
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
File: qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft (raw, json)
Hash identifier: LKv15feLmkFlydYxlWrrJpLEhZBfi/WwkAi+xS501ac=
Subject key identifier: 88:FD:B7:8C:BF:07:EB:1D:C3:15:10:73:FC:72:0F:BC:7E:28:C1:27
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
Manifest number: 0231
Signing time: Sun 05 Apr 2026 02:28:49 +0000
Manifest this update: Sun 05 Apr 2026 02:28:48 +0000
Manifest next update: Sun 12 Apr 2026 02:28:48 +0000
Files and hashes: 1: qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl (hash: JzAG6GOUvgkXlpc1eynZ5mP4Gu7v7h2NLbosSt2MeLU=)
2: 2F40B3CA8D5B11F0A0B1D010C4F9AE02.roa (hash: Xmd47SSJ8r1PNJ+biTEY3Fc1Fo382wK4VChB/7hTug4=)
3: 8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (hash: 3B96UlkLTKNYWeeC54aVnV7PH9CyaSoRvKgcab08m08=)
4: EAF431DAEC3011F0A9E1B992416F56BC.roa (hash: pi5IdFH8BXBZqxet6PyncdKtsmtgqEe3vNhv2Ot0+1Q=)
5: C9DBA6A666A211EE8C285556C4F9AE02.roa (hash: 036SMhOSIDJiCYH/Aa49/ufrn1FEnv9HqMNnhWlvrLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Apr 5 02:28:48 2026 GMT
Not After : Apr 12 02:28:48 2026 GMT
Subject: CN=69d1c8e1-dfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:03:c4:d7:57:4f:ac:c4:ae:38:c3:27:3f:
95:aa:9f:78:8c:fc:4e:bb:4f:96:44:c1:85:40:a8:
26:69:df:0d:fd:5f:9e:e2:14:46:7d:6f:16:cb:75:
6e:26:50:5a:28:0e:67:05:82:05:5c:e6:54:c2:1b:
f0:20:9c:e6:70:14:ae:c3:0b:ae:44:28:11:fd:01:
de:e0:7e:b8:c1:9c:35:e1:a1:79:96:ae:ac:96:d9:
56:b9:fc:7f:1d:6c:fa:e0:33:5d:82:40:36:fa:d4:
c0:47:61:b4:38:42:cd:a2:f1:46:4b:fb:1c:86:fe:
f0:3c:8a:da:4d:16:95:57:cd:1a:11:b5:e7:4e:ec:
55:c2:9a:79:19:1f:8d:7f:e8:5c:61:45:d6:6d:4a:
3d:29:2c:c0:86:d9:d0:37:3a:cc:70:e6:31:ec:2c:
6d:19:14:ba:6f:fd:a3:3d:46:40:0d:e8:0d:13:37:
bc:77:4a:23:03:11:09:ac:4b:e9:e6:75:6c:18:74:
af:57:f9:d5:34:32:8d:12:66:6e:6f:c0:19:d6:36:
4e:4d:32:29:e5:12:f3:02:e0:e2:38:ae:a9:10:a7:
d9:71:d9:d5:e7:23:0b:a8:35:30:15:bd:28:f7:ac:
df:76:68:a3:ad:f2:84:6c:2b:32:6f:30:1d:b7:2e:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FD:B7:8C:BF:07:EB:1D:C3:15:10:73:FC:72:0F:BC:7E:28:C1:27
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:49:c3:72:11:83:c6:2d:c9:73:d8:b5:26:c2:30:0d:d4:f2:
20:f2:fe:be:6d:7b:fe:53:7e:80:1d:df:48:96:6d:5e:b9:4b:
7d:91:dc:82:c1:3d:9b:af:53:d8:e7:6a:94:21:78:bb:89:6d:
7b:d1:b7:f4:fc:54:7e:b7:85:8f:f5:0f:f5:a5:3f:0d:53:22:
43:58:c6:7c:07:eb:30:62:11:7e:f7:3c:ee:9b:72:7a:74:34:
29:fe:11:ca:7a:91:7f:2b:e7:53:6e:d2:e4:34:8d:65:bc:9a:
1a:69:1b:58:5f:b5:38:09:24:04:3b:68:88:6f:d7:65:3b:a4:
5c:a2:fe:c9:bc:44:d3:61:e6:11:94:1d:bb:93:e6:af:5e:10:
7b:06:6e:13:a5:c7:3f:d6:8c:f4:2f:c8:f1:b0:c9:ed:ef:36:
d4:66:a5:a3:5d:5f:56:ab:55:d4:2f:04:67:3f:37:2c:46:5d:
6e:ed:1b:f9:6f:85:ed:5f:48:c1:db:cc:af:ef:2f:59:0d:3b:
92:2e:7d:e0:9e:b9:13:80:b6:11:01:d3:fc:49:67:8f:9b:87:
dc:ea:ed:d3:2b:b0:af:e4:e0:ea:6e:6d:93:b7:b1:8f:9b:04:
d4:57:da:73:41:da:3b:d9:86:d1:7d:e4:e3:f0:58:61:12:6e:
76:aa:d8:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkxMkYxMTAvBgNVBAUTKEE5OEI0RDc1M0E4NERGRDQ5REE3RTIzMDdFMzE5MkE4
QzRGRjk4OTUwHhcNMjYwNDA1MDIyODQ4WhcNMjYwNDEyMDIyODQ4WjAYMRYwFAYD
VQQDEw02OWQxYzhlMS1kZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtEDxNdXT6zErjjDJz+Vqp94jPxOu0+WRMGFQKgmad8N/V+e4hRGfW8Wy3Vu
JlBaKA5nBYIFXOZUwhvwIJzmcBSuwwuuRCgR/QHe4H64wZw14aF5lq6sltlWufx/
HWz64DNdgkA2+tTAR2G0OELNovFGS/schv7wPIraTRaVV80aEbXnTuxVwpp5GR+N
f+hcYUXWbUo9KSzAhtnQNzrMcOYx7CxtGRS6b/2jPUZADegNEze8d0ojAxEJrEvp
5nVsGHSvV/nVNDKNEmZub8AZ1jZOTTIp5RLzAuDiOK6pEKfZcdnV5yMLqDUwFb0o
96zfdmijrfKEbCsybzAdty7q6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIj9t4y/
B+sdwxUQc/xyD7x+KMEnMB8GA1UdIwQYMBaAFKmLTXU6hN/UnafiMH4xkqjE/5iV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTEyRi8wQTA2NzkwODBB
NTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5U2RwLUl3ZmpHU3FNVF9t
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FZdE5kVHFFMzlTZHAtSXdmakdTcU1UX21KVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTEyRi8wQTA2NzkwODBBNTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5
U2RwLUl3ZmpHU3FNVF9tSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv0nDchGDxi3Jc9i1JsIwDdTyIPL+vm17/lN+gB3fSJZtXrlLfZHcgsE9m69T
2OdqlCF4u4lte9G39PxUfreFj/UP9aU/DVMiQ1jGfAfrMGIRfvc87ptyenQ0Kf4R
ynqRfyvnU27S5DSNZbyaGmkbWF+1OAkkBDtoiG/XZTukXKL+ybxE02HmEZQdu5Pm
r14QewZuE6XHP9aM9C/I8bDJ7e821Galo11fVqtV1C8EZz83LEZdbu0b+W+F7V9I
wdvMr+8vWQ07ki594J65E4C2EQHT/Elnj5uH3Ort0yuwr+Tg6m5tk7exj5sE1Ffa
c0HaO9mG0X3k4/BYYRJudqrYcw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:50 2026 by rpki-client