
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier: TMfHBGns2muQ7iUoTpFowBAktaPp1twmAKeIbMkJ4GQ=
Subject key identifier: AE:A4:7C:DE:68:21:D5:44:1A:48:AF:F7:88:AE:0C:B6:8A:86:F2:34
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial: 3531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number: 352A
Signing time: Sat 04 Apr 2026 14:59:25 +0000
Manifest this update: Sat 04 Apr 2026 14:59:24 +0000
Manifest next update: Sat 11 Apr 2026 14:59:24 +0000
Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: f13lY9Qo1ofEbbmLM/lpiPI5+NaDZ4urr9I6Fo1O9Ac=)
2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Te4mjLd0tS0Pp8TK/M4FDw7bPNKLJP9S5lFxUos08I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13617 (0x3531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Validity
Not Before: Apr 4 14:59:24 2026 GMT
Not After : Apr 11 14:59:24 2026 GMT
Subject: CN=69d1274c-2b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:af:64:52:15:b1:e0:33:52:77:78:3d:ae:
8f:54:1c:69:7b:aa:f5:4e:a5:f0:a1:7c:c0:ee:6f:
1a:19:9b:3c:f7:6f:5b:b5:5f:c9:73:60:6e:42:ea:
cd:2f:63:e4:43:b2:55:58:97:ec:44:3f:5a:1b:aa:
9b:c3:67:45:6f:66:3c:f1:6b:4b:21:d8:76:54:55:
c1:2d:17:07:14:90:00:15:5d:75:5b:0a:d4:f1:ce:
86:f8:f0:54:6c:d7:dd:57:b5:17:0d:3a:54:ea:42:
c1:6e:1c:3b:dd:8a:5e:b2:37:80:c7:49:0f:24:82:
06:c9:51:4c:e6:17:b0:9f:7c:0b:55:d0:ee:e5:be:
27:79:77:8f:3a:c2:53:f7:17:70:8b:cc:0f:4a:52:
a5:70:bb:2e:7c:f6:9d:04:04:db:2e:1e:b0:b3:60:
60:ba:f4:27:8a:83:bb:9e:ca:ce:03:60:14:df:43:
7b:0f:8a:2a:bc:49:f5:2e:1d:7b:4b:e3:40:37:6a:
3a:40:c9:77:0a:e4:8b:fe:8b:b9:58:31:3b:26:3d:
c6:0a:23:af:29:b1:7d:c2:88:c8:1b:51:ce:1b:7b:
16:dd:b0:87:4e:7f:4d:06:61:66:d2:95:2f:aa:6f:
9f:7d:2f:7b:62:94:e9:90:67:fa:64:05:22:d3:6a:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:7C:DE:68:21:D5:44:1A:48:AF:F7:88:AE:0C:B6:8A:86:F2:34
X509v3 Authority Key Identifier:
keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:36:bf:94:16:9b:8f:0b:10:37:cc:4b:79:05:6c:dc:f7:3b:
8b:00:ff:cb:54:f2:e3:6d:c9:de:bb:7c:03:84:a8:62:11:89:
6d:16:28:24:bc:71:92:b3:b9:6e:27:c7:7a:d3:f6:f9:ef:f1:
4b:ec:14:0b:79:05:d7:b9:c7:10:a6:ab:78:5d:fc:79:70:2b:
7c:68:91:02:a0:b7:db:a0:86:5c:97:8f:e6:84:53:00:f7:6c:
85:59:ad:9a:c7:32:8d:c3:83:7d:1d:4d:eb:33:f5:e5:21:ea:
e1:cf:fe:91:28:c2:3f:31:42:4c:54:67:96:4d:f3:3d:f7:cc:
13:ab:a9:cd:7f:90:9f:05:86:bd:b0:df:8c:ff:c3:05:1e:87:
67:0c:a3:60:ae:26:9d:57:4b:f3:54:ef:ea:8c:ef:11:b5:8f:
39:d8:90:70:30:13:c3:74:b0:ff:ff:2d:59:86:90:2b:55:1d:
ef:9e:1d:fc:a9:75:2e:0b:24:2b:a4:4f:88:1e:2f:c3:49:c5:
65:02:ab:47:c2:49:77:53:fd:ca:76:1d:fc:e1:b1:41:3a:da:
7c:7e:11:5e:3d:f6:67:4d:0a:6c:70:70:22:51:91:04:eb:0c:
51:6a:31:d1:80:e4:14:de:bd:d3:cc:cc:bb:1c:f7:9e:ad:6e:
7c:a7:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:08 2026 by rpki-client