
$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier: DJAJ9Sxkck6eZnRcIIDA1bIiVhnhImKpwwvNlde0iTc=
Subject key identifier: CC:DA:ED:70:E9:AF:57:C1:3B:B4:FF:46:6F:D0:C6:5B:77:70:B7:E0
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number: 0185
Signing time: Fri 17 Apr 2026 04:18:25 +0000
Manifest this update: Fri 17 Apr 2026 04:18:24 +0000
Manifest next update: Fri 24 Apr 2026 04:18:24 +0000
Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: pTUgCzXUES2AdfaIybX74qBwuXhwLAzrNV0OvT14Cyo=)
2: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: wtU3FReeveSRaGECvJZwcjQF5xOlaITNyX17soC/vMo=)
3: 47142068221311EFB680F113C4F9AE02.roa (hash: q1TM5Ebdt5SP+k07ZaaYP0AaM0RnbZZmHVQA7uMpDO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Validity
Not Before: Apr 17 04:18:24 2026 GMT
Not After : Apr 24 04:18:24 2026 GMT
Subject: CN=69e1b491-1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:b3:7d:d1:a1:64:72:ad:14:3f:7a:a9:be:
c9:be:4f:f5:0b:83:97:f1:f3:6c:44:05:89:86:ee:
9e:fe:88:18:0e:36:e4:90:f1:ac:15:39:bd:40:3a:
24:02:69:88:b0:01:c1:2d:5e:4e:16:7f:88:41:39:
7e:e9:3d:72:a1:e0:0f:e8:97:63:3f:74:37:3c:8d:
eb:a7:47:1b:bf:84:97:a4:90:0f:2d:ac:a8:d4:06:
5c:0a:8c:fc:85:70:0c:23:98:6b:a0:45:95:1b:82:
cc:40:db:b8:7e:2f:93:da:22:eb:f8:52:94:69:bd:
2c:87:de:56:ee:93:a2:74:45:3a:ec:12:14:6c:78:
6c:cb:65:c0:92:13:e9:79:79:b7:cc:e9:02:ef:ae:
2d:b6:a7:db:5a:d4:2f:8f:3b:5d:8f:34:f8:36:c6:
d3:be:ce:3e:24:bc:f4:5d:df:2b:77:27:a2:81:96:
ff:bd:40:03:a5:4a:7c:e2:f2:9c:97:8d:59:78:0a:
72:fc:71:d9:56:6b:fa:7c:fe:74:db:c2:44:95:a0:
f4:c0:81:0d:3a:15:74:27:90:a5:a8:5d:1a:e0:ea:
7f:9d:47:7c:2d:11:b6:db:ea:87:b6:54:10:49:26:
3f:d4:17:26:d4:5d:bc:ed:05:bc:27:25:53:b5:01:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:ED:70:E9:AF:57:C1:3B:B4:FF:46:6F:D0:C6:5B:77:70:B7:E0
X509v3 Authority Key Identifier:
keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:36:d4:e7:a8:fa:76:0c:2a:69:ce:cb:30:84:26:20:f1:44:
5b:4b:3a:5c:5d:af:81:ff:1c:44:41:3c:de:d0:16:43:b1:4e:
4c:f8:1d:a6:f2:73:2c:a1:54:a4:31:6a:6d:ee:ce:9c:67:43:
5c:f2:9d:db:81:04:81:f1:7c:f0:fe:46:6f:8b:d6:48:50:05:
73:f1:b7:34:08:85:c3:6f:d7:44:7c:df:4d:c3:e0:b5:76:dc:
dc:ce:e0:b1:92:44:a6:49:4f:7b:35:62:0c:04:0a:31:dd:b2:
fa:40:7c:43:68:e1:0c:03:e8:2e:30:88:0b:55:b9:43:f9:82:
44:c8:15:d9:ff:24:5c:57:d3:51:26:a7:b5:a4:af:3c:52:bc:
75:6f:b9:ff:23:50:18:3f:ec:01:10:cf:f3:3d:3f:fa:2c:4d:
74:45:d7:61:e0:2a:7e:01:76:1c:0e:51:fb:90:6e:42:77:93:
b3:55:4c:7b:7d:a7:73:3f:58:91:9d:4d:c9:b2:94:98:8e:3d:
4c:3d:22:04:2c:f5:9c:13:66:b0:8a:64:c1:7d:1f:4c:bf:37:
a1:92:81:c7:01:92:aa:0b:a7:4a:65:c8:33:3d:17:a7:ad:c3:
07:76:aa:6f:96:14:bc:6d:10:7b:76:ad:1e:2f:25:f2:0c:d5:
36:68:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:17 2026 by rpki-client