
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
File: X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft (raw, json)
Hash identifier: XiCy3lO8wJyffL7GLkmWEqwXAPKJ7DMIBr0veHWTEYY=
Subject key identifier: 75:28:D9:26:CF:87:44:EE:1F:A8:3A:0B:4C:03:CA:69:17:80:C0:35
Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
Manifest number: 1A
Signing time: Fri 17 Apr 2026 08:39:51 +0000
Manifest this update: Fri 17 Apr 2026 08:39:51 +0000
Manifest next update: Fri 24 Apr 2026 08:39:51 +0000
Files and hashes: 1: X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl (hash: HYa/yd4KWRmGkq2C1r6zSptWqXJq9yKOWf244Y+5MK0=)
2: B1AC59CA17B911F18117E782383D8C67.roa (hash: BZKhZueNEHTxbu1OjRweJpYo4HVjxfaP3Tx4ectaUy8=)
3: 58EB7FEA17BA11F192FEB12A393D8C67.roa (hash: 2KciHVKCwNQJZwIswrhWW3+d4zx/KcnZcJdVnRiVP80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Validity
Not Before: Apr 17 08:39:51 2026 GMT
Not After : Apr 24 08:39:51 2026 GMT
Subject: CN=69e1f1d7-af71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:61:78:39:c2:41:ce:90:98:f5:bc:49:78:
f6:2e:f4:f8:11:3d:dc:1e:89:d3:ba:51:e6:f1:fd:
32:a2:6c:c0:9e:65:f7:fd:40:27:aa:95:f9:29:64:
15:f5:74:ad:1b:ba:cd:c7:c0:0e:5a:60:8c:18:cd:
5b:ef:41:84:e3:a1:51:06:90:69:e6:bb:97:2d:89:
d4:73:e5:2a:03:d8:27:ce:8e:7b:3f:7c:d3:39:e8:
16:95:23:36:9f:71:de:c4:84:0b:4d:90:2a:7f:90:
0a:5c:26:4d:4d:48:30:ef:43:17:a2:de:07:24:c6:
51:4b:c0:3c:a4:4c:df:53:87:08:8c:4c:67:5f:89:
97:ee:d7:a7:73:25:6e:6f:f3:f2:93:fa:ad:1c:e1:
77:83:20:1c:4e:63:0a:8d:64:68:3d:53:9c:32:e5:
bd:69:83:0a:83:63:b9:2c:ae:60:d1:9d:1d:c9:14:
a8:1e:17:a6:8b:98:52:1a:aa:54:e3:76:0a:be:e7:
51:1e:d7:51:2a:ca:19:bc:03:f6:2c:0c:54:98:be:
f0:1d:4a:ec:b2:a3:27:75:eb:7c:56:55:59:27:09:
4f:a5:1e:40:9f:16:77:e6:0e:d0:a7:dc:08:50:62:
9b:d1:03:23:8d:fd:83:15:5a:f9:74:f6:4d:4e:e9:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:28:D9:26:CF:87:44:EE:1F:A8:3A:0B:4C:03:CA:69:17:80:C0:35
X509v3 Authority Key Identifier:
keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:c7:67:27:f9:25:ad:e0:f3:89:de:1c:bd:bb:ea:42:85:24:
97:f1:20:2d:01:b3:dc:80:20:11:5d:d2:25:07:c0:dc:7c:a9:
93:94:86:04:d0:f8:1d:9c:f4:74:31:f1:69:73:a8:80:84:86:
4d:e8:0f:ca:05:4a:46:c9:78:ab:f7:fb:a6:69:56:af:44:b2:
65:ad:2e:35:c3:3c:4b:a4:18:59:8a:32:66:22:94:a5:73:23:
6c:c6:b8:4d:8c:1d:b3:e8:ba:f5:28:1d:ed:48:a7:31:88:00:
6b:8b:c5:ac:bc:1b:a5:c7:a7:cb:75:9a:93:df:7c:fa:9f:a0:
25:c3:0f:5c:3e:46:47:3b:b1:bc:5c:60:9a:36:5d:7c:94:bc:
0a:78:84:8c:2b:ec:fc:c5:55:0a:ae:fd:50:e0:10:63:5c:8e:
ed:f3:93:f2:4b:13:96:e5:8d:bd:ae:3e:0e:de:27:ff:c1:e6:
fd:06:93:86:55:94:60:71:ba:d9:b4:4d:96:d6:2e:f3:2e:00:
89:af:e2:42:d9:9f:24:47:f2:c7:a5:b2:fc:1b:fa:38:79:b4:
d1:61:80:45:79:85:9a:40:37:cf:88:5f:eb:37:9c:87:a8:81:
31:c8:79:46:f1:23:9e:97:e4:a8:ad:bf:db:70:16:85:3a:5c:
3a:94:06:da
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzhGRjExMC8GA1UEBRMoNUZGQTg2QTg4MzIxMzEzQjJBNkRFMzhCN0YxNjMwNUQx
OUI5NThDRTAeFw0yNjA0MTcwODM5NTFaFw0yNjA0MjQwODM5NTFaMBgxFjAUBgNV
BAMTDTY5ZTFmMWQ3LWFmNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwgmF4OcJBzpCY9bxJePYu9PgRPdweidO6Uebx/TKibMCeZff9QCeqlfkpZBX1
dK0bus3HwA5aYIwYzVvvQYTjoVEGkGnmu5ctidRz5SoD2CfOjns/fNM56BaVIzaf
cd7EhAtNkCp/kApcJk1NSDDvQxei3gckxlFLwDykTN9ThwiMTGdfiZfu16dzJW5v
8/KT+q0c4XeDIBxOYwqNZGg9U5wy5b1pgwqDY7ksrmDRnR3JFKgeF6aLmFIaqlTj
dgq+51Ee11Eqyhm8A/YsDFSYvvAdSuyyoyd163xWVVknCU+lHkCfFnfmDtCn3AhQ
YpvRAyON/YMVWvl09k1O6fU1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdSjZJs+H
RO4fqDoLTAPKaReAwDUwHwYDVR0jBBgwFoAUX/qGqIMhMTsqbeOLfxYwXRm5WM4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEZGLzVCNkJEMTVBMTdC
NzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRzcWJlT0xmeFl3WFJtNVdN
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWF9xR3FJTWhNVHNxYmVPTGZ4WXdYUm01V000LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
OEZGLzVCNkJEMTVBMTdCNzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRz
cWJlT0xmeFl3WFJtNVdNNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBSx2cn+SWt4POJ3hy9u+pChSSX8SAtAbPcgCARXdIlB8DcfKmTlIYE0PgdnPR0
MfFpc6iAhIZN6A/KBUpGyXir9/umaVavRLJlrS41wzxLpBhZijJmIpSlcyNsxrhN
jB2z6Lr1KB3tSKcxiABri8WsvBulx6fLdZqT33z6n6Alww9cPkZHO7G8XGCaNl18
lLwKeISMK+z8xVUKrv1Q4BBjXI7t85PySxOW5Y29rj4O3if/web9BpOGVZRgcbrZ
tE2W1i7zLgCJr+JC2Z8kR/LHpbL8G/o4ebTRYYBFeYWaQDfPiF/rN5yHqIExyHlG
8SOel+Sorb/bcBaFOlw6lAba
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:05 2026 by rpki-client