
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File: qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier: pK6vPcNhaX6HA1QzEvmwRkA1T9zbH1Tr88UzUbVn/TI=
Subject key identifier: 0D:8D:F3:2B:C1:B7:B2:CD:88:56:C6:3E:80:77:C2:B7:66:24:C5:3A
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number: 01C5
Signing time: Fri 17 Apr 2026 03:43:38 +0000
Manifest this update: Fri 17 Apr 2026 03:43:37 +0000
Manifest next update: Fri 24 Apr 2026 03:43:37 +0000
Files and hashes: 1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: h/6fTiR6CKc3RwKvllpm7XiVfinvL/5JPpyjX7WkJCo=)
2: E13D8940342E11EF84328672C4F9AE02.roa (hash: i946rkKnIPD36Fiz0DiuBSlPgc8OVRMaBixyXUc/SDA=)
3: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: X9PlsIxIK/tymRHPH3Dn2w7Nzml17MG5US4WdS+LzEc=)
4: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: NAqCvT4llBl3uhGXgqlzi3IaSpRA/zrRaT2L0Ldxrkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Apr 17 03:43:37 2026 GMT
Not After : Apr 24 03:43:37 2026 GMT
Subject: CN=69e1ac6a-57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:88:5c:47:44:c4:9f:9f:89:87:ac:03:42:
ee:76:b9:ff:a8:a6:a3:8d:71:2e:04:52:88:c0:0e:
bc:8d:80:d0:fc:5f:a8:c8:01:54:7e:f7:71:d7:6d:
5d:f5:99:1b:dd:c5:80:71:74:c7:64:73:99:22:18:
e0:fa:52:2a:26:db:0e:6f:00:b5:ce:e2:d8:0f:63:
0b:03:54:ae:34:3c:a7:40:26:15:e3:00:d8:4c:86:
dc:a0:0a:09:df:ea:1e:f5:69:5f:a1:04:d2:4f:06:
04:91:23:3d:c4:4c:79:69:77:6c:29:b0:8c:e2:5d:
48:67:0c:11:95:96:95:ec:a5:d9:83:1b:6d:d5:62:
43:8f:26:aa:d7:e2:21:19:87:27:f3:e2:c4:be:57:
4a:1e:3e:bd:e2:c2:a3:d8:4f:dc:aa:62:a8:4e:0e:
85:9d:f7:10:a6:36:07:01:e5:59:4a:81:dd:cc:6c:
0b:88:1e:13:bc:3e:d4:7c:b4:12:44:43:26:3e:dd:
4f:90:56:ed:de:b9:8d:ff:e5:78:8f:80:76:0c:6a:
bf:83:3e:64:e0:cc:85:62:c3:5a:60:61:bd:02:14:
2a:63:93:f8:17:81:86:f5:b4:ca:48:61:05:b2:aa:
91:32:0f:c6:01:64:f8:83:0b:bf:e3:30:a2:d8:3e:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:F3:2B:C1:B7:B2:CD:88:56:C6:3E:80:77:C2:B7:66:24:C5:3A
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:4a:a8:df:45:1e:dd:57:00:68:9f:31:09:e2:56:d5:95:20:
9f:4d:f2:12:de:9a:e3:f9:e2:f2:90:31:8b:59:6e:aa:32:d5:
5f:84:32:d0:2d:99:7e:c2:ce:59:0c:65:15:a4:20:58:fe:8d:
2c:6d:a0:05:ea:49:6a:4e:2e:3c:ab:1e:88:be:22:b9:da:92:
39:95:61:8a:0f:64:08:99:20:6e:bd:4b:e7:2e:22:62:52:8e:
87:e2:69:96:6b:6a:25:b9:61:70:26:7e:1c:6b:99:b7:92:6a:
ea:ca:42:74:fa:bb:ab:1a:ad:16:33:e3:a3:37:e6:7a:7e:97:
bf:a6:1d:73:a5:54:dc:66:2a:d2:0c:2e:f5:51:bc:58:f3:5e:
3e:11:c2:0d:5d:2b:7d:c7:a8:9c:37:a9:f6:9c:21:5d:14:b5:
b1:89:e0:52:67:1b:b8:5e:fb:f1:b2:2d:d0:d6:8e:bb:08:ba:
ba:9b:11:53:2c:02:f2:38:ff:c9:a7:c4:03:1f:5f:80:70:97:
0c:4a:7e:16:7c:13:a1:32:74:09:ea:c1:d8:d7:be:3b:f1:6d:
a7:2a:42:3c:d1:d7:0d:04:57:b4:1c:e7:db:58:f4:00:f8:fb:
ad:16:e8:c1:d4:1d:55:2b:ba:c9:d9:14:bd:04:e3:2c:b5:4c:
6a:d1:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:04:44 2026 by rpki-client