
$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier: E4l6S/4hvYWDjRnZizSPzGvtgejb9ybYIEsT99I2rxo=
Subject key identifier: FE:BB:46:B1:5D:73:C0:38:EF:75:EC:FA:50:9B:47:6B:2B:93:EC:9A
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number: 017A
Signing time: Sun 05 Apr 2026 04:09:27 +0000
Manifest this update: Sun 05 Apr 2026 04:09:26 +0000
Manifest next update: Sun 12 Apr 2026 04:09:26 +0000
Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: rA/twLOye9P8braIP4qRHSd9JXXKg1mjerCoFHBXtmM=)
2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: KlNM/yfkSE+noMo4pBbPbKUObjnAMx3gXh75VDyO61o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Validity
Not Before: Apr 5 04:09:26 2026 GMT
Not After : Apr 12 04:09:26 2026 GMT
Subject: CN=69d1e077-149c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:87:c8:19:7c:3d:d6:7b:5e:34:2d:43:98:
98:07:8b:7d:6e:50:78:3b:72:e7:72:f7:98:c2:f8:
aa:c4:fb:37:b8:f6:8a:9c:37:4b:62:86:1c:a6:37:
3e:6a:1e:12:ee:2a:3d:2a:02:9e:95:80:82:db:6e:
90:19:5e:d7:4d:01:8c:32:8d:e9:5e:b2:58:06:71:
c4:a9:aa:48:eb:71:9e:d8:17:dc:dd:a5:e3:ac:61:
5f:3d:59:27:db:b4:8a:72:65:c1:e9:dc:a2:88:d5:
6a:80:f4:25:66:73:13:b4:b5:6d:a1:ee:e3:b9:31:
80:1d:7a:35:d9:e4:e8:7f:15:66:56:52:57:20:c5:
03:24:c9:34:cd:07:1f:37:0f:79:87:31:c7:3a:70:
46:e1:d6:dc:60:ba:82:84:0c:bd:56:22:f1:d4:3c:
30:f3:f7:55:d6:34:88:af:e5:13:59:9d:fd:3c:f7:
a5:bb:c4:60:68:e2:9b:8b:af:16:0c:85:6f:bf:bd:
3a:c5:53:bf:89:9f:ee:70:03:42:4d:6c:9c:37:c2:
9b:88:08:f3:6c:b9:be:de:c2:29:6b:e2:69:29:16:
7e:4a:49:68:d8:70:1d:4e:25:26:43:b0:43:c7:29:
17:87:73:cf:f3:0e:05:39:bb:f6:eb:9a:f2:93:af:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:46:B1:5D:73:C0:38:EF:75:EC:FA:50:9B:47:6B:2B:93:EC:9A
X509v3 Authority Key Identifier:
keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:33:ca:14:c1:21:6e:2b:11:af:ad:b4:c5:7d:23:36:b8:55:
7a:10:ff:f0:69:dd:fd:69:b0:c8:a3:e4:ae:c5:b8:63:fc:f0:
b1:85:5a:e9:6a:b5:ff:3e:d9:1a:85:94:66:50:99:ee:a6:6b:
8e:c4:48:36:25:0b:f2:57:30:85:0d:0a:be:68:fe:d2:63:db:
f1:6b:f3:2b:fc:47:db:3d:3f:6a:1b:20:c6:a1:e8:fa:58:f6:
a7:7e:95:b3:cc:1a:35:1f:9e:d8:8c:03:76:48:58:94:a6:57:
6a:c8:04:5b:23:0b:ee:7f:cd:06:80:25:1e:bc:84:a4:7d:88:
0e:d5:69:7f:95:66:ae:02:74:aa:5d:12:60:f5:21:0c:f0:3d:
c4:9f:10:67:63:65:52:38:4e:e7:63:58:3d:ce:17:0d:8a:72:
76:97:2f:69:0d:c0:96:c9:ed:ab:de:de:28:13:b3:a0:87:00:
31:5d:36:06:5e:a7:ad:4e:a7:12:99:25:31:7e:d1:e0:dc:f8:
e1:ce:48:97:67:6c:14:8a:a2:6f:ae:cc:d1:a8:7b:d0:53:0a:
27:d8:35:41:81:bb:e1:d7:f3:0d:ba:36:dc:fd:61:75:97:bb:
eb:94:af:39:6c:51:80:60:ff:74:f0:7a:86:86:60:c3:fd:a3:
54:de:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:41 2026 by rpki-client