
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
File: qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json)
Hash identifier: BH3fbUMGgsY4UfAsmSBfwi7D3wEt8T23cfc4bnwXJKY=
Subject key identifier: F7:B0:14:52:C3:5D:48:5D:AA:DC:DF:73:CB:07:91:0D:83:8A:31:12
Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
Certificate issuer: /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
Certificate serial: 069F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
Manifest number: 0698
Signing time: Thu 16 Apr 2026 22:21:34 +0000
Manifest this update: Thu 16 Apr 2026 22:21:33 +0000
Manifest next update: Thu 23 Apr 2026 22:21:33 +0000
Files and hashes: 1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: W4KLvdFLSZ3iSSkvJ26E1zRVd1XnCOBmUihP0M6kOwE=)
2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: /ULmSnSTdH0/f1q4tjs1akmKQxqjyakkSOX6RXEjmGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl
rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BE1, serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
Validity
Not Before: Apr 16 22:21:33 2026 GMT
Not After : Apr 23 22:21:33 2026 GMT
Subject: CN=69e160ee-50cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:07:e6:47:99:7f:d8:ca:e9:31:27:68:2d:
eb:4b:fc:39:c2:34:d4:6c:3f:75:45:a2:6e:6c:94:
0f:9b:fa:3c:96:ee:cb:18:56:74:47:93:2c:18:26:
9a:0c:9d:5a:e3:c5:fc:6b:88:fa:55:a6:b0:91:1a:
82:2e:5f:cd:cd:49:4c:67:3d:33:08:93:e8:7e:34:
9b:84:21:8c:80:9c:53:45:be:2f:94:ec:0a:4c:eb:
8e:46:ce:b4:c3:bb:07:03:de:ed:2b:95:97:63:5b:
e6:d8:a3:e4:ab:96:72:4c:54:b6:cb:5b:bf:e4:00:
69:96:38:f0:dd:31:7a:56:86:5a:eb:c4:ba:f5:92:
da:99:6e:0f:cd:c4:ea:b5:de:2e:da:75:dc:bb:39:
cc:0d:6f:b3:74:59:83:04:34:1a:23:4e:7f:f3:3b:
01:88:48:50:9c:4d:26:af:d0:73:86:4b:1f:ee:1f:
39:b9:d1:c4:ac:f8:56:05:0b:9a:96:51:b1:ad:83:
c2:47:e3:dc:20:e9:57:4f:f8:62:63:1e:b3:4f:a5:
6a:e8:b1:fc:e9:04:10:31:71:f4:9c:1c:1b:1d:48:
16:0a:ba:a4:c2:00:0b:50:03:6b:72:10:a6:02:9c:
0a:c2:7a:83:7f:f8:3c:34:d8:f0:98:1c:06:a4:25:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:14:52:C3:5D:48:5D:AA:DC:DF:73:CB:07:91:0D:83:8A:31:12
X509v3 Authority Key Identifier:
keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5d:96:51:5c:dc:a3:48:dc:9a:04:ed:d7:d7:0a:e1:1f:e4:
58:9e:4e:06:d6:4a:d0:9f:f4:44:2e:a7:01:c0:bf:ec:a8:30:
15:0d:58:35:f4:85:47:cd:fd:56:6e:ab:f1:16:ee:7c:91:9c:
ac:fa:f6:a4:d2:5a:10:f1:ed:de:50:3d:be:17:d6:dc:14:28:
85:49:d4:b2:e2:ff:cc:b8:dd:e1:f5:e1:dd:e9:7b:7c:71:50:
b1:76:53:54:82:b7:28:13:3f:fe:30:9e:6c:6d:8b:fd:46:9c:
c6:03:7d:e0:f1:f0:5e:71:bb:2f:b8:6f:d0:2a:f7:47:1c:30:
9a:3e:34:a9:03:d8:bd:ad:fc:94:0c:47:ed:72:84:6c:32:29:
88:7a:ee:d3:2a:44:88:43:f6:58:03:17:c9:99:f6:9a:f8:88:
84:33:67:0f:ef:60:fe:18:05:7d:9c:08:46:83:0b:85:0f:ef:
62:a1:10:ad:f5:81:89:e2:16:c5:7c:bc:f9:37:2b:5c:87:73:
5e:0e:67:8c:27:e7:48:ac:de:73:40:d4:ac:12:57:cf:df:fb:
f2:e2:6a:21:10:c5:53:54:02:72:ab:57:17:f7:46:c0:1c:2b:
e3:4b:18:7a:f6:f6:30:91:80:b5:14:56:d0:8e:ad:0f:5a:74:
f9:53:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:46 2026 by rpki-client