6:71:ad:35:71:d5:ea:a5:78:cb:75:
cd:2d:d7:7f:a3:1c:56:b3:3f:8b:5b:2a:c0:c6:57:
c0:48:7a:ac:dc:cb:44:80:df:2e:73:8f:4e:e3:cc:
fb:0b:b6:01:94:42:28:2e:58:ef:eb:b1:6f:a3:89:
45:2f:6d:02:75:ec:c0:3e:ec:d4:b1:70:3f:43:2a:
7c:18:d3:06:e8:a2:5e:07:56:85:73:c1:61:0c:35:
73:18:ab:3f:fa:50:72:fc:f7:f1:3f:6a:15:74:91:
b0:9a:e5:f1:60:21:95:16:a9:c6:df:1c:10:e8:52:
3e:5c:85:b6:a1:34:43:92:ea:0b:a5:8d:28:c8:11:
9e:87:8e:35:db:28:b5:db:81:43:9c:23:88:d2:88:
b1:f8:6a:28:91:f5:f5:cd:6f:99:38:c3:42:a1:aa:
aa:a3:ae:4b:d0:44:6e:38:ed:37:bf:b4:18:22:29:
22:2f:e0:6a:34:19:88:c0:26:cf:64:5e:de:cd:b7:
93:83:c4:14:fd:39:67:a2:fb:98:82:47:ed:dd:a4:
e1:6f:7f:4e:46:4b:d7:f8:16:c2:02:53:4a:10:a4:
eb:ad:c0:27:b4:45:c7:be:3d:5b:e5:4d:3a:6b:a4:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:64:BC:F4:BE:EA:BC:87:6F:67:D7:27:AB:2F:32:0D:15:FA:41
X509v3 Authority Key Identifier:
keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:57:55:68:ae:08:9e:25:7f:a2:b9:ad:eb:9a:e4:17:e6:65:
a4:c6:5e:f3:62:ad:b3:32:b1:55:b3:0f:4c:90:d2:25:89:a9:
76:d2:d5:d6:39:a9:9a:d7:ac:54:1e:c6:b8:35:a2:79:23:6e:
bb:bf:ec:d3:01:33:cd:03:20:3b:d5:2f:98:be:18:f1:1c:52:
c4:1e:db:56:24:34:cc:b2:d9:de:bb:75:ae:a4:26:19:0a:a6:
35:86:62:63:4a:ee:8b:1b:46:e2:af:55:96:53:51:a1:7a:98:
01:9d:d3:98:df:e7:3a:ef:97:9a:d7:09:59:4a:cd:80:e8:14:
1e:35:db:10:5f:b5:32:a9:cb:5b:a9:a0:5c:a7:4b:75:54:cb:
81:31:2d:c8:e1:d4:51:42:cd:b8:47:27:79:b6:63:2c:69:ac:
fb:42:4e:8a:b7:30:fb:12:b2:be:47:3d:d7:f8:80:a8:b2:4a:
58:0b:43:43:2c:c9:78:e9:25:5c:b5:f7:ea:7e:49:c4:3f:4e:
a7:6e:e3:70:b2:3e:f8:f7:df:4d:b6:0f:d9:9a:55:59:0d:c9:
a4:92:11:2c:d5:dd:81:db:a1:79:38:a7:ea:84:db:64:a4:9d:
69:f3:75:9f:be:33:bf:0d:7f:cf:96:db:57:e7:91:2a:be:83:
ac:88:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:51 2026 by rpki-client