
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json)
Hash identifier: L/16fw9MAwMiddps9uz3OFSr0U2GmeDiT28c94emwAc=
Subject key identifier: 40:18:D8:BA:73:BB:F1:43:45:33:64:38:98:70:39:63:E8:26:A8:88
Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8
Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
Manifest number: 63
Signing time: Wed 15 Apr 2026 07:32:26 +0000
Manifest this update: Wed 15 Apr 2026 07:32:25 +0000
Manifest next update: Wed 22 Apr 2026 07:32:25 +0000
Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: 7qtsN/Zu+9T3V3qLXP/Nealw5bmNZK+224zFmOg+gK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl
rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8
Validity
Not Before: Apr 15 07:32:25 2026 GMT
Not After : Apr 22 07:32:25 2026 GMT
Subject: CN=69df3f0a-07f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:37:c3:c7:38:7f:6d:fc:f0:b5:bb:8b:fe:
9a:28:fc:0c:23:75:74:12:bb:2c:0f:ae:53:52:cc:
e0:b0:50:ba:81:cd:00:95:ed:8f:1c:8b:0a:c0:93:
3d:b1:8d:58:d5:fc:41:75:3a:cd:4b:28:cc:e5:cd:
24:bf:96:10:fe:cc:20:53:1d:db:d8:eb:76:e8:0e:
30:99:a2:c4:ab:5b:83:9e:b7:83:6a:f3:9c:8c:65:
3f:e4:6b:ca:ea:4b:aa:7c:f7:f1:1c:e7:fb:6c:ed:
eb:b6:54:00:0d:ed:a8:4f:6b:6d:08:28:7e:12:01:
20:0d:ed:bc:8a:32:b0:54:20:0c:fc:d7:4b:41:cf:
5b:af:58:ff:0f:18:ea:39:4e:81:73:cf:fc:4a:fc:
6c:5a:50:a9:84:a3:ff:a9:0e:80:1a:c3:f5:28:ef:
a7:7f:0b:87:d0:ff:c5:bf:8e:ec:fa:07:9a:63:24:
2a:f5:00:13:09:30:98:e3:4c:a4:34:14:0b:fb:b5:
b7:fb:0b:16:bb:b1:b5:af:61:93:ed:5b:5e:e2:e9:
51:40:95:fc:98:c5:50:33:8b:4e:4f:70:80:41:45:
e1:21:83:68:5c:d7:be:cf:60:a4:52:f7:2d:f4:a4:
96:11:f0:d7:df:01:b3:a8:79:2b:27:98:c1:62:1f:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:18:D8:BA:73:BB:F1:43:45:33:64:38:98:70:39:63:E8:26:A8:88
X509v3 Authority Key Identifier:
keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:43:2f:9a:14:64:6f:e0:27:8d:00:05:b3:c2:70:c3:1f:3e:
93:e9:c3:ce:1e:4e:c3:8e:62:8e:35:71:c7:56:0a:58:8d:dd:
43:ef:e2:52:c3:6b:9c:30:ec:58:de:9a:4f:43:e9:b6:ae:af:
ad:0a:66:4c:db:59:e3:d8:f9:77:8e:f0:1f:79:87:91:78:37:
7a:2f:86:99:77:2e:28:11:4d:66:8d:5f:14:79:e9:2d:7a:35:
ce:30:39:2d:9f:70:fc:15:ea:25:e9:8a:5f:55:0b:0c:29:5e:
4a:58:61:eb:1c:7b:14:d5:b9:9c:ab:24:80:ee:80:52:2d:21:
19:32:dd:b7:60:2c:24:64:bf:35:cc:3a:df:98:4b:ec:f8:7f:
89:f8:2b:89:3a:7e:19:f4:b2:e1:35:52:17:44:d9:29:e2:b3:
4c:d3:32:1c:fb:fe:2e:fe:fa:e2:41:62:ee:23:47:15:d2:e7:
4c:67:2b:74:d2:e1:34:ae:42:00:58:6c:42:7c:b4:b2:7e:0e:
66:37:2d:2f:5a:d6:9b:d7:44:3b:e2:21:43:9c:49:b9:42:9a:
35:52:49:30:e1:6c:90:d6:ed:0e:0d:9c:77:58:1d:8a:7f:b4:
39:4a:fd:43:a4:93:b4:b2:9f:d8:9a:6c:f5:14:61:7c:31:50:
4e:6c:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:30 2026 by rpki-client