
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier: 1IlFOcZUsSe69gy2JEHsBBQZs4fiAj9cqzsDtO4PRwc=
Subject key identifier: 06:5F:FE:D4:76:E6:9C:FD:7C:D9:43:F6:7E:43:2C:A9:14:84:37:E0
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer: /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number: 0224
Signing time: Sun 05 Apr 2026 02:32:58 +0000
Manifest this update: Sun 05 Apr 2026 02:32:58 +0000
Manifest next update: Sun 12 Apr 2026 02:32:58 +0000
Files and hashes: 1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: 07Sdz97bIfoeBEpR1uPfPkOpn0QRV3sFe62jXk3J7EU=)
2: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: /3te3zobVZswJsFFIn071Wgbe9BzUFq7AKG46skLDvA=)
3: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: Hhuce/k2Nig26k0PhaoBK79YcGuzei5AcpeXnj1kphs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Validity
Not Before: Apr 5 02:32:58 2026 GMT
Not After : Apr 12 02:32:58 2026 GMT
Subject: CN=69d1c9da-c463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:b4:3d:d9:4d:13:73:15:fa:47:4f:17:1e:
bf:2c:da:82:ab:2d:ed:4f:8b:50:fc:a5:b1:e8:65:
28:92:b0:45:b1:cc:21:5d:4d:0d:4e:0d:ba:e2:b3:
75:d4:08:a7:9b:31:7a:5a:5b:c0:76:9d:ba:d2:a8:
39:66:06:fa:f5:54:dc:53:07:db:b6:e3:24:dc:fc:
e2:77:d7:ca:69:19:2a:09:72:ad:8b:9e:73:6b:fb:
91:d5:2a:9f:ae:16:c0:14:b3:27:f3:5b:0d:fa:47:
60:8f:3f:3e:4d:7e:59:b6:73:5a:4d:58:ca:2c:2b:
df:18:e8:5f:a1:12:ba:2f:a5:ea:02:90:81:87:6f:
3f:01:cb:4e:55:12:86:cc:e4:a2:04:b1:b2:c0:b0:
52:34:7d:3c:78:ed:5e:17:df:10:70:78:7d:16:41:
6f:cf:cf:b7:76:92:59:3a:08:42:80:6a:50:95:7f:
e4:5d:53:0c:b9:27:27:fc:54:10:76:3a:f8:60:83:
41:7d:da:a1:92:08:31:6e:10:0d:66:b4:59:f6:d1:
2d:45:b0:d1:48:05:3f:9f:09:00:0d:2b:8c:c1:b2:
0d:be:93:5c:a9:62:21:4f:48:60:d6:f9:68:09:69:
dd:03:8e:7f:fb:78:a8:94:e6:39:16:32:a2:14:e2:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:FE:D4:76:E6:9C:FD:7C:D9:43:F6:7E:43:2C:A9:14:84:37:E0
X509v3 Authority Key Identifier:
keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:57:42:3a:96:f6:4b:69:d8:67:81:ff:27:c4:02:0d:7c:ce:
05:c6:f3:ff:c8:eb:b8:3a:bf:2d:4f:d1:1d:b9:fc:0c:66:b3:
1b:ed:d0:ab:e3:1a:a7:49:2e:4d:60:d8:45:b1:36:f0:ee:18:
71:4e:59:30:7a:6f:c5:4e:c1:d1:5a:b5:f1:63:81:27:c4:db:
34:0b:8b:be:8c:97:7c:e2:d2:6a:d3:a6:c4:ee:79:c6:08:89:
9f:31:c0:c2:71:e3:dd:76:8f:3d:dd:ab:84:5a:cb:20:4f:f4:
ee:32:70:0e:c6:c8:a9:92:5b:84:d2:2b:28:a9:b9:15:03:09:
57:9f:d8:68:52:33:ef:d1:ca:c2:bb:7c:9a:7c:5a:71:bd:13:
51:94:13:48:f9:78:91:3e:18:55:7d:23:1b:12:f0:27:b0:71:
9c:d5:2f:0f:27:7b:0f:90:ab:90:e4:ba:3b:b7:c9:ef:f2:19:
db:85:9e:82:97:23:cb:00:cf:70:0e:f4:b0:84:93:b6:c0:43:
84:7a:84:52:0e:e1:72:16:6f:b4:c8:66:b6:46:ff:11:d5:62:
c1:5c:62:6a:47:09:cb:3e:9a:36:07:d0:ac:dc:ba:2e:26:7b:
c1:a9:45:0a:6f:ec:e9:b1:c7:6d:10:b7:79:62:93:78:1c:f5:
9f:f5:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:01 2026 by rpki-client