
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier: A2730lcaLOd5nOY4ymJDaPqOhh5C2KAauC+you/J/SE=
Subject key identifier: 36:66:51:32:20:9D:98:60:14:33:DC:19:1C:E8:18:BF:C0:55:6A:89
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial: 07B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number: 07A9
Signing time: Thu 16 Apr 2026 21:23:49 +0000
Manifest this update: Thu 16 Apr 2026 21:23:49 +0000
Manifest next update: Thu 23 Apr 2026 21:23:49 +0000
Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: dEYckJJJZDHpD2Tx8B2X4rprM6c4vEaBelRlFKcGoow=)
2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: EF9uieKoaY19hPq/K/Sub8whVe1rvynhE+WooVi1n/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Validity
Not Before: Apr 16 21:23:49 2026 GMT
Not After : Apr 23 21:23:49 2026 GMT
Subject: CN=69e15365-89a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:19:8f:a3:66:5c:73:94:d6:5f:df:a8:8a:
4b:ef:85:81:f6:45:f3:9f:c8:e8:90:31:3f:d0:2a:
b0:c8:6f:c8:f0:bf:2b:e4:f5:45:f7:3d:03:df:00:
68:3c:83:35:76:b5:6a:a7:7b:77:6d:d7:e7:d3:93:
0b:bd:92:65:6b:8a:dd:f3:af:7a:97:51:4f:96:41:
f9:af:8c:40:66:1d:51:8f:02:ec:33:45:7e:cf:af:
2e:8a:67:ed:d6:a9:7c:58:61:97:a1:74:37:57:8a:
02:84:65:3d:c7:9b:1e:fb:8e:03:00:36:9b:96:7a:
b4:a8:8f:c0:e6:2d:7f:6f:85:c3:9a:46:81:16:e2:
f1:e9:54:ca:c8:2c:d0:7a:a8:9c:73:a8:e8:d5:27:
67:d2:5c:04:47:22:ee:ad:36:9c:90:9b:3c:a8:63:
7e:d0:17:1a:7f:30:66:f2:cd:b1:9e:91:34:11:cc:
59:e9:6b:37:b4:9c:1e:4a:7d:22:3c:87:2e:5b:0a:
8b:92:e9:35:91:d9:43:1c:0c:89:c0:d0:aa:6b:9a:
4a:23:9f:25:e0:53:6d:8f:66:a5:88:d9:e8:0f:68:
09:91:53:59:58:45:e1:6b:43:19:87:bb:ec:1b:b6:
3e:e7:dd:35:11:fe:e6:f2:4d:f7:e1:f3:6a:47:8a:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:51:32:20:9D:98:60:14:33:DC:19:1C:E8:18:BF:C0:55:6A:89
X509v3 Authority Key Identifier:
keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:73:31:2a:54:80:17:29:24:66:5e:86:c2:1b:2f:0c:e6:b1:
e1:47:a4:7b:ab:a2:b1:d9:62:fe:7d:1d:90:b8:a1:82:53:e2:
26:6a:61:bb:85:9a:f2:06:45:53:0a:97:c2:87:40:89:00:e9:
9a:c7:d2:ac:d5:b6:7c:fa:c4:e9:b8:96:76:35:d8:ac:c8:d0:
6c:55:d5:2a:03:29:93:b0:4b:07:bd:e6:64:83:28:50:a3:da:
1f:00:6f:a4:f1:2f:ae:e5:8c:4e:5a:ba:9c:81:0f:74:b8:66:
86:52:e2:c9:4e:ee:13:ba:54:ee:18:2d:45:a6:c0:da:e7:77:
d3:0e:c4:9e:81:0b:c5:0a:45:4d:c8:d2:ff:93:9d:4b:20:86:
93:65:de:62:13:6a:91:cb:8b:07:02:a6:23:66:95:04:f2:b2:
9e:0e:79:06:85:21:e6:53:b6:a3:d6:c9:5d:66:00:77:79:0e:
3a:55:3a:06:9b:05:ba:c7:cc:8c:76:28:bd:34:03:74:a9:8d:
86:17:cf:8e:c0:72:10:a1:87:27:d1:08:c5:4b:49:e5:ce:4b:
e5:6c:6c:aa:cd:df:a9:60:ad:7f:9e:81:17:cc:1d:6e:d4:85:
f5:f0:ce:db:f1:fe:dc:64:a2:69:69:41:da:68:4a:9c:46:71:
81:96:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:39 2026 by rpki-client