
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier: 3bLveawjMeTWpqTgqgapDpoSY7BbV5GWGbghZo051WU=
Subject key identifier: 2B:A8:65:B1:6C:48:71:D3:80:47:3E:AB:E7:6B:EE:57:82:9E:EE:8F
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number: AC
Signing time: Fri 17 Apr 2026 07:03:36 +0000
Manifest this update: Fri 17 Apr 2026 07:03:36 +0000
Manifest next update: Fri 24 Apr 2026 07:03:36 +0000
Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: M91XKlHrpiW8ZUVIcmpNoEHX4rIkRtq6CWqq98zxPBg=)
2: B87594FC08B311F1954B37591C3D8C67.roa (hash: wztUnu/AtmwGJSEKvUQ+sSvPTP/4Cs6eUYir69FLSaI=)
3: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: kYrLbQFT1ZzGHGGu97W4fdlheMT2k3tj7Vb3H/0HdO4=)
4: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: cG6u0zgjdvCrRZeQ4usyXAcEzT17uS3cbK/qREEeINU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Validity
Not Before: Apr 17 07:03:36 2026 GMT
Not After : Apr 24 07:03:36 2026 GMT
Subject: CN=69e1db48-4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:70:9e:0c:ac:3d:2b:76:d7:40:26:f7:f2:
07:ab:5d:2c:80:55:80:ba:d2:90:36:73:95:bb:44:
22:56:56:dc:0b:64:3f:9b:0b:5f:30:7b:ec:ff:bf:
2b:0b:52:e8:05:7e:6a:a9:62:69:94:94:40:ea:2c:
f8:a0:73:40:b8:19:33:9e:23:50:83:e0:b2:e0:19:
44:5c:61:23:91:dd:66:bd:37:d0:22:97:32:84:84:
ff:50:07:d9:01:bc:b7:e2:0d:05:3d:46:15:d3:6a:
b6:ae:19:6c:ec:b3:53:a1:54:42:de:fe:61:61:ac:
60:e9:c0:dc:a9:44:5d:99:4d:33:f6:28:35:af:78:
83:7c:73:5b:e4:38:f4:85:46:0c:0c:2c:fa:88:df:
9d:7a:04:be:a4:52:e8:72:11:55:b6:91:a4:00:f0:
e3:e5:f1:1c:cd:18:4b:0a:89:b8:33:fa:6a:a5:18:
c0:24:39:86:fa:2b:74:25:5d:3d:b3:2e:08:c0:6a:
54:43:4c:4d:1b:fd:06:59:6f:93:21:5b:e1:4e:e1:
ba:86:c1:54:a5:ed:6c:7b:c6:fb:4a:36:76:af:90:
0a:c5:03:64:d4:45:6a:74:66:9b:06:58:9e:65:06:
1d:06:89:2e:9b:90:7a:b0:43:a9:d7:86:eb:3a:88:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:65:B1:6C:48:71:D3:80:47:3E:AB:E7:6B:EE:57:82:9E:EE:8F
X509v3 Authority Key Identifier:
keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:1f:5f:03:c1:a7:76:7e:53:f0:57:72:2d:7f:68:b1:f4:83:
00:92:99:50:08:be:c1:bc:65:83:50:fa:51:e8:41:a2:f2:13:
9e:59:9d:45:03:53:7f:c8:c9:38:8c:7e:df:84:94:98:18:16:
aa:b6:73:f5:16:89:c0:27:d3:d6:f9:57:4c:1e:0d:74:59:38:
37:72:7a:2f:88:f8:71:20:8a:35:50:c1:b0:18:fe:c1:c1:f7:
a1:ed:1b:ef:7a:4c:b1:ab:7c:41:76:91:a2:d4:18:dc:8a:57:
54:05:55:11:08:e0:a5:e1:7b:23:2a:32:88:10:d0:8e:91:10:
e8:64:c0:65:67:c4:51:41:0b:08:d4:52:b2:82:ff:51:22:5e:
c7:f8:e8:e2:8f:cf:70:9d:33:c1:42:82:fd:06:3a:ae:02:8f:
d1:e4:30:49:5c:7c:a4:12:13:13:e7:0f:39:8d:b7:99:01:a7:
70:0f:88:d1:84:11:f4:cc:a9:16:3a:c6:7e:dd:b6:e2:15:c7:
a1:67:a5:b3:98:8e:86:b3:6b:37:6f:ab:ca:b8:56:f9:09:06:
6d:8a:50:82:77:81:dd:5f:87:91:28:4f:fe:a4:3c:ce:01:26:
54:3e:7e:a2:da:5b:37:af:bc:58:a0:43:52:79:c1:5d:7d:31:
97:61:16:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:15 2026 by rpki-client