
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json)
Hash identifier: LtGMaI6h09hfJAA8nWsURzqKS4HKhyF2FsCTIswV1o8=
Subject key identifier: B3:48:7A:06:29:77:D2:11:68:F4:E5:27:94:C7:BB:EF:BF:9A:4B:16
Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Certificate serial: 0978
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
Manifest number: 0978
Signing time: Thu 16 Apr 2026 19:57:28 +0000
Manifest this update: Thu 16 Apr 2026 19:57:27 +0000
Manifest next update: Thu 23 Apr 2026 19:57:27 +0000
Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: 6lQkrtNla4/fkySwNDZD+KvHyNVQqFwO5qzCPmWRfYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2424 (0x978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Validity
Not Before: Apr 16 19:57:27 2026 GMT
Not After : Apr 23 19:57:27 2026 GMT
Subject: CN=69e13f28-8d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:b4:f0:c9:c1:60:3d:59:fb:92:38:d5:24:
9f:1d:e5:7b:7f:a0:5c:2c:ec:97:07:f7:02:6b:8d:
12:be:e8:88:89:1d:66:06:89:d7:f6:db:17:84:83:
7f:2d:a9:b4:6f:0d:0b:a3:a4:38:d8:3b:d1:17:ea:
62:63:57:20:dc:ae:28:9e:e2:03:e8:7d:ca:61:22:
e6:2f:5d:32:63:99:be:e8:f9:a8:87:26:71:14:bb:
6a:a0:8e:96:b1:d7:72:6a:f9:6a:63:f9:b4:21:fd:
37:61:42:65:b8:00:99:b5:2d:c6:1b:2c:0f:dc:65:
db:c6:2a:31:87:b2:cc:bc:5b:de:62:4f:8d:5b:12:
eb:4b:97:f0:c3:e0:9a:19:cc:ed:5d:c9:5e:7e:99:
b6:c9:5b:ad:c3:0e:54:50:e1:02:25:50:a6:16:36:
6d:9a:c3:6c:52:ca:28:a8:bd:5a:80:bf:16:dc:99:
b7:f3:7c:c7:8e:a6:0c:b6:6b:cd:35:ea:56:cc:fc:
27:62:36:85:ac:c6:26:16:cf:92:f3:29:4a:6e:85:
6e:20:63:b5:58:88:02:29:44:0a:bf:9d:4c:94:ad:
28:06:ff:af:43:4d:87:91:4e:f4:f6:1a:17:eb:57:
03:3d:09:15:28:49:ad:5e:cb:79:9d:47:bb:76:63:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:48:7A:06:29:77:D2:11:68:F4:E5:27:94:C7:BB:EF:BF:9A:4B:16
X509v3 Authority Key Identifier:
keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e6:47:a1:92:b4:0d:52:7e:2e:8f:21:4d:30:ef:ee:25:74:
09:69:6e:ee:f1:6e:b2:f4:45:a2:57:0d:f1:56:87:b6:69:59:
0d:68:bd:4f:5d:e3:82:dd:07:32:20:60:9d:f0:62:0b:8a:3e:
87:ee:a0:16:ba:73:d7:f5:b8:8e:40:36:1d:23:5b:22:5f:2c:
08:05:12:db:b7:d2:78:34:20:e6:21:3a:47:b0:ab:ab:9d:b1:
74:62:44:a7:78:13:d2:57:b6:1c:bc:b0:f9:07:78:0d:e0:96:
6b:0a:75:63:c8:29:93:88:6a:1c:0d:ca:a9:c4:ba:1d:f7:dd:
d0:29:ad:e5:4a:0e:21:bd:7f:65:08:d8:6e:7e:66:55:3d:be:
5a:80:24:0a:d4:bc:2a:e9:0f:7c:e4:3d:fc:b0:92:d1:b7:8f:
2c:1c:9a:25:41:4f:ff:14:40:cf:46:1c:c3:2d:b1:04:0f:27:
51:2c:84:41:14:9a:c5:01:d5:0a:e1:fa:d0:88:57:5a:e2:33:
b6:a5:e5:fb:aa:91:b7:a8:91:fd:f0:e4:ea:fa:88:86:b0:79:
1e:91:1b:3a:36:a3:2e:7b:5c:4d:d8:5f:d0:68:f8:97:d7:fb:
d3:eb:d9:73:31:75:5b:e8:e8:7d:3c:95:10:19:85:ca:72:f2:
cd:e9:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:58 2026 by rpki-client