
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
File: QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json)
Hash identifier: HhuBfJHRITmcArNC4WOPZAANBdJqdcGteNXl+T8xvHM=
Subject key identifier: 9F:EF:6C:94:77:0D:B6:BB:A1:E5:8C:BB:07:59:31:4E:B9:22:12:F2
Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Certificate serial: 107B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
Manifest number: 273A
Signing time: Thu 16 Apr 2026 16:35:22 +0000
Manifest this update: Thu 16 Apr 2026 16:35:22 +0000
Manifest next update: Thu 23 Apr 2026 16:35:22 +0000
Files and hashes: 1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: Seu1wT+z1c4q3/JxIj2tNkc3U2EL+WkiXv7IR5edXbY=)
2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: 9GKBxAqwPTAO+hWMiV5oav3VDxVKz2FMAbeDwl8q3ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl
rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4219 (0x107b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Validity
Not Before: Apr 16 16:35:22 2026 GMT
Not After : Apr 23 16:35:22 2026 GMT
Subject: CN=69e10fca-5059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:c5:de:0d:79:6d:4e:ac:01:4d:80:12:3a:
23:32:ce:25:26:86:33:ad:0a:67:8a:8f:67:8f:3c:
20:b1:50:15:1f:bf:95:7b:2d:47:a0:74:03:98:d0:
6f:53:c2:31:92:6a:bb:9b:e5:c2:df:b4:4a:35:d4:
b5:92:c8:f0:d6:51:d1:dd:9a:d5:c9:37:67:d6:66:
86:f1:b0:18:18:02:b6:5e:28:e8:e1:2b:cb:43:c7:
17:08:be:7c:15:5e:7a:e4:35:16:4d:73:d7:14:0b:
4c:04:50:16:8b:b1:d3:05:ca:13:bd:0b:8a:e9:f0:
b9:5a:66:0d:1d:57:52:6c:51:7f:3c:69:29:43:10:
61:e1:14:d8:e9:23:4e:ed:d4:5d:3f:aa:bb:38:d6:
7b:07:b2:c1:f0:ae:0d:1a:d7:97:25:df:10:f7:8b:
c1:79:e8:d1:d5:e3:c1:e1:42:40:c6:4e:83:a3:aa:
18:d8:f4:99:98:a5:59:5c:3c:84:2e:81:20:f4:b6:
93:91:23:ca:ed:17:1a:b6:05:0b:7c:79:ed:a4:3d:
07:87:55:f6:0c:05:dc:31:a9:8d:0e:61:cc:d0:33:
b1:b3:19:5b:02:81:18:5d:44:fc:2f:81:6a:de:06:
17:fa:56:75:7a:01:79:e0:61:e1:ce:1c:9c:4e:a1:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:6C:94:77:0D:B6:BB:A1:E5:8C:BB:07:59:31:4E:B9:22:12:F2
X509v3 Authority Key Identifier:
keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:e1:de:52:71:1c:ad:18:af:76:b4:ae:b0:92:c2:84:f6:
a6:c6:ba:03:f5:38:04:fb:a1:d8:08:2c:97:6c:14:08:2d:5c:
90:12:7f:c3:b7:e9:8f:8a:70:cd:d3:14:67:66:9e:40:7f:53:
e3:ec:a8:55:c8:7d:15:e3:c8:d1:a8:cd:00:bf:4d:29:b5:06:
99:5c:58:28:8c:1f:41:2f:ae:25:be:e4:60:64:ca:93:77:4d:
6f:e3:3c:c5:ed:a5:b9:df:7f:15:e4:61:95:17:b6:40:14:d6:
96:0b:22:56:8f:01:4b:ef:33:3e:94:42:ed:58:56:70:78:51:
38:8d:cd:43:4c:d3:0c:dc:c5:99:77:81:ce:01:9f:46:89:1d:
24:57:d1:7b:3c:9b:48:95:52:7b:e6:00:91:2c:db:98:d4:d8:
4c:c1:29:c2:12:49:37:4a:9e:bd:c1:65:93:f1:e2:e3:b7:de:
6a:59:67:81:d2:a9:11:a4:f2:60:29:17:92:70:7a:8e:1a:e7:
67:dd:0b:f7:bc:4e:7e:f3:fe:55:79:40:9e:4e:d4:39:fb:db:
15:81:be:cd:b7:de:39:97:09:e2:c9:58:5a:09:02:33:e4:87:
c6:8c:ca:78:a7:bf:64:bd:c5:a1:79:a7:e2:17:14:bb:ac:18:
a3:9f:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:07 2026 by rpki-client