
$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
File: qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json)
Hash identifier: WVK0hfsEAO1UasAFDePcYzPdJ4RGVCy0+YY+uPVmQnI=
Subject key identifier: AD:6F:DF:F2:17:E4:E4:3E:AF:CB:03:F2:44:FF:81:46:E4:E8:1F:29
Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE
Certificate issuer: /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
Manifest number: 88
Signing time: Sun 05 Apr 2026 06:59:39 +0000
Manifest this update: Sun 05 Apr 2026 06:59:38 +0000
Manifest next update: Sun 12 Apr 2026 06:59:38 +0000
Files and hashes: 1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: L2yTumB2cZ8ghKCfdYVy6kdUh+PIbFYEjulffApu7fQ=)
2: C9479880646611F0B371D156C4F9AE02.roa (hash: EiYvwU0YQnjRK3Tvv8B2ub2+aNVUJVhtBwUBXxQFVDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl
rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE
Validity
Not Before: Apr 5 06:59:38 2026 GMT
Not After : Apr 12 06:59:38 2026 GMT
Subject: CN=69d2085b-2415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:65:b3:7d:c9:7d:6b:79:0e:02:a3:25:70:
6e:56:ae:c4:d3:9e:17:bb:c5:5d:64:b3:41:88:77:
d8:a7:94:7c:2b:71:49:9f:bd:61:0d:24:e9:d3:ec:
c6:71:9f:e4:ac:84:3a:d7:2a:28:cf:49:5b:a6:83:
6e:83:de:c1:ae:dd:8e:de:fe:a0:f4:41:66:cc:d6:
4a:d0:f6:53:a5:46:86:c9:66:9a:dd:ba:6f:5d:80:
b3:7b:42:d0:1a:9b:fb:34:d4:df:11:85:7c:73:ec:
5f:e8:66:8a:86:99:06:df:9d:33:46:d5:4f:b6:2f:
83:62:9a:95:94:5c:30:1a:41:c3:ab:e4:f9:6e:79:
91:9f:e3:3c:df:95:dc:e1:96:36:18:df:4c:d6:78:
ff:ea:cd:80:11:41:8d:13:1e:ef:75:21:48:ff:e0:
fd:62:4f:68:d0:e3:d6:bc:0a:7f:a9:e3:f6:ac:2a:
6f:5a:4c:b6:63:ab:d3:b6:95:34:b9:63:a5:3b:ad:
5e:25:5b:b8:0b:a7:11:d5:37:32:fd:bb:60:e5:c2:
64:fd:0f:ef:89:01:d5:9e:8b:d5:2d:8d:17:bf:6c:
a7:3f:28:a5:1c:61:2c:10:b2:3d:d9:40:04:19:29:
7c:66:d5:e4:b8:7d:74:98:8c:29:66:64:9b:25:4d:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6F:DF:F2:17:E4:E4:3E:AF:CB:03:F2:44:FF:81:46:E4:E8:1F:29
X509v3 Authority Key Identifier:
keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:03:94:55:42:c6:d6:58:31:b0:6b:50:03:e3:71:ea:55:ba:
62:40:5e:8e:e2:c4:e2:ca:05:74:1f:3a:e6:cb:51:a3:dc:4f:
45:eb:9b:3a:16:f5:10:93:b7:ec:b0:e5:ef:60:bb:c2:b0:8e:
58:cf:fd:d9:3f:fa:fc:ec:69:4a:58:62:4b:f8:a0:68:d9:c2:
ea:19:c7:f5:2c:12:5d:58:80:c2:57:4b:71:05:3f:95:dd:bc:
96:ad:08:ad:00:14:68:90:50:b1:47:b7:b2:58:21:4b:06:65:
f2:06:9f:ed:65:90:73:bd:24:02:57:6b:95:7f:8f:45:ed:e4:
ec:b1:18:08:b8:bf:55:49:ff:55:31:fb:46:5b:63:8c:55:a8:
85:53:91:e8:2c:e7:07:0c:bb:1d:e6:bb:58:02:78:c4:7f:14:
63:86:87:1f:6b:ab:1f:d3:21:f1:31:ab:09:2f:22:73:27:54:
80:1e:3a:ff:da:d2:dc:1b:92:a9:69:e6:2e:03:54:2e:c5:93:
40:9e:0b:89:4c:22:4a:7e:d7:a1:ac:1b:0d:16:91:5c:d8:d6:
21:e8:cb:c9:7e:16:42:d5:af:6d:9b:3d:f2:7b:32:09:b0:97:
19:88:36:4d:66:6d:32:09:73:43:f0:3e:82:c4:aa:a6:7d:0e:
a0:d6:5e:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg1RjAxMTAvBgNVBAUTKEE5RjBBQzk3QjlDMThDMzJFMjE2OUMwMUE0OTg2QzdB
NkMyNTVGRkUwHhcNMjYwNDA1MDY1OTM4WhcNMjYwNDEyMDY1OTM4WjAYMRYwFAYD
VQQDEw02OWQyMDg1Yi0yNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2Vls33JfWt5DgKjJXBuVq7E054Xu8VdZLNBiHfYp5R8K3FJn71hDSTp0+zG
cZ/krIQ61yooz0lbpoNug97Brt2O3v6g9EFmzNZK0PZTpUaGyWaa3bpvXYCze0LQ
Gpv7NNTfEYV8c+xf6GaKhpkG350zRtVPti+DYpqVlFwwGkHDq+T5bnmRn+M835Xc
4ZY2GN9M1nj/6s2AEUGNEx7vdSFI/+D9Yk9o0OPWvAp/qeP2rCpvWky2Y6vTtpU0
uWOlO61eJVu4C6cR1Tcy/btg5cJk/Q/viQHVnovVLY0Xv2ynPyilHGEsELI92UAE
GSl8ZtXkuH10mIwpZmSbJU0YvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1v3/IX
5OQ+r8sD8kT/gUbk6B8pMB8GA1UdIwQYMBaAFKnwrJe5wYwy4hacAaSYbHpsJV/+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODVGMC81NjM1NkNENDY0
MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xZkNzbDduQmpETGlGcHdCcEpoc2Vtd2xY
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FmQ3NsN25CakRMaUZwd0JwSmhzZW13bFhfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODVGMC81NjM1NkNENDY0MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xZkNzbDduQmpE
TGlGcHdCcEpoc2Vtd2xYXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAggOUVULG1lgxsGtQA+Nx6lW6YkBejuLE4soFdB865stRo9xPReubOhb1EJO3
7LDl72C7wrCOWM/92T/6/OxpSlhiS/igaNnC6hnH9SwSXViAwldLcQU/ld28lq0I
rQAUaJBQsUe3slghSwZl8gaf7WWQc70kAldrlX+PRe3k7LEYCLi/VUn/VTH7Rltj
jFWohVOR6CznBwy7Hea7WAJ4xH8UY4aHH2urH9Mh8TGrCS8icydUgB46/9rS3BuS
qWnmLgNULsWTQJ4LiUwiSn7XoawbDRaRXNjWIejLyX4WQtWvbZs98nsyCbCXGYg2
TWZtMglzQ/A+gsSqpn0OoNZeBA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:02 2026 by rpki-client