
$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json)
Hash identifier: uE9f9eZ0Cw/dpZrkwwQqUoJ1vAG5rQIfAFhqD4iJDz0=
Subject key identifier: 12:4C:69:B8:4E:18:E8:E7:42:BF:D5:84:90:67:62:B5:B1:0C:F3:34
Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
Manifest number: 0194
Signing time: Sun 05 Apr 2026 03:49:47 +0000
Manifest this update: Sun 05 Apr 2026 03:49:47 +0000
Manifest next update: Sun 12 Apr 2026 03:49:47 +0000
Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: 3YWBTlEraEeo7D3o+zjjSPnJ2OnFG7uqNH/YVbTrRB4=)
2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: CY7sgHFLl+nOK7TpwFje8AHE3rJopUk0iaEHtQoJM00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Validity
Not Before: Apr 5 03:49:47 2026 GMT
Not After : Apr 12 03:49:47 2026 GMT
Subject: CN=69d1dbdb-5153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:01:de:81:9e:7c:13:7c:e4:6f:34:e8:81:
b1:67:04:8f:2f:27:22:49:5e:4b:67:3b:73:72:0f:
18:87:d1:d9:d3:bd:57:9c:f0:1c:c3:36:25:9b:46:
cd:66:0c:b7:9f:62:ca:b9:c6:b8:63:55:c6:15:54:
ff:a9:fb:3d:cb:2f:d8:21:00:9b:7d:f2:04:cb:0e:
b5:3b:34:b4:eb:ec:3b:2a:f6:5f:e4:80:61:57:f0:
e5:82:83:bb:b9:70:9e:f3:d8:12:b6:3f:95:90:c1:
07:59:5f:9b:16:69:8c:90:5e:0a:30:b7:19:50:70:
d5:24:e6:95:0a:5c:b7:b2:15:b0:9a:9b:21:1c:b4:
97:40:fa:7b:1d:69:83:14:35:85:08:37:48:eb:8f:
ed:37:b5:b9:ec:db:21:eb:a2:65:8e:04:01:4e:ed:
9a:b6:a4:8d:40:a6:14:5e:30:18:20:04:c4:b4:5e:
b2:f1:dc:10:94:65:31:d1:ac:16:59:5e:8a:18:77:
a5:5c:28:93:5b:3c:14:ab:2b:0e:6f:df:5f:30:e6:
0f:b3:9e:51:bc:87:9c:7b:68:5e:8c:19:18:7d:2c:
01:9e:df:39:e0:c1:4d:98:e7:31:53:00:a2:53:b6:
50:05:5c:30:98:9a:97:53:da:98:2a:a6:bd:51:8a:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4C:69:B8:4E:18:E8:E7:42:BF:D5:84:90:67:62:B5:B1:0C:F3:34
X509v3 Authority Key Identifier:
keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:48:16:88:5d:d2:51:4e:d7:fd:8c:b2:41:43:93:23:12:
51:0d:ec:84:f9:2a:2f:a8:12:69:ad:6f:b0:fc:21:40:a4:c2:
76:6f:cf:18:78:ad:54:76:76:68:0d:d6:23:54:94:e6:f3:59:
ab:ff:d7:fb:4d:4a:59:56:42:7a:25:1f:6f:43:c4:32:09:23:
cc:4f:d4:7c:9e:24:f6:54:9f:b6:97:a0:a1:2b:df:4c:db:3c:
d8:5e:fe:c5:60:80:8b:8f:c7:99:80:4e:f6:bd:39:fd:49:5c:
66:72:73:81:19:4c:11:d3:6f:f9:80:a7:2b:49:9c:9e:46:0f:
cf:3f:d0:15:72:75:c3:4a:92:df:ca:1d:97:46:91:58:46:df:
00:53:8c:e6:ef:26:d7:92:b8:15:e7:24:4c:fd:68:a1:84:f2:
f8:a5:6e:db:b8:d6:8b:d0:39:09:64:2a:e7:69:69:43:45:7b:
21:db:88:5f:2f:af:8d:51:6a:bc:03:6e:a8:63:0e:bd:76:6c:
d2:5f:10:1a:59:b3:97:bc:cc:3e:f6:66:4b:3a:88:2d:bc:f5:
41:db:84:cc:63:a7:d0:95:fe:91:b1:96:39:59:b8:77:b3:f4:
17:74:04:71:70:da:c3:a2:02:a2:a3:f0:c6:88:96:63:ca:ef:
58:5b:1f:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0
M0I3OUJEOTMwHhcNMjYwNDA1MDM0OTQ3WhcNMjYwNDEyMDM0OTQ3WjAYMRYwFAYD
VQQDEw02OWQxZGJkYi01MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuAYB3oGefBN85G806IGxZwSPLyciSV5LZztzcg8Yh9HZ071XnPAcwzYlm0bN
Zgy3n2LKuca4Y1XGFVT/qfs9yy/YIQCbffIEyw61OzS06+w7KvZf5IBhV/DlgoO7
uXCe89gStj+VkMEHWV+bFmmMkF4KMLcZUHDVJOaVCly3shWwmpshHLSXQPp7HWmD
FDWFCDdI64/tN7W57Nsh66JljgQBTu2atqSNQKYUXjAYIATEtF6y8dwQlGUx0awW
WV6KGHelXCiTWzwUqysOb99fMOYPs55RvIece2hejBkYfSwBnt854MFNmOcxUwCi
U7ZQBVwwmJqXU9qYKqa9UYoJRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJMabhO
GOjnQr/VhJBnYrWxDPM0MB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB
MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w
LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACJtIFohd0lFO1/2MskFDkyMSUQ3shPkqL6gSaa1vsPwhQKTCdm/PGHitVHZ2
aA3WI1SU5vNZq//X+01KWVZCeiUfb0PEMgkjzE/UfJ4k9lSftpegoSvfTNs82F7+
xWCAi4/HmYBO9r05/UlcZnJzgRlMEdNv+YCnK0mcnkYPzz/QFXJ1w0qS38odl0aR
WEbfAFOM5u8m15K4FeckTP1ooYTy+KVu27jWi9A5CWQq52lpQ0V7IduIXy+vjVFq
vANuqGMOvXZs0l8QGlmzl7zMPvZmSzqILbz1QduEzGOn0JX+kbGWOVm4d7P0F3QE
cXDaw6ICoqPwxoiWY8rvWFsflg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:15 2026 by rpki-client