
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier: s3qrc3BRe7Mw77NnsKxHq4r3vT1IEPTNCwvLLvZ8yQI=
Subject key identifier: C0:C6:3C:14:50:51:5F:7A:E1:36:10:40:96:70:E0:22:DE:FD:A1:98
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number: 0170
Signing time: Sun 05 Apr 2026 04:20:23 +0000
Manifest this update: Sun 05 Apr 2026 04:20:22 +0000
Manifest next update: Sun 12 Apr 2026 04:20:22 +0000
Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: lAwSodJWd1AzKJYxUEvRVAF0e8w0k/RNKr92KrKIYfE=)
2: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: S0GbV2uCmeoviSkKmr830JmB3p8jmN3VMhk4MtRUTHg=)
3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: 4saGenWnq38wSt4Z38V8afVK5ChkZJPpUWTM99qUpeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Validity
Not Before: Apr 5 04:20:22 2026 GMT
Not After : Apr 12 04:20:22 2026 GMT
Subject: CN=69d1e306-2a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:81:66:df:4d:71:ba:5c:c3:22:46:7c:59:
e7:f1:0f:2d:47:6f:5f:95:52:37:e4:e4:46:11:86:
b0:61:57:ed:f5:e6:c7:7a:09:69:8d:ba:8d:07:4a:
a4:89:b2:ae:4d:5e:8a:a1:8b:5e:ee:58:59:d2:f6:
c6:04:5e:2b:a5:fe:c6:88:a5:78:3a:54:82:17:75:
c0:92:23:fd:98:3b:22:24:64:8d:40:49:61:2f:3b:
36:7d:b9:35:10:c1:d6:4b:e8:82:9a:72:6e:92:a3:
d6:32:6f:82:a5:55:9c:e2:96:4d:b5:15:6c:c5:27:
c2:f9:b6:af:ef:75:2c:8a:23:3c:dd:71:c5:95:53:
f6:bc:b7:fd:ba:c3:e5:ba:62:02:69:da:81:13:8c:
86:d7:ce:c0:f1:c9:f3:55:b7:90:b8:88:4c:f1:df:
ac:45:e2:6e:19:64:fc:26:36:65:43:cb:02:8e:8d:
ba:fb:00:8d:bb:7f:aa:ab:e2:8a:ba:31:d9:e5:9f:
fb:c8:b3:f8:a7:2f:15:b3:b5:2a:c0:56:f0:fe:9a:
fa:73:61:e9:74:32:fc:96:2a:a0:f4:00:6c:d1:fe:
f2:8f:49:9d:63:a6:9f:84:c7:c1:e2:f9:4f:0f:86:
06:2e:10:9e:07:8e:9d:9c:a8:1c:f3:13:49:07:fa:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:3C:14:50:51:5F:7A:E1:36:10:40:96:70:E0:22:DE:FD:A1:98
X509v3 Authority Key Identifier:
keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b1:b5:12:d0:b8:4a:47:75:e2:36:8d:75:81:36:24:bf:f9:
ad:3b:37:a8:6b:c1:bd:96:d4:32:8b:f0:02:bf:86:e9:0e:bf:
b7:af:11:2b:73:51:78:5e:ab:f5:54:8c:85:5e:12:c0:02:b9:
8e:f7:7c:b2:9e:f5:58:a8:26:e6:ee:72:83:97:7f:53:57:04:
8e:cb:12:33:e0:84:8f:37:e8:a3:17:6b:9a:0c:38:de:99:fd:
a6:a8:79:82:c1:35:e5:bb:2b:9f:49:55:49:53:df:ca:91:65:
f6:b3:d9:95:d3:6d:e2:1c:f4:4d:cc:16:97:ef:05:23:7b:12:
7e:82:b1:49:73:c9:4f:90:69:2c:1b:67:b2:ee:ab:66:1f:44:
7f:01:f2:c3:44:98:a4:03:11:11:d4:58:3c:45:bc:d7:95:e0:
0f:b1:3e:ef:89:26:3c:1c:7f:fa:f9:2e:2c:c9:ad:e9:70:0b:
95:78:90:1d:6d:bf:ca:b9:f6:79:95:2c:2b:c8:fc:92:d6:ec:
c0:51:50:05:76:6e:eb:95:45:1d:53:b4:f3:dc:60:28:bc:e7:
91:b0:b7:ae:90:3d:ad:0f:c2:4a:8b:88:34:e8:8e:83:83:69:
b0:c7:6e:69:9d:ce:66:fb:fa:ec:68:b4:67:a9:b4:9b:47:7e:
10:d8:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:18 2026 by rpki-client