
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json)
Hash identifier: MOeLgrn6WBEBsxojZEKt/wTSGBZ2KBwhUcw5TnT5Y30=
Subject key identifier: C1:1C:9F:3A:12:32:8F:7A:4F:8B:BD:90:D1:3A:90:5E:73:A3:89:5F
Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
Manifest number: FF
Signing time: Sun 19 Apr 2026 05:50:39 +0000
Manifest this update: Sun 19 Apr 2026 05:50:39 +0000
Manifest next update: Sun 26 Apr 2026 05:50:39 +0000
Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: cb1cYuMf9HXuJmynBWA28dw+1uwjzKL7bepVvCAWFzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Validity
Not Before: Apr 19 05:50:39 2026 GMT
Not After : Apr 26 05:50:39 2026 GMT
Subject: CN=69e46d2f-b2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:ce:47:0e:fa:c9:4d:f8:f1:5d:ad:33:80:
29:73:df:b9:22:27:8c:39:41:0a:c5:20:4c:d6:e0:
a9:bf:de:b1:48:0b:9d:9c:67:74:26:e4:08:b6:f5:
0a:60:18:29:38:83:30:e5:47:2d:1c:0c:6e:0f:7c:
c1:3f:aa:8c:e9:bb:18:57:20:2e:da:a7:78:7a:e0:
5a:f7:80:02:9b:a6:0c:09:0c:05:a9:49:f0:45:d9:
92:0c:5b:a3:8c:fc:e4:e5:83:28:9c:45:bb:43:52:
ba:ac:98:09:a3:4f:72:5c:9e:6a:f0:bb:6a:f4:25:
dc:2d:bb:14:72:12:57:c8:3e:62:7c:03:cb:11:29:
7a:7f:c8:bf:61:36:2c:8f:69:57:35:78:83:d4:51:
5b:80:72:a9:a9:7c:e1:c9:a2:65:89:50:44:57:f4:
55:dc:74:50:ef:13:5f:28:22:69:a1:42:8a:8e:2d:
9f:47:f4:2a:a7:4b:01:84:79:8c:14:05:11:b6:4c:
9f:36:06:b6:cf:2d:04:6e:ad:64:57:28:d5:27:c8:
f7:4e:fd:a3:f7:30:bd:f1:70:06:8b:33:a6:87:19:
02:4f:cb:eb:ab:fc:39:10:e1:d9:8c:ff:91:1c:e1:
c1:05:63:85:c9:d7:19:47:a7:c0:59:81:a1:ae:b9:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:9F:3A:12:32:8F:7A:4F:8B:BD:90:D1:3A:90:5E:73:A3:89:5F
X509v3 Authority Key Identifier:
keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d3:c2:cb:9a:b1:7d:01:f0:0f:a7:3a:d4:eb:b9:8f:e3:44:
b0:4a:04:cb:49:84:20:51:31:4b:a4:79:d3:35:12:ba:8b:4d:
a9:fd:a6:c1:10:13:b4:ed:06:1f:5f:69:c6:b1:47:92:c7:ed:
07:8e:5d:d4:cd:4c:a0:73:b9:e6:d0:8d:c3:d3:27:01:5f:5f:
3c:14:bf:59:68:c3:c5:f9:04:86:18:bb:2e:8f:98:64:78:0f:
46:d6:28:9e:48:e7:b3:23:fa:b1:cc:9d:bd:0b:4d:1f:83:a8:
bb:70:36:eb:ed:18:6e:00:1e:e4:54:e0:0e:97:66:a4:8f:10:
35:bf:de:88:29:71:6b:5b:2a:99:dd:56:0a:d8:2e:a2:e9:eb:
a4:20:8b:cc:48:7c:5f:12:cd:63:e0:de:a8:9b:58:bc:b0:5e:
00:8e:d0:4b:e1:4b:4a:e0:ec:a1:49:80:36:df:9e:45:7f:8b:
9d:fb:df:ae:dc:e3:c3:68:5d:ab:5d:38:27:99:d1:4d:f5:1e:
50:ae:07:43:77:c1:38:f4:cf:e3:5a:2c:93:65:fc:57:35:bf:
77:2e:ef:9a:32:a9:7d:db:40:94:cb:66:f2:fa:db:61:9f:f7:
4e:ab:f3:f9:32:b6:de:12:53:1c:7d:2e:82:b6:de:54:87:b2:
31:c9:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:16 2026 by rpki-client