
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json)
Hash identifier: St3W0/DSekRm5oEifcBvj7BV0hBcXmaQqcUuktPc3qU=
Subject key identifier: 1C:3E:28:93:0F:84:37:B0:82:6B:8D:65:8E:43:9B:04:47:24:A8:9A
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
Manifest number: A9
Signing time: Fri 17 Apr 2026 06:55:52 +0000
Manifest this update: Fri 17 Apr 2026 06:55:51 +0000
Manifest next update: Fri 24 Apr 2026 06:55:51 +0000
Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: bhg3EyjR0Y7p4Y38QzsHpjR94xLgVfFm0UEKueLPJoc=)
2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: TIY6gyAp3NwOI0omiLD20nrzYuDIOBYf89hc7GdDNuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Validity
Not Before: Apr 17 06:55:51 2026 GMT
Not After : Apr 24 06:55:51 2026 GMT
Subject: CN=69e1d978-d28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:18:0c:e4:87:da:44:d2:18:32:bd:2b:46:
0c:18:ce:48:e6:6d:4d:1c:83:16:4f:04:e8:05:3e:
1f:f4:cd:a0:dd:b6:80:13:5f:0b:21:69:65:b1:db:
8b:45:7d:0d:00:51:1d:de:c0:04:a9:47:f3:c2:5f:
3e:77:70:5b:83:cd:23:86:75:0f:1b:1c:74:a7:31:
f8:9d:16:aa:b4:10:2d:6c:68:1b:c2:71:94:26:f9:
01:32:43:5d:55:88:df:1c:7c:fe:80:5d:34:6a:6a:
b3:3c:06:55:6e:4d:12:a5:07:0c:b7:10:29:63:bf:
7a:a7:00:8e:d1:41:33:e6:1c:10:85:fb:f5:0b:03:
e2:2a:2e:c2:51:72:e5:e9:32:3c:26:54:4d:8e:d4:
f6:85:4e:43:fd:fd:f1:03:9c:3b:44:d7:62:70:9a:
19:05:87:be:4b:ce:d5:38:3e:ef:c7:55:d7:18:e1:
5f:15:5f:d5:cc:3a:53:54:93:43:bd:2c:fc:04:64:
a7:7b:f0:a9:cd:51:78:68:ff:90:4c:0d:dc:16:0b:
2a:21:2a:d9:a9:57:7a:58:c0:f8:19:86:52:86:89:
5a:0f:b9:48:41:8a:6a:ab:ab:03:04:a4:57:7e:cf:
b0:61:5e:57:f4:d3:c9:38:ec:39:93:bd:ae:4b:24:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3E:28:93:0F:84:37:B0:82:6B:8D:65:8E:43:9B:04:47:24:A8:9A
X509v3 Authority Key Identifier:
keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:45:4a:dc:96:3d:54:8a:e3:0a:e0:7e:0e:09:97:74:1a:8f:
d8:bd:f9:a8:cc:66:98:ac:ec:d3:09:7c:9b:1f:70:bb:ee:22:
71:aa:c2:83:9b:cd:15:72:5a:89:bf:e9:f5:b4:74:2d:08:8c:
b7:4a:0d:d0:27:31:4a:d7:fb:38:bd:59:02:e5:72:bb:55:d3:
3b:76:f6:f3:86:2b:ef:c8:a9:0e:3a:59:8e:dd:b6:99:6d:f7:
60:48:4b:c2:6b:0e:38:54:2d:1a:c6:1c:7f:5b:d2:f4:a2:6a:
47:68:b2:85:c5:14:f0:37:65:03:85:b9:75:33:23:61:4b:9f:
4b:89:b1:4b:6f:ba:75:69:5c:70:74:59:cf:79:7a:aa:57:02:
8f:2a:e0:15:22:5e:b8:8c:f7:c8:db:3b:dc:b3:89:bf:31:ee:
9f:e1:83:6a:01:aa:a9:36:ea:6e:74:09:6c:fc:42:97:13:49:
8b:9d:b1:07:2e:d1:f6:2b:b0:bb:48:2b:1b:3d:64:2a:cb:a0:
39:46:d9:e3:50:dd:fe:f9:c6:4a:46:e9:e3:ae:f8:dd:7b:7f:
4c:eb:6f:cb:12:9b:e8:56:be:2d:04:3f:e6:62:d7:46:19:bf:
50:3b:4c:83:a2:f7:9f:dd:39:1a:f5:db:0d:38:ac:2d:e0:a3:
61:c9:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:10 2026 by rpki-client