
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json)
Hash identifier: bE3I4OuxIjEMu4D4mf+qSkmZ2L/HmGyRSaoE0KW/UJw=
Subject key identifier: 3E:EC:DD:6E:AC:C4:74:E2:94:21:DA:07:36:9E:7E:59:64:52:A8:69
Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Certificate serial: 18E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
Manifest number: 18D6
Signing time: Sat 04 Apr 2026 16:22:17 +0000
Manifest this update: Sat 04 Apr 2026 16:22:17 +0000
Manifest next update: Sat 11 Apr 2026 16:22:17 +0000
Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: lzM2Ig+v9sK8dYiOi5XDRDjOodq0Yo/BNfgHkREzvqk=)
2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: abf25FbH719hRhMiSj4RTqIJD+/I5r3H2hRBfJwMFgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6372 (0x18e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Validity
Not Before: Apr 4 16:22:17 2026 GMT
Not After : Apr 11 16:22:17 2026 GMT
Subject: CN=69d13ab9-5b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:8c:6c:84:cf:7b:cd:48:4a:fb:74:43:68:
51:ff:f3:05:a9:64:a6:e6:23:0a:ce:8c:78:92:97:
be:46:9b:86:04:c7:41:5c:da:f4:e2:aa:3c:ad:9c:
4d:fa:c3:47:7b:cc:60:00:89:a8:8c:59:17:db:18:
39:74:f4:46:ed:29:9f:b6:7c:9a:4a:34:76:e8:fb:
ee:20:33:50:60:22:9b:67:2c:e5:8f:9b:21:84:bc:
4c:56:04:be:8c:e9:69:30:d1:65:c8:d1:13:6d:a5:
5a:21:af:c6:b3:b2:92:36:2e:b8:31:76:b2:39:ec:
9a:0c:d2:13:18:2e:06:8e:02:78:e9:fa:27:f9:6d:
d8:3e:c1:7b:f7:4b:d6:38:59:ac:8c:71:eb:3a:b1:
25:33:82:72:ff:7f:f8:cb:2a:84:01:c3:66:6c:02:
36:be:12:9a:0d:17:b6:0c:2f:f1:53:51:f3:50:a0:
85:f6:3d:89:c6:60:60:85:c0:b8:dd:fa:8a:9b:4b:
47:69:5f:a9:1a:9d:84:fd:73:29:7e:42:2e:51:cd:
bf:1c:67:2a:13:43:f8:60:58:2d:22:b1:90:eb:1e:
5a:e3:28:20:fe:1e:d9:e9:99:ce:09:31:b1:00:9b:
cc:4b:df:fb:a9:01:2e:fd:8b:b3:63:02:7c:36:bd:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:DD:6E:AC:C4:74:E2:94:21:DA:07:36:9E:7E:59:64:52:A8:69
X509v3 Authority Key Identifier:
keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e5:a8:a3:52:c1:5a:0e:47:47:8d:d9:5d:ef:50:cb:f7:d9:
59:ff:cd:3e:a1:d5:ae:c8:09:24:14:c3:77:7e:7d:e6:cb:41:
ad:5a:ca:34:3e:a7:14:74:08:d3:51:76:4b:84:6c:d8:72:97:
a4:25:52:20:1a:f4:d6:68:dd:19:02:fb:92:64:b1:52:77:4d:
74:52:7f:f2:5e:9f:4b:6d:da:43:41:73:76:4b:04:77:a6:14:
e7:ed:d2:ad:47:68:dc:13:0a:40:a6:27:81:e7:78:71:ad:8e:
1d:58:48:b8:f8:25:2d:63:af:16:a1:d3:6d:7b:7a:70:80:4c:
e8:64:c3:1c:61:56:ce:9d:a1:fb:b8:ab:2e:1c:67:f6:8e:08:
c8:1b:29:1e:ea:99:ec:ac:1c:7c:44:a8:f6:5f:3a:13:42:8e:
f1:34:cc:c4:4e:dd:f7:a0:3a:7f:29:dd:f2:f6:b3:0d:f7:a8:
43:49:36:c0:32:02:5d:87:79:5e:2d:d5:e9:bc:23:5e:25:5c:
76:a3:96:38:85:79:4b:a3:41:66:5c:fd:72:ab:4a:21:79:8a:
d4:5d:b3:ba:e8:2a:5e:af:d9:b8:ce:92:06:49:67:c5:10:5c:
b6:e7:e3:3c:6a:f5:4d:bc:cf:03:ec:69:43:b4:cd:9b:eb:05:
71:61:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:56 2026 by rpki-client