
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier: Gbnr0bVfiVmu/yq+/mEPLCQ5mhW4yUw1dH7dzWyfP7I=
Subject key identifier: 75:BF:9E:0F:7E:47:FA:6A:FB:A8:24:CC:6E:4D:40:B9:C9:AB:EB:43
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number: A8
Signing time: Fri 17 Apr 2026 06:57:36 +0000
Manifest this update: Fri 17 Apr 2026 06:57:36 +0000
Manifest next update: Fri 24 Apr 2026 06:57:36 +0000
Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: D4G7cWZC8s1XhVw+veICHr2aEDqDzu07KqT5SahiizA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Validity
Not Before: Apr 17 06:57:36 2026 GMT
Not After : Apr 24 06:57:36 2026 GMT
Subject: CN=69e1d9e0-81d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:51:cb:84:33:ba:d3:35:66:03:08:79:95:
d1:2d:ae:14:75:e5:fb:2d:79:af:a2:b4:82:03:0a:
9a:6d:c9:a8:25:bd:e4:3c:cb:49:50:68:e0:d1:d0:
e0:f2:c8:eb:31:a3:a9:8c:04:28:f9:76:28:c2:95:
37:cc:14:8d:1c:94:6e:67:11:37:9e:64:a7:9e:88:
18:58:9f:85:52:a8:df:25:33:b6:f8:cd:a5:c0:56:
e6:88:a3:61:25:b1:91:37:c5:b4:32:3a:3e:75:61:
1c:b5:65:39:c7:68:6c:a2:98:bb:44:f1:f6:07:60:
a6:49:94:c2:65:7c:b7:2c:d0:20:18:63:86:82:6f:
48:f8:ab:1b:73:a2:c1:bc:83:15:a9:f3:37:46:5d:
b1:b3:b3:20:fe:79:c0:47:c0:63:31:f9:b4:f4:c7:
d9:75:cd:a8:66:95:50:2b:76:6f:57:7d:05:5c:a1:
63:96:58:42:29:57:12:f1:da:40:eb:1d:9d:f3:da:
20:50:d1:3d:6c:01:31:d8:ba:03:5a:6a:50:ed:9e:
82:1c:c1:b3:1f:70:14:42:eb:e9:5d:86:46:bc:cd:
99:8b:69:69:79:c6:40:c9:58:ba:44:84:78:fe:73:
af:1f:f4:cb:c9:3e:26:0e:a6:89:a7:fa:c6:a9:a9:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BF:9E:0F:7E:47:FA:6A:FB:A8:24:CC:6E:4D:40:B9:C9:AB:EB:43
X509v3 Authority Key Identifier:
keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:04:d4:48:18:67:36:38:26:0b:04:a3:83:81:9d:97:6e:57:
04:7c:18:f7:01:69:3c:68:90:c5:5e:f9:5d:67:b4:fc:6c:fb:
9b:b3:44:fd:2d:89:84:4d:38:5f:c4:0e:3c:d0:7f:7c:54:e4:
35:cc:e8:a3:f9:87:6c:16:4e:17:23:3f:ef:83:bd:96:25:24:
98:51:f5:50:65:ce:62:29:76:c3:68:44:a4:d8:8e:84:85:ca:
7d:4e:3a:15:4a:cb:87:32:db:d1:7e:29:9f:b2:a8:4b:fb:af:
35:ec:48:13:13:4d:c8:c0:ab:35:ef:b2:e0:1f:43:91:ae:14:
af:98:49:d2:20:9a:0c:e2:f5:9e:28:2d:0b:33:8d:76:f0:d6:
3c:53:5f:a0:01:6c:56:ae:70:4d:c0:a2:9f:e3:0d:cd:2c:f1:
8b:8e:84:bb:02:82:d5:db:c7:2b:db:1b:c5:6a:e8:07:11:a6:
05:dd:7c:d5:26:f2:16:5a:ae:fc:7c:cf:ac:14:1e:88:9d:19:
b7:14:a5:77:24:73:0c:e8:a7:ca:9a:75:e8:ea:07:8d:e7:9b:
10:92:67:d1:2f:f3:9a:22:cb:0b:23:68:d2:49:07:61:9a:1e:
0b:db:df:14:8c:a7:0c:70:16:5b:36:8f:06:45:ea:f5:14:86:
22:a1:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:38 2026 by rpki-client