
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
File: QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json)
Hash identifier: RsiOeZcjVQYhxfxQ3ILym8bCCT5EX6TDhKk5kziBlBs=
Subject key identifier: EB:0B:9C:2B:C0:AD:FD:A6:DD:2E:9B:64:86:24:C3:84:E2:8F:92:11
Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED
Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
Manifest number: 34
Signing time: Fri 17 Apr 2026 08:20:14 +0000
Manifest this update: Fri 17 Apr 2026 08:20:13 +0000
Manifest next update: Fri 24 Apr 2026 08:20:13 +0000
Files and hashes: 1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: 8FMTkfh93DiWEbNlaOyo2JcDk3Hs9xw1YCZQVWUUtCA=)
2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl
rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED
Validity
Not Before: Apr 17 08:20:13 2026 GMT
Not After : Apr 24 08:20:13 2026 GMT
Subject: CN=69e1ed3d-aab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:90:59:8d:ed:ea:7d:7b:6b:6a:b8:a2:81:
33:c6:5b:16:41:9c:e9:26:dd:d2:19:64:8d:f3:7b:
1a:3e:c1:f5:bb:18:b6:26:0c:ef:11:63:5f:a0:be:
f4:91:78:40:53:d8:f2:a9:8c:9d:38:a5:a3:66:28:
9d:dc:54:1e:43:eb:83:78:88:3b:9c:56:21:7c:21:
58:4b:8a:22:23:13:f0:ab:ea:d4:d7:2e:c3:d3:c6:
94:66:d2:90:b7:8a:13:07:9f:af:c8:32:51:7e:59:
59:80:54:11:f3:6c:47:7e:d6:21:e3:f4:a4:26:ab:
d4:10:69:8d:27:f1:5f:25:e7:ff:aa:28:64:36:cd:
20:4a:60:40:c0:6b:af:d3:4b:30:e8:8f:24:75:63:
bd:a3:80:a5:24:33:29:d6:b6:07:ee:e5:8c:98:18:
d8:aa:e5:f7:36:73:7e:39:92:24:fa:38:9f:c0:29:
3d:5b:9a:11:97:8b:78:0f:75:37:40:11:00:d3:16:
2a:b1:9c:35:2a:c4:b8:32:61:bf:89:e1:39:e6:7e:
cc:3c:07:da:7a:75:d6:b6:72:cc:ca:c1:79:f2:26:
60:db:d0:bf:46:71:fa:05:b8:58:7e:dd:5e:e6:a3:
82:ea:47:ad:8e:bc:45:47:d8:6a:b7:cd:49:f5:80:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:9C:2B:C0:AD:FD:A6:DD:2E:9B:64:86:24:C3:84:E2:8F:92:11
X509v3 Authority Key Identifier:
keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:85:3f:5e:6b:4b:09:bd:08:7a:64:56:80:b2:17:b9:46:99:
37:ea:ab:92:2b:a1:a4:0a:fe:7a:a1:f7:79:36:6a:37:c2:93:
8e:43:94:06:ba:ca:d4:ea:7a:eb:9c:fb:70:44:9e:a6:c9:cb:
00:b1:27:5f:e1:fe:df:a3:e2:7d:42:4d:cc:4b:90:7f:57:d3:
2b:6d:28:42:67:f6:c4:b7:fc:d4:3a:84:f8:55:2e:be:9d:df:
90:78:8a:9f:fe:b4:1f:60:b4:d3:4e:ab:04:9c:83:88:b3:0a:
e4:b5:33:55:29:1d:99:12:c2:bb:63:11:7b:0a:9b:3d:11:e0:
c0:15:b4:35:65:d2:9f:7f:9a:b0:b8:7f:4f:ab:19:97:0e:19:
97:d1:dd:1c:4e:ae:d6:8b:b1:d2:27:da:9c:5d:c5:0e:0b:35:
33:4c:d0:b6:dd:65:17:9d:89:32:e1:13:6d:1e:f8:d5:c8:f6:
95:e7:f2:3b:1c:64:e3:2f:fa:3d:15:8c:f5:8c:02:b3:e7:97:
4a:71:91:28:f2:96:fb:a4:20:50:e4:56:4d:eb:54:26:6d:33:
8d:8c:72:66:93:47:14:89:89:50:4d:12:12:83:7b:db:9a:43:
5f:24:0f:ee:e7:38:bb:46:ff:fe:16:23:ce:d6:78:66:aa:67:
9e:13:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:44 2026 by rpki-client