
$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File: QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier: eKQdQ+cMNFtA34lJMVPfcjj56mI2oqKkab4LGmiCo4E=
Subject key identifier: 91:05:D7:1B:76:6B:0B:2D:CB:92:32:E3:DA:19:1A:A9:1C:B2:2F:CF
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer: /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial: 049B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number: 0492
Signing time: Thu 16 Apr 2026 23:54:26 +0000
Manifest this update: Thu 16 Apr 2026 23:54:26 +0000
Manifest next update: Thu 23 Apr 2026 23:54:26 +0000
Files and hashes: 1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: 8I5PBRU0GZFZIBJCUq+VMa4AdVRImpGGRqFOlfT9nTA=)
2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: UDGIexCjWZjf9oWBoZsn81ywHvMY4QFQvNjug6FA+Yo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Validity
Not Before: Apr 16 23:54:26 2026 GMT
Not After : Apr 23 23:54:26 2026 GMT
Subject: CN=69e176b2-0973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:e9:f0:9e:d7:30:db:2c:21:cd:88:9b:b3:
7f:86:31:4a:6b:1e:4d:12:6a:e3:6f:6b:74:66:97:
e2:e4:fe:6b:c5:5f:cd:0d:a8:d9:0d:ed:ae:38:a7:
a9:72:28:b0:ac:44:0e:4c:0b:80:12:69:94:dc:ae:
c1:e4:27:b6:2f:7e:0d:11:42:34:8a:c1:45:61:c8:
98:05:3b:d7:50:5e:f9:93:43:14:d9:f8:ef:90:96:
30:f9:79:66:a7:16:02:47:18:00:a2:b3:8c:d2:3a:
37:19:3c:a9:de:d9:9c:91:db:d5:4d:35:8c:ac:92:
55:a3:f8:99:9e:3f:bb:8a:ad:63:84:f0:3d:9d:8c:
99:8e:d4:e9:b0:44:40:82:18:36:ac:3a:5c:dd:c7:
b5:15:a1:69:b8:cd:d3:85:57:6f:55:cd:0c:d5:3b:
19:4f:f1:a9:42:25:1b:69:09:de:d0:f9:c1:8f:c7:
4a:53:a9:01:ef:96:50:8d:91:95:e7:49:58:b8:64:
1f:a6:a6:42:61:f2:6d:8d:50:22:bf:b8:74:bd:75:
68:b7:df:dd:00:73:dd:23:97:68:fd:4b:64:60:d5:
69:01:ac:56:17:af:07:e6:8c:3f:0d:4e:ea:4d:72:
de:27:14:42:32:45:58:16:30:ba:6f:35:c1:00:ba:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:D7:1B:76:6B:0B:2D:CB:92:32:E3:DA:19:1A:A9:1C:B2:2F:CF
X509v3 Authority Key Identifier:
keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:9d:cb:3f:e8:1f:34:c9:a6:37:f0:45:7b:fb:f2:dc:f1:0f:
09:76:0a:7f:5a:5e:dd:cf:c3:12:e1:d0:9b:94:78:50:81:65:
a1:b5:92:f0:be:f4:94:4d:68:eb:a9:f5:52:96:6b:db:f7:69:
a8:5a:fc:30:de:55:8d:7c:a2:d5:1d:7e:bc:33:a2:d3:50:49:
84:6e:de:2a:31:31:9a:0b:d9:02:14:84:33:72:3d:9e:ec:3b:
9c:6e:29:7e:e9:5e:e3:37:8a:8f:8f:41:aa:bd:28:25:65:42:
9b:3e:63:b4:66:c4:8a:81:ba:1a:68:cf:87:89:c9:46:2e:2e:
11:f3:8e:13:4a:9a:57:cb:e2:67:60:05:1c:c2:3e:e1:e2:34:
df:a6:f3:97:12:22:56:86:51:9c:f9:0f:13:cb:8c:61:67:d4:
32:85:0a:f0:7d:f0:a2:50:d2:5a:30:88:ef:05:a5:9f:9d:0c:
0c:c5:36:76:e1:36:2a:b0:b4:ce:d7:63:45:2c:cf:02:8d:7d:
7f:b0:92:cc:43:e8:d9:d5:77:9e:e7:02:3a:7a:cb:d7:af:2e:
2d:9d:78:1c:c9:36:ec:1c:e0:1c:a8:f7:be:f9:fe:86:98:71:
00:a7:69:26:57:11:0f:94:6b:70:ea:67:8d:70:8d:73:a3:2b:
a7:24:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:12 2026 by rpki-client