
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier: 6F5dil9hDVUwVGFvZB6vL0uFQ/pn8yjB1xEnScuHs18=
Subject key identifier: 12:4F:CA:C9:5C:73:5F:F6:47:7C:23:56:A8:E0:32:FE:D6:17:B4:5D
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial: 352E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number: 352E
Signing time: Sat 18 Apr 2026 15:12:30 +0000
Manifest this update: Sat 18 Apr 2026 15:12:30 +0000
Manifest next update: Sat 25 Apr 2026 15:12:30 +0000
Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: szUJd0InT0riKMhmPaG1PpKAhA68N9mPpYBD/zj9xG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13614 (0x352e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Validity
Not Before: Apr 18 15:12:30 2026 GMT
Not After : Apr 25 15:12:30 2026 GMT
Subject: CN=69e39f5e-017a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:02:5e:03:58:60:85:ce:c2:94:4b:4d:4c:
56:e8:55:08:4a:dc:af:ca:f9:f5:a1:44:46:8a:b5:
ea:f8:30:d1:a0:60:b4:11:ce:74:fe:f6:a9:09:df:
21:91:48:12:fc:92:d1:96:5a:6b:16:60:42:93:f3:
23:81:c9:b9:7f:87:27:3b:f5:68:36:1d:50:d5:23:
e3:f4:be:49:4b:e2:22:3d:70:79:a8:d2:b3:8a:63:
cb:77:13:75:fe:de:be:62:e2:64:00:9e:9d:98:c6:
71:71:a1:ec:f7:13:8b:14:21:95:a4:de:47:9a:30:
3b:b7:29:18:19:25:ac:d5:a2:a3:8c:b0:ce:4c:60:
aa:d2:ac:94:cb:31:6f:65:3f:73:19:a7:26:d8:45:
63:39:d8:73:5c:d3:e8:fa:4f:f4:bf:2e:5d:09:f5:
b1:10:5d:3f:f2:9b:3c:9c:ef:03:a1:bf:37:0a:6a:
bc:f7:12:34:67:df:57:65:b8:5b:36:b1:e5:e3:28:
53:24:ea:55:9f:65:73:d6:e6:61:10:5d:99:b9:a9:
de:03:6a:06:68:63:40:6e:8e:6b:3f:54:0b:e0:3f:
56:fd:e8:7e:7a:1c:5a:f8:66:f7:0d:02:5e:88:fa:
d6:d0:aa:4a:47:1a:3c:71:44:2c:f7:3f:64:a9:de:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:CA:C9:5C:73:5F:F6:47:7C:23:56:A8:E0:32:FE:D6:17:B4:5D
X509v3 Authority Key Identifier:
keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:64:11:11:00:62:1a:0b:09:95:b9:2a:47:cd:f8:4b:ec:
c6:29:4b:b0:ce:c7:cf:0f:b5:ee:7b:9c:2d:89:f1:9f:02:0a:
0a:48:b7:2b:8f:75:6e:58:ee:f5:17:f0:91:5a:be:fa:b0:7e:
58:86:99:e0:e9:08:32:d1:e7:fb:af:71:f6:e1:b0:24:6d:86:
a7:85:fb:24:48:cc:3d:ce:17:6e:fa:c6:04:ec:03:99:80:66:
7a:1c:35:68:42:76:d3:b5:cf:6a:f0:93:04:08:fa:a9:42:01:
b9:7d:96:9a:ed:3e:9f:d9:57:9a:e9:c3:75:ed:2e:5d:45:55:
d3:37:4d:0b:f7:05:9b:41:8d:c2:17:ac:48:bc:03:5f:bf:17:
52:49:56:1c:1c:38:3f:32:a3:61:b8:2b:7a:29:f7:96:b7:5f:
e0:87:83:36:a3:03:aa:2b:6f:38:8b:e8:7f:2a:69:79:1a:74:
69:b4:76:9a:c4:06:33:ab:ea:e3:d8:1d:de:91:92:76:4d:01:
c1:e5:f9:2a:a0:59:3a:26:b0:a3:b1:f7:82:97:90:f4:65:f9:
00:8b:5d:69:45:66:d9:6c:7f:b6:b9:1c:74:ae:a1:35:0d:03:
03:2c:5d:30:fd:4c:22:2d:a6:bf:f3:4d:6c:47:42:39:f5:8a:
6d:8b:12:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:32 2026 by rpki-client