
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json)
Hash identifier: Zn3njvKBBClLJ7+NfX/k+1pXi7mouZv3x5LkTWlconY=
Subject key identifier: 41:5D:B8:05:E4:8C:35:3D:8D:DB:18:AF:31:A3:3B:20:13:7A:68:42
Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Certificate serial: 352C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
Manifest number: 352C
Signing time: Sat 04 Apr 2026 14:38:29 +0000
Manifest this update: Sat 04 Apr 2026 14:38:29 +0000
Manifest next update: Sat 11 Apr 2026 14:38:29 +0000
Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: wrTbyy7uWTOSaK9AlTA4wXZRS9rifuCavDoK/kMJPoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl
rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13612 (0x352c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Validity
Not Before: Apr 4 14:38:29 2026 GMT
Not After : Apr 11 14:38:29 2026 GMT
Subject: CN=69d12265-bee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:cc:dd:7f:44:90:e9:54:c9:ab:45:19:d4:
28:ec:29:b4:e6:8a:9b:51:b9:0d:40:a0:50:f5:27:
7a:fe:31:6a:a5:54:46:18:dc:40:ed:f8:8e:4a:74:
01:38:6f:25:9a:75:63:dd:8c:5e:80:10:f5:23:d5:
e1:65:61:95:d1:25:05:a9:70:bf:4f:13:66:3e:4d:
9e:27:f3:13:37:d5:d5:99:a7:2f:a9:bc:3e:d3:a4:
9b:4d:a1:1d:f0:1f:c8:9b:8f:1f:55:44:10:16:f1:
ca:5e:54:0f:ed:98:90:1d:06:0d:a6:cd:43:e1:10:
84:11:6c:fe:68:4b:6e:73:1d:02:db:bb:85:d5:c0:
da:3e:d1:71:a8:8a:13:68:fd:7c:d5:16:d2:ca:f0:
4f:52:6b:4c:31:61:4a:12:91:04:cf:20:da:10:07:
95:6f:e3:84:22:de:ef:36:e4:fd:28:d3:0a:58:d5:
a8:77:1c:86:cf:ac:cd:8e:24:f0:5e:04:e7:f6:73:
3e:e5:a9:89:8e:10:59:79:43:af:50:d6:99:23:ad:
be:e7:8d:55:a3:b8:00:f8:6f:6f:10:a2:cd:c4:6d:
c1:66:d9:a5:7e:6d:10:79:0b:24:27:03:de:ca:83:
a4:d9:5c:43:a4:25:4e:d4:fd:26:d4:06:e2:9d:6d:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:B8:05:E4:8C:35:3D:8D:DB:18:AF:31:A3:3B:20:13:7A:68:42
X509v3 Authority Key Identifier:
keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:0c:30:fc:6c:f5:2d:79:6d:9f:ca:17:6a:a0:00:dc:d7:f5:
98:f8:9e:a1:ae:a6:a3:d4:12:0f:a2:ed:8e:b4:e6:7a:f5:d7:
9a:80:46:39:7b:97:5e:b4:0e:05:0e:64:e9:02:c5:32:f1:24:
5c:1a:ff:eb:57:37:87:81:ca:fc:25:e5:9c:2f:a5:69:61:d9:
36:7b:b2:f4:15:20:2f:91:50:1f:15:08:99:40:e2:6a:2c:d2:
c7:99:8e:b7:bf:e2:0b:19:b0:01:91:21:f8:1b:2c:e0:a1:c7:
57:87:b4:69:39:c0:53:e1:94:cc:2b:52:e4:09:49:2b:d3:f0:
9d:aa:09:e6:f9:60:38:2d:b2:d6:86:28:c4:7a:bb:8f:3c:81:
ac:ff:06:5e:ef:19:bc:fc:5e:ad:6f:24:5b:7a:39:45:a9:59:
54:de:c9:98:8a:74:ea:06:ba:54:38:ad:35:1c:c8:fa:4f:1f:
65:66:5a:d6:7c:d8:b7:8f:32:38:92:af:6e:99:af:c5:ac:dd:
c5:a7:f0:a0:be:e3:11:bd:59:b8:81:fb:07:8c:6a:93:8e:12:
b7:eb:8f:3f:cd:83:88:f0:f5:c4:85:0e:ec:ad:54:49:0e:99:
7a:06:8f:b3:bf:4e:ec:c8:75:ad:be:de:3f:30:09:21:cb:fb:
78:dd:01:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx
NUI2RDgwNTgwHhcNMjYwNDA0MTQzODI5WhcNMjYwNDExMTQzODI5WjAYMRYwFAYD
VQQDEw02OWQxMjI2NS1iZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyvM3X9EkOlUyatFGdQo7Cm05oqbUbkNQKBQ9Sd6/jFqpVRGGNxA7fiOSnQB
OG8lmnVj3YxegBD1I9XhZWGV0SUFqXC/TxNmPk2eJ/MTN9XVmacvqbw+06SbTaEd
8B/Im48fVUQQFvHKXlQP7ZiQHQYNps1D4RCEEWz+aEtucx0C27uF1cDaPtFxqIoT
aP181RbSyvBPUmtMMWFKEpEEzyDaEAeVb+OEIt7vNuT9KNMKWNWodxyGz6zNjiTw
XgTn9nM+5amJjhBZeUOvUNaZI62+541Vo7gA+G9vEKLNxG3BZtmlfm0QeQskJwPe
yoOk2VxDpCVO1P0m1AbinW1W4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFduAXk
jDU9jdsYrzGjOyATemhCMB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE
OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn
RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH
aGE4UjhDM21oQVVWdHRnRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlgww/Gz1LXltn8oXaqAA3Nf1mPieoa6mo9QSD6LtjrTmevXXmoBGOXuXXrQO
BQ5k6QLFMvEkXBr/61c3h4HK/CXlnC+laWHZNnuy9BUgL5FQHxUImUDiaizSx5mO
t7/iCxmwAZEh+Bss4KHHV4e0aTnAU+GUzCtS5AlJK9PwnaoJ5vlgOC2y1oYoxHq7
jzyBrP8GXu8ZvPxerW8kW3o5RalZVN7JmIp06ga6VDitNRzI+k8fZWZa1nzYt48y
OJKvbpmvxazdxafwoL7jEb1ZuIH7B4xqk44St+uPP82DiPD1xIUO7K1USQ6ZegaP
s79O7Mh1rb7ePzAJIcv7eN0Buw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:34 2026 by rpki-client