
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json)
Hash identifier: yUuRkuUwITDvQMQqIg5Qp59XciCbZH9HU+N4rteKCWQ=
Subject key identifier: 57:7A:E7:E5:34:CB:D1:41:B9:4F:56:AF:06:C2:9F:FA:AA:79:DF:B3
Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Certificate serial: 04E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
Manifest number: 04DD
Signing time: Sat 04 Apr 2026 23:34:27 +0000
Manifest this update: Sat 04 Apr 2026 23:34:26 +0000
Manifest next update: Sat 11 Apr 2026 23:34:26 +0000
Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: FhZfT/PsZ5RR5hwQvMtvULU0vtZiDsh0PXn6rQmV7xo=)
2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: 8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Validity
Not Before: Apr 4 23:34:26 2026 GMT
Not After : Apr 11 23:34:26 2026 GMT
Subject: CN=69d1a002-c4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:50:f1:0f:d8:53:9c:19:d1:7a:eb:37:3b:
52:71:5b:4f:68:19:a3:2b:84:fe:f1:27:d2:1c:31:
33:ca:ef:6a:9c:fc:56:cf:c3:28:34:f3:70:f9:3d:
3f:39:38:d1:b5:d5:af:b9:8c:45:54:53:c6:e2:60:
b6:82:8c:ac:88:80:d0:6b:59:05:78:ab:a2:70:37:
75:05:1e:2e:3a:4c:50:f4:c1:fa:eb:e6:13:97:21:
63:92:24:a4:dd:97:12:32:a6:9f:ca:97:9e:15:65:
fc:2a:79:71:8e:4d:68:19:7c:35:21:b3:6f:38:a3:
f2:a5:e9:c8:cb:ec:61:c8:e4:74:6e:1f:1f:a0:40:
54:58:ef:5f:93:c2:21:4a:ea:e8:e2:fd:e4:2f:69:
eb:81:f2:3b:cc:75:8e:ea:17:ec:e3:45:55:3b:53:
f1:e1:db:fd:0a:6a:b1:75:e1:e3:e9:fa:07:44:88:
37:cf:ae:a1:b5:aa:27:76:59:b2:d2:7a:4b:c0:77:
cf:17:41:6c:70:f2:b0:0a:d2:d6:aa:3a:81:07:1a:
8f:b9:bb:28:69:d9:fd:7b:40:50:e4:41:9c:54:87:
44:33:3b:d9:f5:e8:f9:70:f2:1b:b0:b3:9b:a9:25:
d1:cb:21:e3:82:34:3b:a4:83:ca:6f:01:af:f0:cf:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:E7:E5:34:CB:D1:41:B9:4F:56:AF:06:C2:9F:FA:AA:79:DF:B3
X509v3 Authority Key Identifier:
keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:c3:e0:4b:93:e4:dd:84:eb:71:3e:4d:60:e4:24:82:22:15:
eb:06:f7:4f:f1:72:0d:c2:a3:09:23:ea:4a:05:b1:8b:bf:46:
7e:8e:5b:f2:e4:ee:08:0c:87:d8:a1:84:0b:34:88:ec:52:8e:
25:9d:d6:c3:b0:60:b4:34:20:7e:1f:9b:91:da:cc:29:9f:d5:
ef:06:a1:f3:bf:ea:fd:bc:e7:a9:fd:e1:23:21:9b:64:df:74:
e0:77:f3:13:ff:90:cf:7f:d3:48:9a:da:f3:01:b1:03:61:f7:
de:f0:f0:eb:9f:18:ed:51:68:12:5a:93:ac:64:27:3b:31:0c:
87:8a:86:66:34:8c:74:22:b7:1c:0b:17:18:5e:69:3c:af:c5:
36:20:df:bf:dd:c1:a4:3a:bd:ee:d7:ef:b0:8e:f7:52:a2:94:
2b:0a:b9:c1:e4:c6:b5:84:79:73:52:d8:54:fb:b6:72:ed:0a:
e6:fd:44:69:69:65:ae:9b:67:63:4a:56:fe:f2:5a:b5:12:22:
fd:6d:b1:12:1e:0d:f7:88:bc:8e:ed:ee:36:d0:1c:d4:b7:96:
a9:9c:b4:85:6a:30:2c:e2:bf:98:a1:56:f9:b3:5f:95:15:d9:
9b:82:61:8f:bc:cb:8a:e8:7d:ca:a8:1c:60:2a:fc:9b:33:e8:
78:9b:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:09 2026 by rpki-client