
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier: BJ2i7sINi8uczLK4KZZXv+mldYGcS62dZ/i5Dk7B4XI=
Subject key identifier: E2:DD:30:38:CF:8C:17:D6:9A:11:B2:8E:9A:50:0E:83:64:E1:C5:D1
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial: 0B7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number: 0B6E
Signing time: Thu 16 Apr 2026 19:07:11 +0000
Manifest this update: Thu 16 Apr 2026 19:07:11 +0000
Manifest next update: Thu 23 Apr 2026 19:07:11 +0000
Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: I+8eSEED/rPQgboSafjdQlciQ0Jq/IA+gUU9EE0HRFg=)
2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2943 (0xb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Validity
Not Before: Apr 16 19:07:11 2026 GMT
Not After : Apr 23 19:07:11 2026 GMT
Subject: CN=69e1335f-5309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:2a:07:80:cd:f3:11:af:25:fe:d3:26:72:
10:4f:cc:f1:c7:3a:7d:1f:5e:a2:0d:0f:dd:cf:c9:
e8:e7:13:4e:b2:74:c6:75:9a:c7:06:bd:e4:cf:dc:
17:27:36:72:29:60:d9:da:ef:29:42:7e:52:bb:fd:
b6:f7:70:8f:8f:bb:a5:6c:bb:46:19:f0:a4:ec:9e:
62:d7:5c:c2:07:67:d6:d7:61:d6:5d:01:d1:11:7e:
2d:be:e1:0c:89:3f:4a:61:df:90:02:9d:c1:db:fd:
3c:f6:9b:eb:1b:50:78:2e:35:2a:fb:e1:76:28:05:
52:15:fd:be:a0:b9:5b:70:d7:b1:f2:a6:15:19:f2:
18:f9:ad:6f:7b:cf:c5:81:92:5d:0b:ef:c2:e4:6e:
fe:7a:7a:21:f3:4b:9b:ae:0e:11:72:f4:9e:b3:fc:
44:96:89:40:21:a7:84:db:64:f9:6e:25:87:21:f6:
63:e6:74:72:b7:13:97:27:3d:68:7f:87:95:0f:2c:
93:fe:b3:76:e9:e4:1f:c8:b8:a8:f4:fe:4f:1d:a1:
d9:d4:cb:2f:42:d9:47:fe:bf:30:6e:71:24:88:ed:
a1:88:70:92:3f:43:65:5d:02:62:ca:55:d6:fc:80:
38:73:e2:18:2e:7f:a1:e0:3e:ba:3d:ad:52:11:d2:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DD:30:38:CF:8C:17:D6:9A:11:B2:8E:9A:50:0E:83:64:E1:C5:D1
X509v3 Authority Key Identifier:
keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f6:e0:c4:55:08:53:6f:61:04:bb:8c:26:28:b3:20:3c:2e:
71:83:23:62:67:b8:fb:06:41:48:4d:e1:79:79:1d:19:77:65:
9b:65:70:62:13:87:c7:d8:36:bb:85:26:eb:73:27:65:65:c4:
09:5a:e3:f0:1c:b6:37:64:32:71:6b:5a:58:7b:df:e6:93:78:
cb:2b:a9:91:98:fe:2a:2a:5d:50:50:fc:5d:b4:9d:26:6b:50:
28:b5:5d:71:49:74:0f:58:f0:82:00:27:43:6f:74:4f:87:9b:
89:f8:10:05:1a:86:ca:21:ad:e6:47:d2:24:ea:4a:c7:60:be:
9a:7b:dd:5d:7d:f0:45:92:8a:8e:cc:46:6e:a6:3b:1e:49:9e:
9d:be:fe:a7:ad:94:89:74:4e:47:9f:d2:b7:b0:31:8c:69:28:
fb:4f:f6:69:88:71:b9:2d:19:9c:e1:06:66:67:69:36:43:c5:
1e:1e:75:ba:e8:26:35:87:26:4d:8e:66:32:44:d4:43:bd:8e:
d3:69:1e:89:8d:76:29:d0:81:54:4a:30:e0:35:21:13:fa:f4:
f3:27:70:69:69:c5:35:a3:51:89:db:d8:fe:bc:af:e8:72:c9:
f3:6f:74:51:24:4c:18:f3:47:73:27:b7:39:9d:90:64:78:a1:
66:4f:50:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE
Q0E5ODQwOEUwHhcNMjYwNDE2MTkwNzExWhcNMjYwNDIzMTkwNzExWjAYMRYwFAYD
VQQDEw02OWUxMzM1Zi01MzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfQqB4DN8xGvJf7TJnIQT8zxxzp9H16iDQ/dz8no5xNOsnTGdZrHBr3kz9wX
JzZyKWDZ2u8pQn5Su/2293CPj7ulbLtGGfCk7J5i11zCB2fW12HWXQHREX4tvuEM
iT9KYd+QAp3B2/089pvrG1B4LjUq++F2KAVSFf2+oLlbcNex8qYVGfIY+a1ve8/F
gZJdC+/C5G7+enoh80ubrg4RcvSes/xElolAIaeE22T5biWHIfZj5nRytxOXJz1o
f4eVDyyT/rN26eQfyLio9P5PHaHZ1MsvQtlH/r8wbnEkiO2hiHCSP0NlXQJiylXW
/IA4c+IYLn+h4D66Pa1SEdKghwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLdMDjP
jBfWmhGyjppQDoNk4cXRMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy
REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJG
djFGSWhoVkctal9jcVlRSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzPbgxFUIU29hBLuMJiizIDwucYMjYme4+wZBSE3heXkdGXdlm2VwYhOHx9g2
u4Um63MnZWXECVrj8By2N2QycWtaWHvf5pN4yyupkZj+KipdUFD8XbSdJmtQKLVd
cUl0D1jwggAnQ290T4ebifgQBRqGyiGt5kfSJOpKx2C+mnvdXX3wRZKKjsxGbqY7
Hkmenb7+p62UiXROR5/St7AxjGko+0/2aYhxuS0ZnOEGZmdpNkPFHh51uugmNYcm
TY5mMkTUQ72O02keiY12KdCBVEow4DUhE/r08ydwaWnFNaNRidvY/ryv6HLJ8290
USRMGPNHcye3OZ2QZHihZk9QyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:17 2026 by rpki-client