
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier: hsrXJ2L5Y3S8isI9sYAN5JVA/VFpsf8iFcDvfWmFzYg=
Subject key identifier: D5:B6:EA:AC:6E:CD:57:D4:A3:27:91:1C:3F:96:B5:74:24:62:46:9F
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number: 01DB
Signing time: Fri 17 Apr 2026 03:43:16 +0000
Manifest this update: Fri 17 Apr 2026 03:43:16 +0000
Manifest next update: Fri 24 Apr 2026 03:43:16 +0000
Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: exf/ONPE78RoJN6riGob+5IWCeNCwzR9U3rWMcLmZC4=)
2: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: p6zGTgqZJ7iiiCzsm415AfpPsLOlXyGxbt61Izp1Z6U=)
3: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 6JnWBHrw4ffDiGiVWAOckF4qnqqFhoHfVR3johcA4II=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Apr 17 03:43:16 2026 GMT
Not After : Apr 24 03:43:16 2026 GMT
Subject: CN=69e1ac54-5419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:14:2e:16:8e:21:4d:7b:d3:f8:3d:fb:d6:
a4:4c:c1:a7:73:74:e2:1b:61:ef:37:41:a9:1b:96:
ad:74:1d:31:1d:a6:f3:2d:d1:2b:71:3e:2f:83:b8:
b7:56:a6:b5:58:4a:d4:46:c1:d1:48:85:39:f0:f4:
3d:83:35:44:cf:c4:99:72:84:ed:e4:97:b4:7e:04:
23:8d:e5:72:16:ef:99:4d:ae:ba:a6:15:fd:00:98:
d2:69:77:3f:cd:e4:5b:8c:b9:7b:06:e9:c4:9f:cd:
72:59:4e:20:e6:a3:da:9a:2e:61:a2:bf:6d:53:8a:
06:03:09:19:39:03:07:71:b9:62:67:08:d3:dc:22:
76:a0:e7:48:47:9f:33:41:63:eb:0f:1f:3e:70:fb:
37:f3:0f:d2:83:02:29:16:06:fb:84:8b:d6:22:3d:
5f:19:18:7b:b9:10:f3:67:9f:1c:e5:fe:b1:30:d3:
83:82:39:29:4d:3d:ec:35:a0:1a:79:43:76:4c:2c:
71:60:a8:e6:81:bd:e0:9d:e8:83:2f:e2:3b:78:03:
ea:40:9f:0b:88:10:0b:ec:a9:36:59:8e:7d:f8:76:
0b:71:62:43:45:fd:f5:df:1d:7d:a2:13:8c:1d:81:
79:c3:09:e2:d3:28:c9:d4:a5:2b:a4:92:dd:3f:5e:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:EA:AC:6E:CD:57:D4:A3:27:91:1C:3F:96:B5:74:24:62:46:9F
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:16:7a:19:80:29:11:76:60:b3:52:2c:1a:00:7b:0c:b1:3b:
ac:c7:d8:3b:b7:27:9b:af:25:a9:3b:a9:c7:91:1d:9a:23:f4:
56:b2:b9:49:05:35:9a:bb:77:67:67:64:5c:1d:b7:94:3c:8d:
9b:89:90:c8:b5:89:46:4e:95:4c:dd:18:33:3d:c7:25:54:36:
13:24:89:6b:d0:44:ac:b8:43:29:3b:b4:6a:e5:99:c8:b6:b0:
a4:d0:b2:16:c0:17:68:67:1b:fc:d9:6d:78:3a:87:9f:60:d4:
8b:df:5a:93:9b:77:29:2f:83:cc:c9:7e:07:9c:13:9c:a0:a6:
a3:2a:64:c7:ef:59:10:9d:2a:8d:3b:15:68:7e:9e:61:1b:d0:
bc:6e:8b:c1:61:d1:01:5a:2f:d5:db:ae:6a:cd:b4:6a:0e:b9:
c8:c8:5f:ec:16:f8:66:36:9c:41:d1:2e:c5:0c:eb:bc:11:6e:
de:f8:d3:b9:7f:c9:b5:14:0d:7c:0b:bc:49:e1:bb:cd:3d:99:
4c:91:23:65:ef:27:40:20:a2:5e:4e:e7:30:c7:55:48:5f:f1:
04:5c:7a:80:0d:84:a8:7c:8c:cd:f0:47:a4:e8:1d:84:d0:ae:
6a:d6:af:23:13:57:a8:01:31:57:d7:25:bb:44:8f:69:47:c3:
28:73:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:52 2026 by rpki-client