
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
File: QidVkJNLMeOdgd28nAmFa39OWIQ.mft (raw, json)
Hash identifier: 7zvROmbPRbG5tG/vGBXtwC3LKeB4kFms91g1gPOCcRQ=
Subject key identifier: 2C:D2:C7:A8:AF:5B:71:20:1C:53:BF:0B:71:63:1C:EC:46:72:3F:BA
Authority key identifier: 42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
Certificate issuer: /CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
Manifest number: 028D
Signing time: Sun 05 Apr 2026 01:17:25 +0000
Manifest this update: Sun 05 Apr 2026 01:17:25 +0000
Manifest next update: Sun 12 Apr 2026 01:17:25 +0000
Files and hashes: 1: QidVkJNLMeOdgd28nAmFa39OWIQ.crl (hash: 1jxdhPOSLBTx7NK+co+eAz7I54GYVDor7CPZYrfgYIo=)
2: 754A1888490D11ED95C7C86EC4F9AE02.roa (hash: Qahj6ijZlV0ENHSi7W3OwZGiJhU6W6dxMtqWIMdxIl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC009, serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Validity
Not Before: Apr 5 01:17:25 2026 GMT
Not After : Apr 12 01:17:25 2026 GMT
Subject: CN=69d1b825-4a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:17:63:38:38:81:4b:a7:42:c6:4b:66:cc:
07:d7:e8:8c:02:ab:5f:48:c3:ea:5c:36:dc:36:61:
52:a9:ba:0c:0d:aa:b5:61:65:44:4f:f3:18:be:98:
3c:3d:22:43:f9:10:02:7e:d3:92:68:8b:12:30:35:
4d:24:ab:ac:02:09:8f:dd:d0:44:a9:38:fa:e7:03:
52:a0:fe:7e:61:9a:59:b7:5c:40:17:3a:8b:79:f9:
4c:20:cf:45:62:05:7a:56:5a:4c:88:61:f1:f9:f9:
7b:e5:69:bf:e4:e1:77:44:9a:ad:85:14:a7:da:a7:
8f:6c:20:34:ad:5a:03:35:4b:52:b3:e8:1c:52:db:
d1:5f:6c:3b:56:ff:ff:fe:08:8f:d9:71:b3:4a:b2:
71:58:61:64:15:e5:bb:e4:18:30:9b:49:af:7b:2f:
1b:c2:19:a1:e5:a5:ed:60:85:a6:a8:03:ce:aa:63:
b8:af:ee:9e:c8:53:f1:2a:2c:58:2a:ee:7a:db:c7:
40:bd:74:e5:75:c3:f0:48:ec:4b:33:05:11:89:ec:
44:93:61:86:13:bc:50:3e:69:53:fc:29:15:68:1a:
11:80:14:78:4a:97:5a:80:8d:b6:a8:6c:cc:d0:b0:
ec:83:f2:3a:c8:b2:12:4c:61:5c:b0:ff:8d:13:f3:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:C7:A8:AF:5B:71:20:1C:53:BF:0B:71:63:1C:EC:46:72:3F:BA
X509v3 Authority Key Identifier:
keyid:42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:dd:9f:de:1e:a9:b9:ee:52:7e:cb:b1:c5:bb:bd:59:a0:
38:a7:92:d2:1f:7e:c4:21:b3:9e:ff:83:d5:5c:aa:95:9d:c2:
a7:1d:ec:14:f1:76:10:8a:ab:92:08:cc:d5:90:7a:1f:94:5d:
e0:8c:1f:43:3a:2f:a0:db:a9:44:f7:80:6d:13:e4:05:a2:25:
0f:4a:fe:72:8c:ad:fa:a4:20:8e:78:2e:ac:a4:fd:06:e0:c3:
2f:05:3d:d0:f8:c6:4f:15:5a:0b:ed:5d:21:b6:25:54:74:54:
ad:50:7e:e0:c3:da:70:02:97:f2:f3:27:82:98:57:b5:fc:f7:
9b:b5:94:56:18:1c:ec:27:c8:67:d7:66:3e:fd:c1:cf:ef:8b:
a2:21:cb:c2:a8:36:cc:36:5e:70:8d:d8:9b:0d:d7:50:9d:92:
47:a3:34:80:da:eb:09:4f:4c:9d:c3:32:dc:d2:4b:b5:e3:e4:
5b:6e:8c:61:d4:d4:aa:2f:70:54:8e:fe:bf:2b:e6:22:e0:81:
8d:12:b9:d0:dd:09:5f:27:b8:cf:52:29:7d:bd:b3:a5:49:22:
fd:ca:57:ea:6f:e6:5b:c9:ac:17:b4:02:49:52:ce:90:b5:a1:
5d:fa:fd:25:18:ae:0f:90:9c:a0:bc:f5:1e:6a:38:eb:9a:b4:
57:66:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:34 2026 by rpki-client