
$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File: QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier: /5leLalJA6OV86m3Q6cGyNgWw+e2VtyZpvAQ6kTt0VI=
Subject key identifier: 62:EE:CA:54:4B:10:9E:44:C7:97:32:A0:C4:5F:A8:76:27:04:46:EF
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer: /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number: 048C
Signing time: Sat 04 Apr 2026 23:48:00 +0000
Manifest this update: Sat 04 Apr 2026 23:47:59 +0000
Manifest next update: Sat 11 Apr 2026 23:47:59 +0000
Files and hashes: 1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: mBosOULu3nXRT8/NYLuHNmCslxJDhE3ZmeMT59eg67Y=)
2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: UDGIexCjWZjf9oWBoZsn81ywHvMY4QFQvNjug6FA+Yo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Validity
Not Before: Apr 4 23:47:59 2026 GMT
Not After : Apr 11 23:47:59 2026 GMT
Subject: CN=69d1a330-e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:1c:5e:20:e7:34:12:f9:50:af:2e:d1:10:
1a:8b:af:78:43:6e:e4:08:56:a4:5f:fc:1c:f6:9f:
e1:99:06:9b:e7:78:06:fb:25:fd:0f:aa:a7:97:c8:
fc:a4:3a:98:24:6b:4a:82:cc:3a:81:27:45:ff:3a:
f6:17:ce:5c:a7:23:e0:e6:39:db:58:c9:ee:89:d9:
fb:a5:94:60:dd:0b:49:3f:26:84:db:21:b2:31:3c:
58:07:89:6e:44:c9:b2:a0:36:a7:94:3c:c2:95:4c:
56:40:e2:7f:9e:68:ae:3b:ef:84:16:54:93:10:3a:
fb:dc:f4:4f:ae:01:8e:06:8c:30:b3:e4:9e:20:a2:
fc:8c:ca:c4:04:cc:db:4e:ab:11:c5:67:03:54:4e:
80:56:9c:61:04:df:e3:49:d6:83:96:a1:38:9d:b9:
c2:f4:6f:b6:52:8f:47:d4:f9:bc:fa:7b:8f:ce:93:
2a:09:ec:e2:e4:1c:f1:b5:3a:0a:d6:36:8c:82:5b:
b6:d0:19:5f:6d:cb:f5:c1:2b:1f:99:83:24:a7:55:
74:7c:26:05:bb:66:5f:f2:76:8c:5e:8f:e2:e2:59:
1a:65:aa:5b:9e:5f:b8:74:67:88:cc:23:d2:6b:46:
1c:b7:6f:bd:b2:70:6b:5f:bd:0e:de:61:44:32:cf:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:CA:54:4B:10:9E:44:C7:97:32:A0:C4:5F:A8:76:27:04:46:EF
X509v3 Authority Key Identifier:
keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9c:ed:01:4b:16:ea:f4:c9:42:84:6c:8d:a2:6a:6f:bc:c9:
92:c4:e9:1d:5f:cf:94:8f:9a:71:87:fc:47:51:89:0e:0e:e1:
3b:d8:6c:b4:5b:b8:2e:e2:b4:fa:f9:d3:ec:d3:d6:84:d8:63:
1c:0f:ad:b9:57:3b:01:53:b2:4d:53:fb:b1:36:a9:65:35:9c:
ed:c8:5a:09:06:de:4f:d6:0c:1a:54:35:d9:af:54:5d:65:53:
74:3f:0a:a0:36:aa:65:d6:da:2a:22:4a:aa:52:2b:6c:95:2f:
db:52:62:b5:51:93:b2:93:f1:a9:f1:f0:65:74:15:d4:a2:5f:
c9:71:7c:51:86:5d:7a:a9:0a:57:d4:41:e3:c6:76:eb:95:51:
cd:5e:a3:03:a2:6d:3b:1a:21:6e:68:9a:2d:bf:16:e2:e3:03:
fe:a7:3a:4e:6e:41:df:ec:47:8b:41:6e:be:be:29:46:d6:92:
87:3e:d8:c9:cb:a6:d3:db:58:13:48:a7:31:ec:ed:86:bc:47:
ba:4a:62:0f:1f:4d:72:de:8e:05:c7:0b:ee:fe:9e:4e:55:d3:
53:1a:61:65:f5:30:cc:23:6c:27:bc:39:eb:0d:58:66:a0:04:
f9:d2:dd:79:ec:2b:35:d3:14:1c:74:61:f3:5b:cd:a6:e4:97:
a5:cd:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:44 2026 by rpki-client