
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier: 33IWJyhCSwYF1yuUYyBgzN85C1cmSxunjKKZYvTM2h0=
Subject key identifier: C1:99:83:6F:C6:C1:93:85:2A:61:14:9D:4A:14:3F:49:AF:0E:1C:05
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial: 1BDD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number: 1BC3
Signing time: Thu 16 Apr 2026 16:11:32 +0000
Manifest this update: Thu 16 Apr 2026 16:11:32 +0000
Manifest next update: Thu 23 Apr 2026 16:11:32 +0000
Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: EBSnbhFwNUZJE3Uil9++xg9TahFHUOlBI74k4pjIjgs=)
2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7133 (0x1bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Validity
Not Before: Apr 16 16:11:32 2026 GMT
Not After : Apr 23 16:11:32 2026 GMT
Subject: CN=69e10a34-2a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:46:d6:d6:55:b2:4c:1f:9b:0a:70:17:a2:
39:cb:db:1a:58:4c:fe:c6:b5:9b:ca:f5:2b:16:59:
68:77:08:89:07:1b:23:cd:74:96:d7:fc:17:9d:68:
11:5b:b6:ef:e8:86:15:ea:ff:dc:46:ab:d1:23:ae:
6d:f8:66:f6:f4:f1:cd:5d:17:a2:f1:23:2a:a4:6d:
9a:4f:1a:f7:bd:49:7b:1d:b6:4d:1e:62:c2:be:66:
5d:dd:c5:84:ec:86:21:1b:a1:c6:62:05:ab:9b:b9:
b3:ee:4c:b7:9a:3d:44:11:d5:c8:2d:16:a4:80:b1:
3b:67:79:27:80:13:01:84:00:a7:bd:92:80:04:7e:
54:82:e8:cc:81:6a:ed:d1:8b:b2:36:21:40:d0:3d:
42:ef:b2:57:63:96:2f:91:89:c7:a5:8c:36:83:38:
e7:af:27:ee:74:49:65:2c:31:ea:0e:2e:ed:cd:bd:
fd:df:82:c8:5c:e5:5a:55:05:c5:ba:fd:49:0a:74:
34:d8:fb:a4:44:19:be:4e:93:39:25:a4:5c:ea:41:
a8:98:ad:8f:90:c8:7a:07:9a:f9:66:c4:ab:4c:1f:
e4:cb:c8:33:8f:96:96:ab:af:83:b2:85:ce:a7:09:
14:d7:bf:ec:75:26:66:d7:74:51:4a:ac:7d:f1:43:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:83:6F:C6:C1:93:85:2A:61:14:9D:4A:14:3F:49:AF:0E:1C:05
X509v3 Authority Key Identifier:
keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:6e:a9:83:7e:84:9a:fd:6a:35:26:2f:a6:6e:63:0a:d0:10:
c6:18:1f:37:43:5f:11:c9:66:1e:be:1a:ad:e5:27:ab:fe:22:
38:48:23:cd:7c:51:5b:6a:2f:2e:6f:28:45:04:91:81:1d:e1:
1f:77:4f:87:b6:22:0b:c6:d9:eb:52:43:36:3b:1d:81:86:72:
17:38:f3:3c:93:17:73:1e:6b:55:c2:4b:9d:38:63:9f:4e:e6:
18:e4:61:5b:47:9d:c5:67:fc:a0:29:74:04:d4:c5:7d:e1:2a:
ea:68:96:c7:e3:1f:78:ae:24:8d:c9:91:20:17:01:b2:cd:85:
67:0b:5c:4b:41:12:d8:31:d0:76:f3:62:ff:d9:62:e0:6e:bb:
5b:41:51:0c:0d:40:ef:d2:63:bb:d4:85:39:82:f8:c4:59:9e:
a7:fb:bf:6b:fc:a9:56:dd:09:bc:34:92:0f:51:d0:7a:8c:89:
9c:93:f9:d2:a5:e4:21:93:fd:0c:a1:67:ab:5a:12:68:64:6d:
d8:2f:13:d0:af:40:a1:78:bd:08:e3:d4:25:82:20:c0:3a:18:
b0:fd:a6:7d:b0:d3:c3:76:3a:37:8b:13:75:68:d6:ad:5e:54:
e5:d7:80:ed:cd:d1:0c:b0:09:b4:a5:02:63:3e:70:37:e8:8e:
68:0e:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:41 2026 by rpki-client