
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier: +s7N/f6uhk4ZKFTisTkplkKgKkdk8gABO3Prgmp0lz4=
Subject key identifier: E8:39:21:AF:F8:20:05:13:01:CA:06:8B:8D:78:F2:62:5F:06:89:84
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial: 190D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number: 18EA
Signing time: Sat 04 Apr 2026 16:21:48 +0000
Manifest this update: Sat 04 Apr 2026 16:21:48 +0000
Manifest next update: Sat 11 Apr 2026 16:21:48 +0000
Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: l0Dkm5VsJUny8pGF51/Icq1Gk9mBgO4B/T1L//pXOJA=)
2: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: gpPf8YHxUumqTPOX7/waaXvtALxStgij8JmqlVAXhlc=)
3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: QtWEc3antTd2K+91CBKQnCvQy2+FDNwa+QWniiVB1lI=)
4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: aze7oRbnjZ11dpJLkBi4xyiEoCsX64SwDqIgSioB2cM=)
5: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: awYe5rrh007RCSjsVd7jO0qaN9guB6y5rbMfa7rSYvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6413 (0x190d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Validity
Not Before: Apr 4 16:21:48 2026 GMT
Not After : Apr 11 16:21:48 2026 GMT
Subject: CN=69d13a9c-19af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:3b:29:2a:a4:da:de:c2:4a:eb:b9:a7:e2:
2e:7b:e2:06:38:28:3e:dc:68:67:a0:9c:ad:6c:db:
d6:0d:ae:85:b6:98:c9:c6:89:3c:1c:b0:82:c9:5c:
46:ae:6c:08:cb:19:c5:f1:96:97:66:77:8b:a0:b3:
35:d8:ee:7a:42:81:fd:1d:d6:c7:f9:65:56:20:d7:
0f:af:9b:56:39:42:83:95:eb:67:88:22:ef:65:2b:
30:1f:a1:df:5c:7a:e9:b2:12:48:66:a3:c8:ce:ed:
28:cb:37:a7:69:06:58:5c:fb:06:3f:c5:36:38:f8:
08:53:d3:e9:a0:bd:53:98:4f:9c:5a:57:22:d8:de:
a3:d3:c3:a5:9f:42:18:33:2d:a4:aa:bd:9b:1c:e2:
9a:9c:1d:d1:07:dd:0e:77:4d:31:7b:f1:cc:95:20:
7a:81:bc:c8:a1:2c:95:d6:84:2a:78:e7:7a:63:3f:
cc:e2:93:98:fd:b4:aa:31:f0:c4:46:11:81:c2:7f:
3d:ba:ef:db:d1:32:4b:c2:c5:28:0c:e4:04:80:a8:
1a:87:08:eb:4f:5f:b2:87:17:d2:fd:b9:6e:a9:35:
10:d7:78:00:6c:3f:71:b6:20:89:c9:ad:57:cd:42:
94:4d:5f:ba:5f:52:70:72:ad:e3:45:bf:44:53:6a:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:21:AF:F8:20:05:13:01:CA:06:8B:8D:78:F2:62:5F:06:89:84
X509v3 Authority Key Identifier:
keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:c2:fa:50:72:bf:f1:f5:f3:b8:d2:44:69:21:a1:fa:ec:
72:bf:09:00:dd:a3:75:51:52:d7:46:e8:c9:c4:05:84:a4:4d:
14:b8:1a:1f:20:6f:cf:dd:6b:c6:65:01:5d:91:50:a5:c4:59:
51:3a:4d:29:fa:ba:02:a6:13:98:72:4c:f0:d3:80:00:39:1f:
68:fc:1d:cb:4d:cd:76:83:63:b2:d1:77:49:68:ff:2c:51:a9:
a3:1b:05:0d:52:e7:9b:0c:9f:e3:ed:ac:a3:68:2b:36:7d:af:
a9:07:d5:3a:bf:bd:36:87:8f:3a:8b:b0:06:69:9b:18:92:9f:
6a:87:ee:4b:0b:89:6f:0f:0d:3b:3c:01:9f:ed:fb:c9:fb:b9:
e5:3a:87:41:44:61:f3:1a:f0:39:79:a5:42:93:94:50:fe:e7:
d3:7e:4e:3b:b2:94:86:c0:58:06:8b:c8:c0:7a:b8:e9:6a:ce:
da:47:8f:56:25:9b:ad:e8:3f:bb:77:5d:3f:a4:2e:48:c7:6d:
b5:60:d5:07:bc:0f:29:7f:c0:aa:20:79:4f:e2:13:f2:0f:b6:
d5:bc:9c:2c:da:b0:9f:69:11:fa:6a:ba:f9:39:ff:7d:5a:1e:
86:6a:d3:33:ef:9b:0a:e1:aa:69:a0:b1:60:bd:75:5b:52:4b:
d2:40:8e:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG
NjQyNDZDN0MwHhcNMjYwNDA0MTYyMTQ4WhcNMjYwNDExMTYyMTQ4WjAYMRYwFAYD
VQQDEw02OWQxM2E5Yy0xOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjy87KSqk2t7CSuu5p+Iue+IGOCg+3GhnoJytbNvWDa6FtpjJxok8HLCCyVxG
rmwIyxnF8ZaXZneLoLM12O56QoH9HdbH+WVWINcPr5tWOUKDletniCLvZSswH6Hf
XHrpshJIZqPIzu0oyzenaQZYXPsGP8U2OPgIU9PpoL1TmE+cWlci2N6j08Oln0IY
My2kqr2bHOKanB3RB90Od00xe/HMlSB6gbzIoSyV1oQqeOd6Yz/M4pOY/bSqMfDE
RhGBwn89uu/b0TJLwsUoDOQEgKgahwjrT1+yhxfS/bluqTUQ13gAbD9xtiCJya1X
zUKUTV+6X1Jwcq3jRb9EU2oEWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOg5Ia/4
IAUTAcoGi4148mJfBomEMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB
OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDky
bkhNNWRGYkJLNUQyUWtiSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgb3C+lByv/H187jSRGkhofrscr8JAN2jdVFS10boycQFhKRNFLgaHyBvz91r
xmUBXZFQpcRZUTpNKfq6AqYTmHJM8NOAADkfaPwdy03NdoNjstF3SWj/LFGpoxsF
DVLnmwyf4+2so2grNn2vqQfVOr+9NoePOouwBmmbGJKfaofuSwuJbw8NOzwBn+37
yfu55TqHQURh8xrwOXmlQpOUUP7n035OO7KUhsBYBovIwHq46WrO2kePViWbreg/
u3ddP6QuSMdttWDVB7wPKX/AqiB5T+IT8g+21bycLNqwn2kR+mq6+Tn/fVoehmrT
M++bCuGqaaCxYL11W1JL0kCOSg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:39:48 2026 by rpki-client