
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
File: QwISXvsUnkUVYMdJW31DzZ6az_c.mft (raw, json)
Hash identifier: qKrT+vqGEeE7mpJHd4auptYeasKIsJ352kShCTKprnA=
Subject key identifier: BD:44:92:4D:50:01:CF:34:61:84:D0:C9:81:66:FC:47:4C:24:9E:55
Authority key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7
Certificate issuer: /CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7
Certificate serial: 0760
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
Manifest number: 0755
Signing time: Thu 16 Apr 2026 21:38:17 +0000
Manifest this update: Thu 16 Apr 2026 21:38:17 +0000
Manifest next update: Thu 23 Apr 2026 21:38:17 +0000
Files and hashes: 1: QwISXvsUnkUVYMdJW31DzZ6az_c.crl (hash: YmDJlqnLs3OXkIonYbywGuLcveoucjmTmhgJjaDXvcs=)
2: 8BA860DC616D11F0AD24140DC4F9AE02.roa (hash: sRoeLUhbPjJYbE25LlrvkNaHsVWYDP+5T54uV9J9yk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl
rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AD0, serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7
Validity
Not Before: Apr 16 21:38:17 2026 GMT
Not After : Apr 23 21:38:17 2026 GMT
Subject: CN=69e156c9-df7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:c5:11:8d:59:63:1e:19:b3:30:7b:13:a3:
92:79:a5:26:8f:5a:0d:4d:56:92:b6:dd:64:9e:fe:
de:23:7d:89:22:a7:f9:e3:9a:d5:d8:56:f5:ef:75:
16:3c:11:1b:fc:05:61:f7:4a:97:4f:ec:c9:b6:b8:
29:7a:7e:df:b4:dc:2c:d5:a0:1c:c1:ff:5f:5c:c4:
54:c2:3f:15:02:14:d3:f4:21:64:3c:96:73:e8:4e:
ca:e4:b3:bf:1b:d7:6d:34:43:a7:72:01:6a:d9:87:
51:91:60:18:22:b1:32:33:6e:04:f2:8c:ec:bf:3e:
44:aa:01:92:bc:25:20:84:6b:97:5f:7b:8e:20:48:
88:d5:b4:7e:a3:8f:f3:ff:c8:cb:ab:26:d1:fa:02:
69:6d:4e:f7:c6:21:b9:1a:9b:7d:18:ea:50:25:6c:
e3:a9:4b:3b:32:0e:9a:f7:d8:7b:cc:60:9f:11:85:
96:bf:1f:b7:5b:ab:56:38:42:d5:58:f4:e7:eb:c8:
6c:5a:d9:43:d7:31:fb:dc:b5:08:be:66:49:4a:2d:
0c:a2:73:e8:e9:eb:27:70:87:0e:ff:16:95:b8:f5:
06:cc:f9:45:2a:fc:17:3d:3f:81:63:f7:47:ca:1f:
1f:85:3d:da:70:55:00:76:a4:74:29:33:bc:26:d1:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:92:4D:50:01:CF:34:61:84:D0:C9:81:66:FC:47:4C:24:9E:55
X509v3 Authority Key Identifier:
keyid:43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:3a:f9:ae:4e:71:fc:2a:b4:34:24:4b:4c:6f:0f:bc:bb:90:
ca:60:4b:bf:54:e2:9b:4d:19:a9:fc:a5:0b:27:14:cc:fc:a5:
a2:ff:f6:75:8d:1a:34:77:8e:63:50:0a:c8:0e:1f:fa:32:1a:
56:ec:f0:c2:3f:e2:75:b3:e4:0e:18:d3:e0:53:4f:e3:1e:ee:
22:71:a3:79:5d:8a:43:ca:ba:32:66:f8:2f:de:4f:a2:c5:3a:
fd:98:18:fe:96:2a:ec:6a:34:19:86:6a:45:39:f0:18:d5:0f:
77:1b:c7:63:04:e8:65:c8:11:ad:da:72:8e:7f:d5:62:88:a0:
d9:20:80:6d:63:e1:e7:c3:8e:72:2e:e6:80:da:ba:2e:33:4e:
8e:15:8e:5c:56:94:8f:c6:3e:f3:76:22:32:49:2f:f4:c4:e3:
5f:35:22:7b:30:4a:16:9f:3a:82:09:db:dc:f8:e7:93:ff:3d:
79:71:65:72:ba:16:06:9a:08:74:6d:43:db:16:08:5c:12:5c:
a6:f8:21:36:bc:ec:cc:40:06:cd:8d:2d:3c:6d:df:4d:a9:4a:
d0:7e:b2:cd:e4:01:c7:f6:75:f7:7f:75:dc:36:cf:13:81:b7:
4f:e3:99:f4:3b:5d:b0:a5:fb:c1:25:aa:3d:d9:4c:f3:63:a0:
d1:2d:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:44 2026 by rpki-client