
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
File: -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json)
Hash identifier: ZqgK5p5fJfiIWrESGhkVus/KfZd1Q8GgmMrQ4t90Zq0=
Subject key identifier: 9D:EE:CA:70:6D:B8:A8:CA:D5:72:08:9D:78:39:22:FF:9A:4A:8C:DA
Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
Certificate issuer: /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
Manifest number: 070F
Signing time: Sat 04 Apr 2026 21:42:17 +0000
Manifest this update: Sat 04 Apr 2026 21:42:17 +0000
Manifest next update: Sat 11 Apr 2026 21:42:17 +0000
Files and hashes: 1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: fkpU7LQGGBM3vnQhMHN4/m/y7lALcFrrfO72g0k23Bo=)
2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: H4nUYpPqOxi1wSgruwKar4kfBYf1aIvICgsUIhJSeV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Validity
Not Before: Apr 4 21:42:17 2026 GMT
Not After : Apr 11 21:42:17 2026 GMT
Subject: CN=69d185b9-f652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:b5:0f:d8:9e:71:fe:61:13:e9:6d:f4:91:
a5:4c:ba:06:b2:bf:3f:89:35:24:22:78:f0:53:b9:
de:b7:0d:20:d7:72:c2:fd:07:66:73:9c:22:e2:ec:
20:6a:02:f3:09:1b:58:1b:e4:1f:fe:9e:aa:86:cf:
b5:56:3f:9f:1d:b6:47:8b:e9:3c:90:a4:9d:f7:d2:
2c:6b:bd:12:a3:e8:ec:f5:4f:5b:78:fe:dd:9e:47:
0d:62:bc:5c:b3:de:67:5b:6c:49:29:70:83:bd:65:
2c:20:81:95:f9:b0:4e:81:16:ec:16:26:4c:53:cd:
aa:a0:38:6a:a6:20:0f:5a:d9:54:b4:95:80:dd:92:
62:ee:f0:18:10:d3:83:85:1b:5b:61:94:09:75:5a:
b6:7d:b2:f5:5b:15:8c:f0:b5:fa:c7:a5:2f:bb:e3:
c0:1e:4f:50:e6:e5:54:13:38:1f:fe:49:9b:23:f9:
e9:c0:cb:1a:1f:8e:8c:8d:1a:4b:f1:7c:4c:6e:11:
99:a0:ec:e5:a3:55:04:3f:22:1a:0d:eb:80:cf:3c:
c0:99:4b:40:52:b3:99:64:d3:b0:04:e0:83:46:f6:
b1:2d:57:61:0a:cb:f8:c4:21:55:b7:df:60:b2:a6:
b9:57:9b:b8:85:d7:5c:ee:ce:16:47:cf:84:eb:c6:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EE:CA:70:6D:B8:A8:CA:D5:72:08:9D:78:39:22:FF:9A:4A:8C:DA
X509v3 Authority Key Identifier:
keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b1:10:c4:7a:fe:32:fd:03:8f:fa:87:70:b6:4f:f8:3d:d9:
e4:db:87:b5:ec:a0:43:39:54:d7:26:b5:92:9a:6c:2b:45:c6:
12:b8:f8:94:5f:2c:63:cc:98:48:7f:a7:4e:c9:30:c0:b1:91:
e6:20:06:a9:7b:21:41:b7:17:de:d3:74:d2:92:bd:28:57:d6:
64:a8:61:9e:40:5a:2c:0b:53:4a:5a:c1:e0:cf:38:27:6a:d2:
2f:e4:25:38:6d:94:d1:6a:6d:5b:25:1d:9f:d9:c5:bc:bf:d8:
99:23:6a:f0:85:8b:29:2b:74:17:08:f1:e4:58:dc:5a:f0:4f:
ec:93:e6:9c:cc:37:cd:67:22:19:cb:26:10:81:96:86:09:19:
4e:46:93:a9:55:53:97:e0:e6:79:8e:91:fe:51:b2:64:47:85:
1d:7b:dd:94:86:6e:e7:75:13:54:14:b4:5f:2f:6e:85:e1:97:
2f:d3:16:c9:69:f9:a8:98:db:2e:22:2c:44:69:91:26:4b:c4:
52:5e:dd:49:d8:cf:ab:fd:07:ea:44:7a:e6:a8:d1:ae:03:8d:
34:90:a5:ad:83:6c:e4:d8:e2:bd:73:e4:8c:de:81:d7:ca:78:
d1:20:ec:94:23:3d:6d:25:9f:ab:0d:fd:2b:2a:b3:1d:a6:ff:
30:87:98:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZFOTcxMTAvBgNVBAUTKEY5MDZEOTdGN0FBODdDODZEQTk5MDM5RDIzNkVDREI1
MUQyMzFGN0EwHhcNMjYwNDA0MjE0MjE3WhcNMjYwNDExMjE0MjE3WjAYMRYwFAYD
VQQDEw02OWQxODViOS1mNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs7q1D9iecf5hE+lt9JGlTLoGsr8/iTUkInjwU7netw0g13LC/Qdmc5wi4uwg
agLzCRtYG+Qf/p6qhs+1Vj+fHbZHi+k8kKSd99Isa70So+js9U9beP7dnkcNYrxc
s95nW2xJKXCDvWUsIIGV+bBOgRbsFiZMU82qoDhqpiAPWtlUtJWA3ZJi7vAYENOD
hRtbYZQJdVq2fbL1WxWM8LX6x6Uvu+PAHk9Q5uVUEzgf/kmbI/npwMsaH46MjRpL
8XxMbhGZoOzlo1UEPyIaDeuAzzzAmUtAUrOZZNOwBOCDRvaxLVdhCsv4xCFVt99g
sqa5V5u4hddc7s4WR8+E68ZUbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ3uynBt
uKjK1XIInXg5Iv+aSozaMB8GA1UdIwQYMBaAFPkG2X96qHyG2pkDnSNuzbUdIx96
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkU5Ny9EMjE4MzAyRTdE
NDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJYmFtUU9kSTI3TnRSMGpI
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1RYlpmM3FvZkliYW1RT2RJMjdOdFIwakgzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkU5Ny9EMjE4MzAyRTdENDcxMUVCOTMxMjFGNThDNEY5QUUwMi8tUWJaZjNxb2ZJ
YmFtUU9kSTI3TnRSMGpIM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT7EQxHr+Mv0Dj/qHcLZP+D3Z5NuHteygQzlU1ya1kppsK0XGErj4lF8sY8yY
SH+nTskwwLGR5iAGqXshQbcX3tN00pK9KFfWZKhhnkBaLAtTSlrB4M84J2rSL+Ql
OG2U0WptWyUdn9nFvL/YmSNq8IWLKSt0Fwjx5FjcWvBP7JPmnMw3zWciGcsmEIGW
hgkZTkaTqVVTl+DmeY6R/lGyZEeFHXvdlIZu53UTVBS0Xy9uheGXL9MWyWn5qJjb
LiIsRGmRJkvEUl7dSdjPq/0H6kR65qjRrgONNJClrYNs5NjivXPkjN6B18p40SDs
lCM9bSWfqw39KyqzHab/MIeYbQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:21 2026 by rpki-client