
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json)
Hash identifier: UEgRmk+UP6gHUYVwyg8uYIV8C9H2SRaU4nwFmlQDprI=
Subject key identifier: 17:64:CA:1E:43:63:5E:7F:5C:B1:80:37:79:62:18:F7:E1:79:31:36
Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
Certificate serial: 096C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
Manifest number: 0962
Signing time: Thu 16 Apr 2026 20:01:14 +0000
Manifest this update: Thu 16 Apr 2026 20:01:14 +0000
Manifest next update: Thu 23 Apr 2026 20:01:14 +0000
Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: AQQsPYUzZnLwrrQjROK1Bj6TSVHSSnqWQkEc6yT9Sjw=)
2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: 6Y/pEvT0pNfH6xtp6yr5Lbw66np3FvqbE7a4waoUJL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl
rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2412 (0x96c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
Validity
Not Before: Apr 16 20:01:14 2026 GMT
Not After : Apr 23 20:01:14 2026 GMT
Subject: CN=69e1400a-6d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:ef:f0:82:ee:d8:80:1c:d8:5d:f0:a4:62:
6e:9b:d3:7e:da:6c:64:66:85:0b:b9:0d:3d:f2:3b:
f9:7b:27:44:8c:18:26:a7:71:bb:c7:4c:ad:57:4b:
92:ad:c5:6e:bf:2a:fd:94:77:88:e6:d8:8c:71:68:
82:eb:f0:11:c4:62:8c:41:f4:b3:5d:b3:c9:b6:03:
e0:19:10:bb:35:3e:f5:08:a7:e7:a8:20:46:da:ad:
c6:cb:a5:13:22:68:a4:f0:5d:49:a3:70:a4:68:25:
8a:7e:23:d4:4d:c5:67:ca:ae:a1:c5:56:93:f7:21:
63:91:fb:ef:6f:e6:4e:99:84:e2:12:d8:d2:6c:e7:
a8:84:71:6e:ec:bc:8d:a7:bd:1f:4c:52:77:39:a9:
91:5d:99:96:4c:e5:cc:c4:1b:5a:85:3c:e7:52:d4:
2a:99:81:6f:1d:15:2b:64:a6:7b:cf:9b:0c:f5:02:
71:f1:bb:1c:52:c8:e1:bf:a8:d1:03:35:a2:0e:3c:
ac:3f:03:a2:a9:8c:c9:35:27:70:2c:dc:11:02:1a:
0a:da:16:27:b5:ca:03:fc:11:5d:52:e2:4c:03:95:
98:ca:05:1e:27:34:80:04:73:63:8b:60:5a:fe:43:
43:2e:93:c4:1f:1b:61:c7:42:c9:1b:ba:a8:f8:52:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:CA:1E:43:63:5E:7F:5C:B1:80:37:79:62:18:F7:E1:79:31:36
X509v3 Authority Key Identifier:
keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:16:6c:d2:db:2c:1d:b3:34:72:a2:8e:73:e1:07:a7:d6:9f:
f3:a5:4f:50:5e:41:73:c4:28:e8:f3:59:f6:ac:eb:ca:78:8a:
46:97:52:c2:6f:77:85:47:6c:85:9b:47:ae:5d:5f:cf:e2:b2:
00:84:44:96:72:e7:20:7f:6d:8e:7b:54:85:6a:54:43:e3:b9:
fb:46:f5:1b:00:3a:e6:16:6b:53:62:48:2c:0c:62:e6:a6:68:
37:d3:6e:33:8f:3a:04:45:f0:f9:1a:62:21:a6:21:0f:ad:d6:
7b:ff:71:14:c6:da:fe:43:c5:95:3d:19:2c:c2:47:f0:07:0f:
d3:4c:a3:80:df:24:76:11:48:aa:76:53:5a:86:5f:92:3c:13:
2c:d4:73:8b:dd:8f:85:4d:59:11:70:ef:42:8f:3d:73:be:85:
96:c6:fb:c6:73:f1:12:20:30:ae:09:ab:76:72:ed:30:48:6f:
37:4a:48:d2:56:7e:26:ab:24:27:3a:ed:85:54:9b:a8:b9:9b:
3a:85:c2:d5:b3:2b:9c:8a:40:1a:24:e1:d2:df:b3:44:1b:4a:
72:ac:7e:19:c4:0a:8e:06:85:08:a3:77:cf:ff:40:56:3f:f8:
a0:14:66:f9:b4:2b:7c:fe:2a:f1:4a:08:03:d6:17:46:7d:e2:
12:4b:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:33:45 2026 by rpki-client