
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json)
Hash identifier: yIR5H2JRFafWuoMiqiIpVaarvoGkmOqr+6Sn5jocxDY=
Subject key identifier: 0F:9C:82:8B:B1:6D:3A:2B:3D:EF:03:77:41:92:C6:3A:76:16:A7:96
Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B
Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
Manifest number: 01DD
Signing time: Sun 05 Apr 2026 02:58:31 +0000
Manifest this update: Sun 05 Apr 2026 02:58:30 +0000
Manifest next update: Sun 12 Apr 2026 02:58:30 +0000
Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: dl0xParK5vbbTkVLltlIFpynxQlKfzG76Zx00GoF+h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl
rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B
Validity
Not Before: Apr 5 02:58:30 2026 GMT
Not After : Apr 12 02:58:30 2026 GMT
Subject: CN=69d1cfd7-7bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:29:04:f5:01:a4:2c:38:35:a5:68:4d:3e:
20:ec:e9:e0:97:c9:04:51:03:32:9d:a0:9b:bc:60:
34:ef:ce:05:81:d7:5c:9f:88:77:30:85:6f:17:7a:
68:dc:4a:74:8b:be:d6:3d:03:30:1c:ec:cc:71:41:
5e:44:fc:aa:b1:4c:a7:88:6e:a8:c3:52:fa:4e:03:
56:b2:7a:2d:e3:32:31:8a:6b:72:67:2d:e1:c0:ca:
2a:9d:87:c8:04:8a:c2:9a:83:20:fa:aa:fc:21:ef:
c5:f6:d6:b5:7f:16:27:68:23:79:e8:d5:3e:bf:ee:
e2:18:b0:66:6e:07:88:be:8a:f6:67:c5:e4:b1:1b:
e0:42:78:ac:d8:b7:38:4c:fc:c7:8f:f6:e1:7b:f4:
e1:15:92:be:c2:24:95:19:d2:90:75:66:a0:e5:8a:
cd:00:27:01:4e:84:a3:af:ba:98:4c:9d:c2:f0:0a:
4f:f5:f0:15:72:9c:54:ce:49:41:f5:8b:1d:71:11:
52:f7:bc:f3:06:91:e4:10:13:31:f7:e5:5d:d5:09:
c8:79:87:73:b0:0f:6d:33:71:d0:20:c7:d6:5e:82:
24:72:25:7f:86:5b:70:ca:40:50:06:37:9a:a3:a2:
ed:4d:ed:a5:3b:99:71:f7:b2:a6:91:af:bf:35:8c:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:82:8B:B1:6D:3A:2B:3D:EF:03:77:41:92:C6:3A:76:16:A7:96
X509v3 Authority Key Identifier:
keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:44:30:aa:8a:a1:f4:38:ea:83:ec:7f:6d:b0:f1:b8:ee:22:
b8:d1:46:f6:53:d1:ce:68:2a:3f:2f:c5:bf:e5:c0:12:5d:f0:
8d:b2:fc:55:24:aa:1b:f4:87:1f:4f:d0:71:d1:ab:19:8c:68:
7f:db:af:5f:bb:75:57:1f:4f:f0:c5:0e:a6:bd:54:71:6e:c4:
1b:2c:85:48:9a:0f:b7:10:74:db:0f:81:01:b2:c4:7c:4e:a1:
21:89:03:cd:6f:ca:9f:be:fd:f8:57:81:44:42:4c:89:ab:d6:
38:98:0e:65:1a:c1:02:84:7d:6a:a5:85:f8:f9:2d:65:d3:c1:
ba:6a:b3:8c:45:69:e9:93:38:86:44:a0:2c:69:7b:65:41:a9:
e6:dc:b4:e5:11:1e:62:19:86:91:99:db:06:1d:6a:01:76:5a:
cf:f4:c2:39:18:1d:53:12:78:c2:4c:00:7b:91:11:6a:c9:1c:
b2:f8:a6:01:78:f2:16:3f:d4:52:03:6e:f3:13:03:f3:75:98:
6b:0e:4d:82:b2:bc:0d:fc:6f:6d:52:c1:97:ac:2a:71:b9:ee:
4e:97:51:95:2a:4a:e4:a1:84:91:e0:e9:26:51:52:e5:93:07:
ea:03:2d:19:38:d0:23:d2:de:2d:71:a2:84:4b:ca:e7:24:bf:
94:bb:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:48 2026 by rpki-client