
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier: z8DMXgfNiOLdD0nEm6qgvAXPZRF9svfkieDDfHeCZDw=
Subject key identifier: 2F:5B:80:4B:7E:0A:76:D1:9E:86:F2:E5:D1:47:41:C1:81:42:B5:D7
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number: 01D9
Signing time: Fri 17 Apr 2026 03:16:51 +0000
Manifest this update: Fri 17 Apr 2026 03:16:51 +0000
Manifest next update: Fri 24 Apr 2026 03:16:51 +0000
Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: 7P0wEh2CZP//Y47Uf1d4qOFNfml+oCpReVvX+NxutLg=)
2: 294325DC699711EEB317603DC4F9AE02.roa (hash: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Validity
Not Before: Apr 17 03:16:51 2026 GMT
Not After : Apr 24 03:16:51 2026 GMT
Subject: CN=69e1a623-d16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:6f:a0:a6:0e:e4:65:3a:4e:b1:12:3c:5f:
24:8c:05:99:50:2f:d0:86:8c:f6:e1:4c:ac:54:39:
3e:52:cb:50:5a:27:df:ef:6a:61:21:3e:9c:1b:72:
27:5f:b5:43:d2:1e:31:57:56:19:db:23:cd:e0:04:
55:cd:8c:66:21:65:f5:b7:c6:71:07:35:21:60:8f:
12:ce:ee:65:0c:7a:67:d7:50:d4:ba:b9:d1:67:78:
6e:d1:69:ce:76:44:d9:a4:69:03:42:63:c3:c8:d2:
79:b6:b3:cd:27:22:2a:b9:ba:40:ac:38:b7:8a:0c:
23:1f:7c:30:b4:97:dd:1a:19:1d:df:58:0e:98:58:
25:99:df:f9:18:02:e2:a0:34:bb:4c:c0:dc:3d:30:
73:d8:b6:9b:e4:5f:40:e6:03:e6:e2:ec:e1:01:3b:
a7:d6:e5:b5:5d:ca:37:96:8a:f5:29:b9:e5:f1:df:
d0:44:24:9d:ae:8d:62:2d:01:6b:60:43:c2:84:57:
70:5b:59:a6:92:a4:5e:b3:11:0c:a2:aa:b3:cb:2b:
90:91:19:b6:78:96:ec:43:b6:4e:73:1f:07:e6:fe:
ee:9d:5d:a7:83:c2:2d:6a:c1:64:ec:4c:59:cb:03:
7c:f5:e7:9e:55:3a:12:8a:ff:60:4c:a7:75:28:5c:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:80:4B:7E:0A:76:D1:9E:86:F2:E5:D1:47:41:C1:81:42:B5:D7
X509v3 Authority Key Identifier:
keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:1b:ab:c3:c6:3c:22:cf:c9:fa:0d:d2:f6:0f:87:f7:08:7f:
de:71:ca:29:72:4a:65:59:81:4d:e5:25:9b:ac:d4:75:7a:c2:
6c:2f:cc:f4:46:c1:f0:1f:5f:ca:29:ee:97:32:7f:90:60:44:
b9:21:10:60:f5:50:c5:fd:34:64:49:b2:55:5a:f7:c4:9b:32:
0e:a9:a3:6a:ee:6a:c3:9c:dd:78:24:da:da:dc:47:d1:78:fa:
97:7f:66:7f:90:98:c8:4c:1a:67:f1:dd:00:27:dd:b2:9c:57:
b7:0b:69:69:5b:e1:cd:ac:66:52:93:e7:3a:ca:5b:b6:95:53:
a7:1d:c3:20:b1:10:a3:c0:10:ba:fc:d1:87:2b:09:c5:23:ea:
42:f2:c4:1c:4f:4e:1a:f6:f1:5b:f9:0d:5b:d8:eb:3e:ee:c2:
67:0d:59:a1:c2:10:33:29:03:c9:8c:e2:b0:bd:fd:4c:64:d7:
47:a7:08:61:24:a7:38:01:db:1d:43:74:51:78:a5:78:50:3a:
cb:f4:f4:12:37:54:4f:79:69:18:f1:b4:f8:35:89:fc:73:58:
92:09:d4:79:f0:98:49:8e:7e:76:aa:06:2e:79:47:2b:0b:e1:
63:9a:67:13:4c:67:0a:f5:8c:b2:b5:97:74:7e:7a:93:9f:a2:
90:d7:09:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1
Njc5NjYwNTMwHhcNMjYwNDE3MDMxNjUxWhcNMjYwNDI0MDMxNjUxWjAYMRYwFAYD
VQQDEw02OWUxYTYyMy1kMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs01voKYO5GU6TrESPF8kjAWZUC/Qhoz24UysVDk+UstQWiff72phIT6cG3In
X7VD0h4xV1YZ2yPN4ARVzYxmIWX1t8ZxBzUhYI8Szu5lDHpn11DUurnRZ3hu0WnO
dkTZpGkDQmPDyNJ5trPNJyIqubpArDi3igwjH3wwtJfdGhkd31gOmFglmd/5GALi
oDS7TMDcPTBz2Lab5F9A5gPm4uzhATun1uW1Xco3lor1Kbnl8d/QRCSdro1iLQFr
YEPChFdwW1mmkqResxEMoqqzyyuQkRm2eJbsQ7ZOcx8H5v7unV2ng8ItasFk7ExZ
ywN89eeeVToSiv9gTKd1KFzfKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9bgEt+
CnbRnoby5dFHQcGBQrXXMB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5
OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq
WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEBurw8Y8Is/J+g3S9g+H9wh/3nHKKXJKZVmBTeUlm6zUdXrCbC/M9EbB8B9f
yinulzJ/kGBEuSEQYPVQxf00ZEmyVVr3xJsyDqmjau5qw5zdeCTa2txH0Xj6l39m
f5CYyEwaZ/HdACfdspxXtwtpaVvhzaxmUpPnOspbtpVTpx3DILEQo8AQuvzRhysJ
xSPqQvLEHE9OGvbxW/kNW9jrPu7CZw1ZocIQMykDyYzisL39TGTXR6cIYSSnOAHb
HUN0UXileFA6y/T0EjdUT3lpGPG0+DWJ/HNYkgnUefCYSY5+dqoGLnlHKwvhY5pn
E0xnCvWMsrWXdH56k5+ikNcJYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:25 2026 by rpki-client