
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json)
Hash identifier: Zf6JJ1EfPFg78jwZQm+4RHO0EKFR4QqBTJJidFGPQlU=
Subject key identifier: EC:05:84:D7:F2:A8:6E:82:95:87:21:DC:1A:3F:F5:3B:3B:7B:E9:25
Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
Manifest number: 024A
Signing time: Thu 16 Apr 2026 15:51:28 +0000
Manifest this update: Thu 16 Apr 2026 15:51:27 +0000
Manifest next update: Thu 23 Apr 2026 15:51:27 +0000
Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: 6r7QsOEyaVl2d6FqXT17nhC0UTaQUeS+aluQgXPg3qg=)
2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: JNyU8R5c8QL0IEETvSkoNrLyRGc2x887+ZYrTw2mI3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Validity
Not Before: Apr 16 15:51:27 2026 GMT
Not After : Apr 23 15:51:27 2026 GMT
Subject: CN=69e10580-796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:b6:7b:7d:8f:a9:0e:09:e9:76:2b:ed:3f:
9c:04:63:77:5a:57:99:72:8d:51:a7:98:5d:e5:f6:
16:ae:41:41:fa:f9:4f:74:b2:a2:cc:92:ca:e2:26:
2a:31:a1:34:2a:e5:f9:c4:d2:16:78:b9:a8:cf:18:
ec:ee:3e:ee:3a:d0:50:3d:61:54:b2:f4:59:88:96:
24:6d:9d:58:42:30:15:91:7a:cb:a0:d2:ba:1a:2b:
62:e4:aa:89:01:50:cf:39:ad:c5:95:b0:76:30:b8:
f2:9d:28:d3:45:33:73:23:b3:08:47:93:03:e1:a3:
8f:88:66:b1:6b:bd:df:ca:f7:d0:cd:ff:83:2f:74:
5c:05:99:94:0f:91:51:fb:24:10:df:c2:66:0a:8f:
bb:a7:8e:f5:e0:3f:0b:15:f2:ff:27:e1:92:90:e2:
b3:93:d2:27:c7:a0:92:60:cf:fe:4a:44:fe:c9:e0:
d1:f0:e1:e9:09:d6:63:e5:c3:ec:77:41:58:29:bf:
c3:ea:f6:f2:ed:b4:c4:43:54:5a:35:8c:9c:ef:b6:
ef:4e:3c:20:8e:a4:98:61:58:c0:e8:46:ab:dd:d6:
f6:5b:75:63:69:73:ff:83:20:67:ce:65:5a:26:78:
15:e4:0f:ce:8b:5f:04:b5:3d:af:28:f4:4d:f3:13:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:05:84:D7:F2:A8:6E:82:95:87:21:DC:1A:3F:F5:3B:3B:7B:E9:25
X509v3 Authority Key Identifier:
keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c1:39:9a:0e:81:43:4d:ae:1d:0a:9b:a8:9e:43:30:69:c9:
ad:45:b9:ef:e9:06:ca:50:ba:a6:e6:cf:33:91:74:dc:c1:39:
c7:f0:4f:5c:94:27:b1:a5:34:9d:2f:8d:e8:67:0a:42:21:e2:
ae:35:da:5b:b3:f5:dc:ee:2b:84:38:ac:de:30:33:63:85:cb:
d9:ca:45:b6:41:94:c9:2e:40:9e:88:8b:2a:6a:de:89:b6:40:
26:99:f0:f3:7a:4e:9c:98:55:62:96:43:53:40:81:03:80:0c:
85:69:b6:5b:23:d5:1a:a5:59:f2:ee:f2:f1:e9:94:49:86:d5:
ce:75:bb:aa:dd:16:81:9b:fd:6c:3b:39:85:0a:bb:35:ae:b9:
99:a4:bb:9b:62:25:c4:80:54:2e:67:a8:bf:75:14:80:4f:a0:
3d:fa:15:c4:4a:a1:03:4a:ef:54:bb:9a:73:8b:91:ca:2c:7a:
3b:39:aa:dd:3c:bb:41:b9:fc:2f:5c:11:48:73:2d:9e:d0:91:
b4:5d:e5:b8:2b:63:a6:80:2e:d9:54:4e:a5:5e:5e:89:b7:4b:
18:68:0a:bb:42:97:05:6c:58:e8:be:a6:aa:70:cd:78:6f:39:
2f:38:4f:72:a4:8f:ef:60:93:44:35:bc:a1:98:37:70:e4:18:
14:72:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:47 2026 by rpki-client