
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File: Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier: ipwrwBSFnbjkgX6a43AmiTnwnt/5t9UjNChHjRgSZGo=
Subject key identifier: 2A:68:9E:22:82:65:56:69:55:69:58:14:DB:FD:26:FD:E4:D2:12:64
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1CAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number: 1C76
Signing time: Sun 26 Apr 2026 16:08:14 +0000
Manifest this update: Sun 26 Apr 2026 16:08:13 +0000
Manifest next update: Sun 03 May 2026 16:08:13 +0000
Files and hashes: 1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: D2AEnLvcA4kRTzoV1Lyv5Dok4lnCjgSMDQwqrlYJlcw=)
2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: oOMFQEz7Z0dlH9Kxe9lCaXlC2P93gTrGpTMlqfnNL/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 16:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7341 (0x1cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: Apr 26 16:08:13 2026 GMT
Not After : May 3 16:08:13 2026 GMT
Subject: CN=69ee386d-9646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:b3:cd:8d:1d:b7:17:0d:05:6b:38:cd:55:
62:0b:db:48:e3:7c:fa:bd:d8:6b:46:d8:65:fa:dd:
34:4a:2f:94:18:7a:ae:18:6b:d3:83:9c:ba:32:70:
58:4e:cc:9f:d6:99:b6:4d:98:36:9e:a7:5b:9e:a8:
81:8a:46:e0:eb:45:0b:28:54:86:16:1c:47:32:88:
7b:b5:a1:98:ce:2c:f8:97:33:92:71:35:ac:4c:13:
53:f1:9a:af:c6:55:11:b4:27:a9:01:73:de:20:33:
91:51:b1:ce:87:93:58:b6:a9:ae:70:ed:ae:39:37:
de:be:de:e2:f3:20:cf:4e:bc:6c:6a:24:e6:27:f9:
27:32:d6:9f:a2:31:53:32:d5:1f:d9:0b:37:97:20:
bb:e5:ec:39:1c:10:ec:42:f5:48:8a:71:2c:1b:4e:
1d:87:81:55:60:36:72:17:08:8b:f3:f7:eb:d1:43:
34:ba:a8:e9:7f:9a:49:fe:1d:84:d0:af:51:5e:6f:
44:7d:f4:fe:eb:01:d8:88:c5:5a:04:02:a5:94:de:
ca:08:87:f6:41:a8:4e:4c:28:27:73:93:57:76:bf:
fc:b5:7d:b2:fc:ad:da:27:64:c7:64:c5:9b:72:50:
0d:87:4c:88:36:31:a2:57:de:be:44:ec:26:64:6b:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:9E:22:82:65:56:69:55:69:58:14:DB:FD:26:FD:E4:D2:12:64
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:3a:c4:9e:e8:9c:1f:f0:d2:d5:af:45:b6:4e:89:f5:6d:0d:
20:a3:f0:af:df:dd:52:ef:bb:dd:12:0e:46:7a:f5:34:8b:ec:
da:48:ef:20:fa:29:c0:86:45:ee:a0:58:2f:30:da:03:b3:67:
60:eb:07:97:be:1d:27:36:5a:30:d1:07:40:16:0e:a2:c1:73:
b8:cf:aa:25:2f:60:96:a6:16:33:2d:54:99:e2:83:33:7a:2e:
62:c6:33:4d:a9:bb:ee:97:95:37:63:03:ef:71:2e:69:85:a3:
19:68:ce:8d:03:c9:a6:d5:b6:8e:e1:1a:5e:06:60:9d:da:d2:
f2:62:5e:31:a9:d5:fc:b9:5f:7b:8b:1a:c8:01:83:5d:7b:2d:
66:67:6a:40:8e:23:0b:55:5d:cd:a8:b3:c9:08:26:8f:e0:9e:
e2:84:62:20:9e:b4:8e:38:1f:c7:55:40:f3:98:cf:01:37:a1:
71:da:b7:f7:34:55:3a:2a:c0:3c:4b:f1:ed:93:f1:cc:5c:02:
e2:f7:f6:9f:42:3d:4b:f9:38:b2:1f:dc:eb:49:b0:a0:48:c0:
31:68:18:30:f6:4f:06:19:18:15:24:d7:2b:44:30:87:f3:4a:
a1:00:30:7f:9a:73:41:ad:26:0d:c5:f2:17:00:f9:57:6b:41:
46:fc:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:23:45 2026 by rpki-client