
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier: nokgccR+v0PXYHqoPkgySD1FGorFJUnWG8310hW48Tk=
Subject key identifier: 5D:03:52:A6:88:FE:FA:73:E8:BC:76:4C:DE:0F:AD:A4:D5:29:B4:B8
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial: 0A59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number: 0A47
Signing time: Thu 16 Apr 2026 19:38:02 +0000
Manifest this update: Thu 16 Apr 2026 19:38:01 +0000
Manifest next update: Thu 23 Apr 2026 19:38:01 +0000
Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: qesbYjawqw7X8Nj8QZKRSwBOi1qhNchpIGvvL6nh7xA=)
2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: mpij4Re6bXjGBWFyLXPJmKPd1UHVx7aiX6dvj4qN29k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2649 (0xa59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Validity
Not Before: Apr 16 19:38:01 2026 GMT
Not After : Apr 23 19:38:01 2026 GMT
Subject: CN=69e13a9a-99a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:ac:28:4a:10:37:7e:f3:2e:01:a9:a1:a4:
c3:4e:05:c9:7c:01:15:f4:58:15:51:99:6f:07:8f:
e5:59:2a:be:d4:8a:4b:1e:50:01:2c:c6:83:13:0d:
f5:71:a5:20:01:3f:e4:89:a1:bb:93:81:69:8e:5d:
c3:f9:5c:64:18:1b:17:15:53:6d:b2:3e:dc:22:4f:
3d:bf:6b:52:05:d4:71:05:2f:13:f3:57:b3:82:67:
22:af:15:d2:6c:b2:9d:32:70:d4:64:39:26:e7:a3:
e3:8e:43:c3:9b:a2:bb:50:97:fb:13:d6:82:a8:c9:
7d:55:74:52:ab:4f:9f:7c:c7:f4:d7:3d:eb:b7:75:
db:d7:51:43:9c:ef:a3:2b:b3:c1:67:3a:2e:02:3b:
b3:5e:77:39:ac:26:c0:f5:7b:d8:ea:f4:2f:8c:74:
cf:3e:ae:42:f6:41:02:fc:9c:03:7d:8b:50:2b:eb:
77:d1:cc:bb:df:68:81:a6:ee:d4:6b:9a:bf:6f:bf:
d1:44:92:c4:13:1b:66:47:9a:df:24:55:d4:df:23:
56:21:64:5a:d0:17:c7:9e:ca:d5:69:40:99:95:f9:
cc:46:5f:b2:72:a3:21:6b:24:44:2e:f9:89:f8:af:
98:74:3e:fb:c9:c9:90:2f:ff:76:2f:bf:ef:9c:eb:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:03:52:A6:88:FE:FA:73:E8:BC:76:4C:DE:0F:AD:A4:D5:29:B4:B8
X509v3 Authority Key Identifier:
keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:8d:04:d9:08:c1:a4:2d:19:b9:40:48:f7:55:2c:90:8a:
c4:fe:60:95:ab:33:8c:ce:e3:f1:bb:6b:79:e8:84:b0:10:7c:
27:42:b5:ab:ce:8b:01:2f:db:46:26:2f:bf:98:25:78:8a:47:
a2:5a:6e:a0:bc:46:1b:15:8d:11:61:d5:51:1a:35:0c:81:69:
df:c1:49:bc:57:0a:ca:7e:45:38:3a:f5:c6:51:7a:a8:14:93:
ca:2f:e3:00:85:a7:3e:3b:3d:75:fa:3c:bc:9d:ee:96:bb:9b:
49:ee:50:60:db:04:d0:75:d8:6b:d5:df:95:57:d4:b5:dc:10:
40:c7:3e:23:00:64:66:4d:85:c3:6e:a6:07:8c:73:03:a8:00:
6a:23:9f:f2:f9:75:1d:cf:4b:46:f7:35:c8:8e:3d:d3:10:49:
0a:25:1c:d5:82:07:26:98:59:10:38:6a:23:d8:d9:14:50:3d:
45:3b:1d:32:c2:84:ef:d9:c7:48:88:de:29:19:5e:fa:37:a3:
da:b5:80:1f:f2:36:88:c1:c9:dc:7c:b8:3a:24:82:09:44:6f:
0f:5f:56:9f:ca:f1:d6:d5:1a:9f:41:4d:6c:f7:34:bd:70:a7:
01:41:ff:20:16:cb:1d:a3:6b:73:60:e0:5c:43:3c:44:f2:1f:
67:e4:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:17 2026 by rpki-client