
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier: OGnrL9rPqNyyDhn5WxKqck0q8DQjUTPnnadUSTZ28hQ=
Subject key identifier: 9F:25:20:D3:76:08:A9:4C:25:17:80:7C:35:F4:EB:FC:8D:E9:6C:C4
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number: E1
Signing time: Fri 17 Apr 2026 06:15:49 +0000
Manifest this update: Fri 17 Apr 2026 06:15:49 +0000
Manifest next update: Fri 24 Apr 2026 06:15:49 +0000
Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: YiP52wINX9IeXbeAf9d2o+9meq4Xh4tbhEZoaJ3T6Wo=)
2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Validity
Not Before: Apr 17 06:15:49 2026 GMT
Not After : Apr 24 06:15:49 2026 GMT
Subject: CN=69e1d015-cb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:c5:d2:ce:8d:9a:e9:01:9f:6c:a5:4d:67:
a5:f4:88:fe:f8:d4:52:6a:ce:7b:41:c6:9b:42:c9:
c3:20:60:8d:64:ad:68:55:e6:01:c1:fb:f0:3c:b5:
5a:f7:be:5a:e0:13:c5:a6:cb:88:6a:12:0f:be:65:
bd:aa:e4:22:fe:06:04:fd:7b:8b:d7:de:be:49:ce:
9e:43:53:23:f0:e1:b7:dd:cb:c4:65:02:e4:7c:bd:
75:e5:56:c8:80:65:54:04:d1:a5:dd:f7:ad:60:03:
8d:ac:bc:49:94:42:b5:16:d6:b5:20:13:5a:50:b1:
2a:34:9b:62:2c:d7:ae:1b:ab:80:68:b0:21:5e:5a:
22:73:13:fe:13:d1:ed:a9:0f:f7:30:24:a0:2f:5b:
bd:91:b2:98:81:03:c7:69:0d:b3:da:8d:43:d6:df:
ea:68:0a:9e:56:92:68:1c:c9:c5:91:4f:47:f1:27:
7f:06:9d:4e:ec:95:b6:67:18:91:0c:8e:0e:e0:49:
4c:6e:09:63:e5:0f:ba:7c:10:0d:98:75:f3:e5:d1:
ec:57:6d:17:16:0d:b3:71:7c:a0:09:3f:c5:59:ef:
41:32:3a:c4:0d:33:fe:e6:de:77:34:ac:d4:d7:0e:
53:37:35:20:f4:f1:10:9b:c5:f1:e5:92:1c:c4:f8:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:25:20:D3:76:08:A9:4C:25:17:80:7C:35:F4:EB:FC:8D:E9:6C:C4
X509v3 Authority Key Identifier:
keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d8:62:71:8b:b3:da:ac:5d:2b:b1:85:4c:8c:35:bc:48:87:
34:ff:be:55:27:45:84:a9:65:21:99:76:68:21:b1:d5:02:7b:
98:55:e9:3c:53:6e:c7:09:71:cf:d8:12:fe:37:00:3e:b8:93:
4e:18:46:5c:c9:95:21:ad:24:69:0f:eb:87:1d:04:d4:85:49:
ed:b8:a5:89:0e:58:96:73:d8:13:71:c1:e7:86:60:96:ff:01:
4d:9b:84:0d:7e:96:d5:ae:72:8b:a4:f8:d9:49:55:9f:fb:15:
fe:53:ba:a8:d8:66:96:15:4f:ae:23:4e:41:2f:6e:29:3e:08:
9a:57:ae:7b:43:94:80:e8:57:8b:cd:ef:2d:da:ee:3e:1e:da:
c7:94:0d:59:94:76:bd:64:2a:57:75:03:0c:4c:97:a2:f2:89:
b7:88:34:89:94:a6:04:51:2e:a4:19:8b:71:56:77:ac:44:0e:
ee:b5:46:e4:f7:f6:53:f0:d4:5d:10:57:23:5d:b2:d6:cc:6e:
84:73:de:4a:93:fd:f6:06:59:d9:0b:6b:24:e2:bb:37:30:e6:
7d:eb:1d:eb:9b:7b:f0:02:83:7a:f4:42:e4:99:e4:33:79:a2:
21:95:79:9e:11:21:27:d7:7b:1d:cc:2f:db:e9:a8:2d:d5:79:
c3:17:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:52 2026 by rpki-client