
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier: 8iHgJIse+5yTCR7ddmWq+3BrOk3zaVQwfeAsSUO/Cz4=
Subject key identifier: 38:7A:6A:B9:A0:B9:5E:16:AB:06:41:78:B0:40:F7:43:FB:2B:E8:E7
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number: AB
Signing time: Wed 15 Apr 2026 06:55:55 +0000
Manifest this update: Wed 15 Apr 2026 06:55:54 +0000
Manifest next update: Wed 22 Apr 2026 06:55:54 +0000
Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: 5dUESRfZ//mnbm339ysD/lwOMIXw0ijYc88MyIJEqPs=)
2: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: cG6u0zgjdvCrRZeQ4usyXAcEzT17uS3cbK/qREEeINU=)
3: B87594FC08B311F1954B37591C3D8C67.roa (hash: wztUnu/AtmwGJSEKvUQ+sSvPTP/4Cs6eUYir69FLSaI=)
4: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: kYrLbQFT1ZzGHGGu97W4fdlheMT2k3tj7Vb3H/0HdO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: Apr 15 06:55:54 2026 GMT
Not After : Apr 22 06:55:54 2026 GMT
Subject: CN=69df367b-5f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:54:f4:a0:a5:06:10:93:ff:13:74:7b:13:
16:80:60:fc:06:26:2e:f1:f4:70:ca:f5:8e:36:95:
35:aa:33:f1:3e:b2:98:c9:0d:25:37:de:21:bf:ff:
82:39:f2:d5:21:ea:4c:74:12:00:05:80:e1:2c:81:
d4:35:9c:d7:ab:69:45:d0:28:7a:25:c9:0d:05:5e:
3e:e4:20:64:83:43:1a:7d:56:5d:43:55:b2:ad:b4:
f6:bf:02:b8:6f:d8:9f:c5:40:44:b1:01:7e:0c:c8:
e2:fe:56:41:dd:1f:73:09:b7:24:44:cf:f2:94:d9:
77:08:03:6e:02:8e:26:20:42:6e:65:54:3f:34:10:
b6:7a:ba:61:bf:41:26:b2:da:69:31:e3:e3:24:ac:
41:39:79:82:b0:47:d0:13:2f:08:41:65:db:f1:02:
49:3f:12:fc:92:0d:d9:84:1f:03:5b:bd:68:58:98:
74:d6:16:b6:c1:c7:ee:18:d6:58:3f:17:2c:92:4c:
66:a7:aa:af:3a:8f:2e:c5:3a:7a:7b:05:0f:96:eb:
cf:18:4f:85:53:f7:39:40:6c:59:f0:39:09:ed:0e:
b9:be:49:2b:a6:60:b8:5a:f4:8a:26:74:c9:92:9d:
59:33:9f:41:f3:97:1a:82:59:f6:0b:d2:ed:81:6b:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7A:6A:B9:A0:B9:5E:16:AB:06:41:78:B0:40:F7:43:FB:2B:E8:E7
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8f:13:f5:bf:68:12:c4:d8:90:17:eb:60:7c:d4:71:67:8e:
e9:ce:7a:3f:40:c2:b0:ea:0a:57:1a:fa:5a:4f:02:26:fe:4b:
5e:a1:0d:5d:f7:ff:af:6b:c6:f9:df:a8:ed:20:15:a0:2b:3e:
1d:a5:6b:46:f1:4f:0d:7d:ae:65:ad:86:87:2d:06:7a:bb:9a:
b4:57:68:7a:9a:c6:42:03:83:6e:ed:92:6f:3b:a0:00:ae:5b:
0e:23:15:4c:dd:2e:c0:33:cf:95:aa:39:c4:06:81:f4:b9:82:
83:0a:87:69:95:bf:0c:f8:88:b7:96:61:04:bf:90:85:d5:5f:
13:40:75:b6:31:bb:58:fc:fb:8e:a5:32:de:56:98:b5:31:33:
19:cf:cd:56:7e:ce:c9:be:69:52:1d:b4:b5:74:54:c3:29:ba:
85:c8:5e:ed:8e:16:88:84:23:84:86:65:d5:19:64:29:e6:20:
1c:f1:f7:d9:f0:f6:0c:c9:6e:13:44:29:ac:d7:bc:b2:4c:d7:
3f:12:67:c8:26:dd:cf:e0:6e:e3:d0:0b:52:eb:da:13:d0:09:
93:a4:bd:5f:d7:91:61:76:b4:fa:4b:4e:6b:40:76:55:51:30:
c7:14:61:09:d3:c1:31:26:e9:89:5a:9f:e5:aa:ab:15:83:68:
0f:b2:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:45 2026 by rpki-client