
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json)
Hash identifier: nAtOLTX+r9aU6k7lWM7uDBUJDbx8FT218NkIx/X5Cok=
Subject key identifier: 9A:C7:4E:4F:F7:AA:68:7E:1A:E5:7C:45:1E:D9:91:43:63:6A:75:BB
Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
Manifest number: 0200
Signing time: Fri 17 Apr 2026 02:53:42 +0000
Manifest this update: Fri 17 Apr 2026 02:53:41 +0000
Manifest next update: Fri 24 Apr 2026 02:53:41 +0000
Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: 8wfuXIhvJP5M8X6zjgS+kDxQ9fm7NgNebEAue5ys4QE=)
2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: cCwngW+0nv7VgTk47lxbgT3+ex2bp6tm2PDtS8RdU9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Validity
Not Before: Apr 17 02:53:41 2026 GMT
Not After : Apr 24 02:53:41 2026 GMT
Subject: CN=69e1a0b6-e18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:5f:d0:63:f7:dd:92:54:ea:51:e5:e9:28:
d2:88:38:a2:1d:eb:02:48:93:70:93:bf:46:15:19:
87:14:8a:34:73:54:bc:8d:99:c4:17:67:e8:af:71:
d8:bc:89:36:c6:35:cc:b6:1b:53:08:dc:0f:1b:d8:
85:d9:eb:5f:d0:8a:b1:c9:83:48:2f:89:52:98:b6:
69:ef:3e:d0:01:69:93:14:ab:3a:e5:66:f8:28:21:
45:a3:c8:df:c2:be:78:2e:17:2f:18:1e:c7:f7:af:
a1:06:0c:69:f1:66:39:fc:ff:b1:9b:0c:ea:a8:1b:
6f:3a:d2:2e:51:64:13:17:f2:b8:14:9f:57:12:ee:
f7:72:fd:62:da:b1:ef:48:fe:2f:b4:c3:91:75:f9:
7e:e6:f5:be:2c:70:c3:49:bf:7b:e0:5b:79:fb:c0:
01:d6:29:a4:7f:c6:a1:97:49:14:db:69:44:51:df:
44:13:f3:16:42:60:0b:ca:cb:01:9a:23:4d:eb:ec:
09:04:b0:3c:e1:43:b4:ea:5a:ab:32:d9:2d:e2:0b:
1d:6b:db:ff:3c:66:21:eb:e8:d1:bb:15:a5:e7:91:
a5:e6:78:fb:d2:3f:1a:60:44:22:02:6e:cc:bc:9c:
f9:9f:34:1e:0c:65:97:f4:9a:45:bc:a0:0b:9d:51:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:4E:4F:F7:AA:68:7E:1A:E5:7C:45:1E:D9:91:43:63:6A:75:BB
X509v3 Authority Key Identifier:
keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:51:81:1a:b0:45:dd:98:e3:ec:81:ae:c6:ee:28:fc:2c:4e:
c9:6a:2d:07:e6:ab:f1:d3:0d:7c:65:8e:33:6c:aa:cd:08:ae:
6a:1a:ae:a0:5b:67:2d:1f:d2:9c:61:b9:5a:ac:55:af:24:ec:
b3:f8:02:4d:ba:2a:55:51:1e:c9:cb:5f:4d:2e:88:16:c1:87:
b2:68:7a:86:46:96:82:4e:df:61:cd:35:e2:7f:1f:4b:62:7a:
72:8f:ae:d6:93:a2:a9:21:ac:b4:16:33:9c:06:bb:2c:3c:8f:
88:57:c8:91:da:ee:36:17:4a:75:d1:7d:b6:0b:2e:cd:c2:67:
87:3e:56:4e:70:4a:3a:d7:af:d7:fb:17:38:aa:75:8f:de:70:
0e:91:6d:70:7c:c6:c9:ec:38:63:f9:5d:1b:2f:5c:0c:c6:4e:
9d:bc:52:bb:f1:12:33:90:92:b1:24:80:33:d5:b7:4b:18:18:
79:8d:c0:66:e7:74:fa:47:a1:d3:da:dc:a3:a2:31:91:af:b9:
a3:00:a4:44:0f:8a:e7:92:15:07:87:2d:1b:c1:0a:c5:a7:48:
45:e1:d4:0e:40:40:70:1c:8d:4b:a9:a2:50:1e:23:1a:ac:e5:
93:f1:19:e5:e8:45:c9:ae:41:51:2e:33:93:6a:a7:fd:f8:78:
c5:58:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:21 2026 by rpki-client