
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier: 3LkV8XChEeTmUVbdvwczUAlcO4lU6hyO2xdYBx8bVyU=
Subject key identifier: 89:85:48:54:AF:25:2D:D6:89:8C:92:BC:D0:42:76:B4:4C:B1:48:88
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial: 1220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number: 20CF
Signing time: Thu 16 Apr 2026 17:04:30 +0000
Manifest this update: Thu 16 Apr 2026 17:04:30 +0000
Manifest next update: Thu 23 Apr 2026 17:04:30 +0000
Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: zXGaJwo+/+vj6BdObwPH88hDw2XJ11sjT9p6KdfCIpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4640 (0x1220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Validity
Not Before: Apr 16 17:04:30 2026 GMT
Not After : Apr 23 17:04:30 2026 GMT
Subject: CN=69e1169e-70ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:90:e3:81:25:74:d5:c4:28:90:b0:0a:d7:
ba:25:2e:cf:2b:7a:aa:34:98:23:e9:99:e5:1a:94:
95:96:17:1a:62:64:a1:4d:d6:aa:24:5d:b0:47:07:
e6:9d:f7:14:78:f4:18:07:9b:8b:d5:99:5e:71:eb:
a2:e8:53:a4:a0:d6:fd:15:8b:ff:66:bf:40:28:35:
f4:4a:7e:c0:f8:50:4a:dc:0d:5d:6d:b1:ee:23:3b:
73:dc:ed:bf:43:f2:33:66:90:df:f3:b6:5c:e6:3a:
9a:df:49:2c:81:7d:6d:a6:12:3f:bb:83:f3:0f:cf:
78:8b:62:7d:79:47:ee:bc:18:d5:df:71:5f:07:46:
27:c3:0d:28:b6:91:f6:9e:66:05:7c:e4:4c:04:cf:
f1:19:e4:bc:07:ce:d2:b0:a3:d4:78:28:c4:32:70:
08:d1:21:1a:16:ad:03:12:d0:47:3f:9e:3b:3c:08:
ff:42:fd:3e:6d:9f:a9:d1:13:4b:6d:a9:d4:2d:05:
12:cf:dc:27:d9:d0:49:cd:c6:f7:7b:47:68:fe:f7:
96:47:85:f7:08:13:09:87:8d:5a:e1:93:84:d0:c6:
29:b7:b7:89:c8:8d:a2:b5:1a:64:30:ab:5c:b3:8b:
10:ec:fb:c4:24:3c:0c:ee:7c:e3:a0:84:a7:88:6e:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:85:48:54:AF:25:2D:D6:89:8C:92:BC:D0:42:76:B4:4C:B1:48:88
X509v3 Authority Key Identifier:
keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:5d:62:af:b0:da:f6:c2:b9:d1:46:5d:e9:45:fa:ee:62:fb:
27:ac:ca:05:9f:dd:2f:40:d3:5b:24:bb:91:e1:ab:aa:e9:eb:
b0:36:2f:e9:4e:03:43:4c:33:4c:71:89:55:8e:5b:ce:ba:84:
8b:23:f9:f6:8c:bd:d6:f3:06:fe:cb:95:66:91:89:3d:23:ed:
4b:31:1f:72:39:04:e8:a7:07:42:bf:e7:1d:f3:1e:61:b1:70:
25:cd:82:14:09:d7:7d:27:a9:24:81:72:48:f8:4e:10:94:5d:
61:4c:e1:c3:96:c4:6e:c3:83:3b:1b:5e:28:d2:6f:9c:5b:5c:
fb:2e:42:6b:09:76:55:0f:60:d4:d2:8e:42:2e:8e:95:8c:26:
16:14:fc:c6:29:91:36:71:69:f1:db:4f:8a:43:29:e3:a8:7d:
fb:99:a3:f2:b2:11:8a:d0:ce:66:9c:a3:6d:9c:ca:f6:a5:bb:
31:fa:a4:c2:f7:7e:36:a3:cb:31:fc:7f:ff:15:e5:3f:a6:2e:
0c:d2:41:40:d0:0e:d8:2f:56:d9:d5:7f:06:0a:71:74:53:f4:
60:41:b9:86:b4:89:6f:a9:8b:4b:b5:18:7e:50:6a:30:a8:50:
0f:8d:2b:e8:bd:b5:ef:f5:ad:b9:3f:ca:b3:ab:59:4a:39:70:
c6:0e:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:16:58 2026 by rpki-client