
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json)
Hash identifier: nUQVvYeeSoYD4s6Kp8T9No4fgWn7yEsHbOR6z7MKl8E=
Subject key identifier: CD:42:FF:5B:06:62:AA:A3:27:1C:C1:14:EE:7F:DD:99:9E:6F:17:F2
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial: 176D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
Manifest number: 1757
Signing time: Thu 16 Apr 2026 16:32:39 +0000
Manifest this update: Thu 16 Apr 2026 16:32:38 +0000
Manifest next update: Thu 23 Apr 2026 16:32:38 +0000
Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: uQiBkjkrLj4Ntjq1uFEVh0KQMbKpVcaK2iIvqozUxek=)
2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: Uh0ufQqszTK1hbj5HShNIOMuiOfZ3FBUNVqfFJVggoM=)
3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: lZtSqEluaQyvKzJzwijqNxqveUY7rB8QQXqYRdPds0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5997 (0x176d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Validity
Not Before: Apr 16 16:32:38 2026 GMT
Not After : Apr 23 16:32:38 2026 GMT
Subject: CN=69e10f27-ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:08:ce:89:6f:c9:c4:f4:07:aa:cc:e7:16:
92:83:f0:0a:82:43:e4:69:87:f4:ca:9a:44:c0:fc:
64:48:62:37:ab:5b:44:d6:cc:7f:f6:b3:af:1e:d8:
ff:38:26:da:30:8a:18:84:af:6d:47:b8:1b:98:40:
b7:ae:44:78:75:da:e7:cc:bf:21:ba:92:47:2f:b9:
39:44:b2:6c:82:3f:25:b5:7a:e4:fa:a8:cf:c8:51:
6f:54:db:0c:f1:fc:52:fc:dd:18:1c:8a:23:20:25:
52:b4:25:b5:79:55:ef:a7:2f:1c:be:2e:35:5e:e2:
8d:e4:b0:5c:53:9b:75:3c:54:ca:ae:ac:32:3e:29:
40:2c:2b:27:f4:a6:df:e2:68:68:fa:3b:e2:4b:45:
c8:87:1d:56:b8:fe:5e:6a:e5:63:25:4a:d7:5e:fd:
29:84:eb:17:75:8f:89:10:01:11:3e:cf:94:eb:69:
fa:c2:54:6e:c4:0c:67:0a:87:41:ba:66:d2:d3:d9:
43:39:26:ca:9a:d8:52:67:c4:a0:0c:c4:54:ab:59:
dd:f1:ce:ba:e1:81:2a:c4:a2:dc:84:1d:dd:87:da:
de:15:fe:f7:70:42:79:2e:ca:af:6c:87:a0:73:9a:
29:39:bd:7f:a0:c5:b2:05:54:1e:3f:b3:87:ba:56:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:42:FF:5B:06:62:AA:A3:27:1C:C1:14:EE:7F:DD:99:9E:6F:17:F2
X509v3 Authority Key Identifier:
keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e8:a5:d6:50:c2:05:3c:9f:cc:87:84:0d:9e:1c:f9:0a:4e:
59:0e:b3:18:36:c9:d3:d8:74:4c:71:f2:b8:de:e3:de:08:51:
bf:22:4b:47:3a:21:0d:25:66:64:22:ed:97:a7:d6:ef:b5:f0:
48:51:13:4a:0e:29:9c:de:4f:1a:c6:40:d4:a5:09:cc:e1:34:
6f:df:c3:c1:0f:74:51:65:97:40:8d:34:76:3b:ef:e2:c4:83:
21:1e:e6:a5:bf:e6:94:4e:b3:11:3a:80:6a:e4:31:91:cb:ed:
ff:32:fc:e1:d1:61:77:0d:37:88:f9:da:70:4f:f4:64:2e:89:
a1:21:4a:e6:ca:4a:aa:73:ca:72:7c:7f:8a:40:fe:a9:f8:16:
05:68:88:26:e8:5e:48:48:d0:49:30:55:20:fe:5a:5a:5f:32:
da:19:67:58:6e:3a:ad:45:df:e5:b9:aa:3f:77:03:7b:cb:39:
ec:eb:ba:78:24:66:41:0a:85:62:4d:6a:e0:49:21:9f:31:fb:
9f:34:dd:34:55:f8:11:f3:3b:ae:91:67:c0:78:bd:70:7f:67:
97:79:b1:18:4d:db:6e:8d:00:72:70:8b:1d:68:18:f3:84:86:
8d:57:4a:90:d4:56:cd:85:08:7f:08:e6:54:77:b3:d0:8d:c5:
7a:5c:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:54 2026 by rpki-client