
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json)
Hash identifier: iIC3MCeRsbd2D1vNm1J9h2xJPr87mz2NKCYrnF/iCGU=
Subject key identifier: FC:12:36:87:FB:E5:23:9C:82:AC:37:C4:99:CF:99:8D:7B:FF:28:A6
Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Certificate serial: 0CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
Manifest number: 0CC2
Signing time: Thu 16 Apr 2026 18:21:45 +0000
Manifest this update: Thu 16 Apr 2026 18:21:44 +0000
Manifest next update: Thu 23 Apr 2026 18:21:44 +0000
Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: Lngi45enJNcAukBRKEGk90OdDelxu7NSaudV+zdirKY=)
2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: MEjWiqABTdhN78FaTJw7zpdNYI15rHUaUXaBhHqc1lA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Validity
Not Before: Apr 16 18:21:44 2026 GMT
Not After : Apr 23 18:21:44 2026 GMT
Subject: CN=69e128b8-443c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:65:69:e4:ef:45:b9:23:6d:1d:9c:e4:7d:
7e:d8:72:3e:b7:97:d3:4b:34:3f:ce:ef:3f:bb:28:
f2:a1:00:3c:79:a6:35:83:e8:31:ee:f7:a5:2c:94:
a8:fc:39:37:0d:5b:c8:3c:2c:d8:e4:b2:24:fc:df:
c6:23:bf:01:5c:75:f3:8d:c1:dd:2f:dd:26:3e:6a:
10:7c:8e:e0:76:03:af:e5:e5:7b:92:2f:b8:7c:6d:
ce:41:56:a0:c9:c9:16:2a:4e:a3:fc:2b:8f:12:2b:
63:98:6a:52:d9:8e:c7:bd:de:00:70:48:b6:97:29:
db:37:d5:1d:96:1f:dc:68:47:db:c0:0f:42:c6:ab:
b7:59:ee:7f:55:a4:be:03:c1:a9:3b:c6:55:3c:95:
b6:fd:10:a5:00:a1:da:3c:e4:99:8f:1a:1b:d7:72:
9c:f1:2f:c9:b7:b8:78:90:16:23:d0:c9:16:f1:f7:
1f:1e:12:6e:27:d4:7b:3f:87:98:f6:92:53:40:65:
88:d8:f4:6c:7b:b6:76:d1:fb:da:44:a4:12:ed:c8:
4e:71:46:56:c9:7d:e6:41:85:8c:e0:9a:eb:c2:ad:
3d:51:2e:9d:b8:25:cc:c5:e6:4f:3e:fc:47:fb:f0:
45:87:af:0e:c8:be:6a:e2:24:68:0b:d0:cd:cc:30:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:12:36:87:FB:E5:23:9C:82:AC:37:C4:99:CF:99:8D:7B:FF:28:A6
X509v3 Authority Key Identifier:
keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:59:12:86:ee:f8:07:ac:50:5e:e3:02:51:e2:85:88:fa:2d:
2d:98:4b:bc:fc:09:81:9a:19:e0:ed:36:93:ae:d6:35:3e:53:
f3:91:5e:c3:58:5b:14:6d:57:ed:79:37:25:a2:33:cc:7b:d1:
2c:49:ed:fa:34:f5:e0:6b:a9:a1:be:ad:58:fa:88:6d:3f:37:
4a:f9:bd:ed:e0:9d:0d:29:75:ab:e9:cc:3e:89:56:b6:95:81:
79:11:71:c6:f2:5d:35:04:d1:2c:d6:63:28:e2:54:92:5d:e6:
f3:c4:fd:dd:94:b6:49:e6:7f:99:96:5c:1c:9a:38:13:f1:85:
90:e6:ec:01:28:24:cc:88:0c:9b:d3:bc:4c:42:cc:7b:ee:fc:
55:47:97:0c:71:ad:44:e5:67:eb:a9:e6:a4:2a:f5:f2:c2:37:
de:ac:0d:fa:9b:13:87:1d:64:79:af:15:cd:05:e8:4b:12:c0:
b4:2f:39:01:8e:95:26:e1:b8:24:4e:e9:60:08:30:07:64:6d:
20:11:b3:da:04:ae:ec:ec:09:4a:e4:1f:82:8b:b3:1f:1f:28:
21:af:0d:a5:8b:2c:f5:42:c4:ac:bc:ef:6a:1a:a7:66:87:dc:
10:ad:e4:9e:fd:80:09:07:63:d8:8b:5a:7d:2d:f4:58:c2:27:
9d:e3:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:10 2026 by rpki-client