
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier: e5ZZAcKiLGNN2I/o4PsYTwC7Vz3LcN+BNCi9gB1GmXE=
Subject key identifier: C6:A1:BB:44:DE:9B:F8:98:71:97:BC:D3:D4:09:62:C6:D7:01:A2:37
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial: 06B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number: 067B
Signing time: Thu 16 Apr 2026 22:29:51 +0000
Manifest this update: Thu 16 Apr 2026 22:29:50 +0000
Manifest next update: Thu 23 Apr 2026 22:29:50 +0000
Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: K90jDryWYNoZNciSmysAlp2V2Emvfje4ynr2aUVSiuY=)
2: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=)
3: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=)
4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1713 (0x6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Validity
Not Before: Apr 16 22:29:50 2026 GMT
Not After : Apr 23 22:29:50 2026 GMT
Subject: CN=69e162df-d261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:21:49:c6:96:67:35:c6:82:e0:79:ff:ae:
9f:f5:f9:49:1e:0c:2a:4e:8d:a7:4f:ac:9c:eb:e0:
98:cb:9d:85:7f:8a:01:2e:8d:d3:eb:18:f5:ca:b8:
72:dc:bb:c8:ea:be:f2:47:bf:2b:88:db:62:7d:c8:
9a:fc:77:cc:ef:57:ed:54:c6:f9:44:e2:43:38:41:
f9:72:a5:e4:2a:2d:94:a1:82:26:a9:4e:b5:94:6c:
6f:f5:e8:d5:8a:c4:75:2c:63:68:25:ce:2d:96:c0:
65:4a:af:71:74:55:c3:c5:ad:fa:1d:7d:65:a1:82:
05:2c:f1:af:c6:1d:19:ce:4b:33:a0:70:31:e9:0e:
94:82:e8:d8:95:66:58:9f:d9:3f:9a:4f:c7:8d:ca:
8b:58:10:ba:db:25:39:86:79:82:5f:bd:b7:d7:af:
fa:d2:dc:b7:2b:b8:b8:f2:68:f7:dc:d9:2e:f5:19:
b7:51:86:b3:98:58:03:ce:a2:33:40:51:04:f2:c7:
c6:23:55:4d:66:cb:c3:01:34:49:9a:df:00:81:47:
9f:c0:fb:d1:30:f5:74:c6:2a:84:fe:bf:b0:c6:a9:
00:eb:8c:52:ce:18:1c:24:c8:1c:2d:e5:55:48:92:
62:cb:70:4f:f3:b0:f0:d7:8e:da:bf:4d:ea:25:a1:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A1:BB:44:DE:9B:F8:98:71:97:BC:D3:D4:09:62:C6:D7:01:A2:37
X509v3 Authority Key Identifier:
keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d0:41:7c:01:47:e4:56:1e:3e:d1:78:aa:b9:2b:d4:7d:59:
67:00:0a:8c:9d:1f:c4:48:5a:9e:80:0f:12:0a:2d:8b:5f:b4:
49:0a:25:e7:78:55:bc:c5:ca:29:65:c3:bc:bd:af:a5:f5:dd:
f8:cf:08:eb:ca:d5:78:5b:1f:2c:64:49:85:a8:6c:96:60:05:
fc:2f:cc:8a:3d:f5:17:fb:da:bb:dc:e7:58:e2:b1:26:53:05:
ed:a6:9d:e5:a1:7a:6b:76:c2:91:aa:10:e8:a5:1b:42:c4:17:
ac:07:c2:f0:95:e9:dd:a3:5a:b1:d0:63:dd:75:7c:79:ba:47:
7c:a6:06:9d:f1:f5:40:44:38:d0:cd:d4:0e:3a:62:c5:a9:46:
82:b8:0b:4c:75:c2:9c:bb:04:6e:a4:5e:10:3d:08:96:fb:36:
86:39:d7:8a:16:c8:5d:1c:f4:44:12:37:85:b0:83:ef:be:13:
d4:45:c4:75:c6:bb:5d:44:35:27:0a:16:84:31:e1:bc:8d:07:
8e:d4:c7:7c:6e:19:38:37:d3:c9:15:2f:5b:9f:a4:32:7b:f7:
2c:4e:96:60:5e:b9:46:f3:3e:93:85:cb:c9:65:ae:e0:68:74:
c7:02:00:86:01:15:cd:22:be:72:75:ad:a3:35:40:2e:71:39:
71:71:08:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF
NDZDRTBGN0YwHhcNMjYwNDE2MjIyOTUwWhcNMjYwNDIzMjIyOTUwWjAYMRYwFAYD
VQQDEw02OWUxNjJkZi1kMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsOEhScaWZzXGguB5/66f9flJHgwqTo2nT6yc6+CYy52Ff4oBLo3T6xj1yrhy
3LvI6r7yR78riNtifcia/HfM71ftVMb5ROJDOEH5cqXkKi2UoYImqU61lGxv9ejV
isR1LGNoJc4tlsBlSq9xdFXDxa36HX1loYIFLPGvxh0ZzkszoHAx6Q6UgujYlWZY
n9k/mk/HjcqLWBC62yU5hnmCX72316/60ty3K7i48mj33Nku9Rm3UYazmFgDzqIz
QFEE8sfGI1VNZsvDATRJmt8AgUefwPvRMPV0xiqE/r+wxqkA64xSzhgcJMgcLeVV
SJJiy3BP87Dw147av03qJaE8kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMahu0Te
m/iYcZe809QJYsbXAaI3MB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF
NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3
TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfdBBfAFH5FYePtF4qrkr1H1ZZwAKjJ0fxEhanoAPEgoti1+0SQol53hVvMXK
KWXDvL2vpfXd+M8I68rVeFsfLGRJhahslmAF/C/Mij31F/vau9znWOKxJlMF7aad
5aF6a3bCkaoQ6KUbQsQXrAfC8JXp3aNasdBj3XV8ebpHfKYGnfH1QEQ40M3UDjpi
xalGgrgLTHXCnLsEbqReED0Ilvs2hjnXihbIXRz0RBI3hbCD774T1EXEdca7XUQ1
JwoWhDHhvI0HjtTHfG4ZODfTyRUvW5+kMnv3LE6WYF65RvM+k4XLyWWu4Gh0xwIA
hgEVzSK+cnWtozVALnE5cXEI0g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:57 2026 by rpki-client