
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier: 5FE5Sa4MZ3VajhnDYMtBg3epl9tERmy1SPau5x+425I=
Subject key identifier: 9B:5A:F2:B0:24:E5:A7:25:68:FB:AF:F8:EA:AD:C7:12:D9:32:C8:D5
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial: 1BE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number: 1BC9
Signing time: Tue 28 Apr 2026 16:17:43 +0000
Manifest this update: Tue 28 Apr 2026 16:17:42 +0000
Manifest next update: Tue 05 May 2026 16:17:42 +0000
Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: EFU8B/NeKzsUH6aKpgBqN9tVXvJJcE7zqJdDhI61V/8=)
2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 16:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7139 (0x1be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Validity
Not Before: Apr 28 16:17:42 2026 GMT
Not After : May 5 16:17:42 2026 GMT
Subject: CN=69f0dda7-2fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:c3:d9:44:2b:0d:fd:c3:1a:8a:70:9b:4e:
52:62:3a:a3:7c:40:cc:6f:d6:d5:94:a9:1f:39:ca:
01:97:d2:7c:bf:6d:92:6c:a7:53:ff:74:e0:7c:b0:
be:9a:80:2a:54:f4:82:85:d6:46:1f:90:b4:90:65:
da:f8:ea:e8:eb:df:6e:eb:a8:dc:fc:aa:6c:bc:ef:
f4:00:64:94:c8:6d:4f:bc:73:ef:4c:ec:15:a3:f1:
cc:53:83:3d:bb:fc:68:c6:3b:25:51:1b:e7:b0:2f:
ae:81:8a:39:34:ac:58:e4:4c:14:f9:60:82:47:fe:
0e:2d:6e:41:e9:3a:e3:fc:74:9a:72:5d:05:06:a0:
06:7f:92:9d:6f:a3:3d:9d:fd:46:b1:cd:42:85:1c:
ec:8d:47:67:e8:d2:5a:fa:b9:2a:3d:e4:83:01:0b:
c9:a9:df:5a:5e:72:ba:04:44:27:80:55:90:75:da:
a9:6f:14:10:bc:29:09:66:df:de:46:3f:bf:87:0b:
7a:d0:8f:f9:03:5c:e0:89:d5:8e:08:f3:3d:d3:f3:
96:3d:d0:49:48:40:2c:a9:0c:d5:4a:bf:10:32:f9:
64:7a:52:99:81:f0:ae:4b:67:b6:f0:e4:d7:82:51:
60:26:10:1d:d0:28:3b:91:a1:fa:e3:11:d8:56:fc:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5A:F2:B0:24:E5:A7:25:68:FB:AF:F8:EA:AD:C7:12:D9:32:C8:D5
X509v3 Authority Key Identifier:
keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f3:bb:91:7d:91:85:76:be:78:e6:51:7c:42:0a:7e:ed:e5:02:
aa:8f:0a:53:54:6b:53:87:ba:d1:f5:c5:b9:e4:f7:74:68:a1:
9e:9d:d5:65:0e:d3:77:87:47:03:53:fa:48:7c:1b:f8:c2:e8:
3b:00:50:75:06:59:2e:9c:94:1d:cf:15:e9:69:af:84:fa:05:
07:01:85:08:9f:77:bd:03:0a:d1:51:e6:aa:18:fc:d5:71:41:
1b:b5:ad:b4:fe:47:d4:81:df:05:38:dc:84:b2:4e:09:64:29:
95:12:66:9e:8b:52:06:16:5a:cd:ff:02:61:64:c1:34:97:0d:
7c:1b:c8:75:cc:ea:bc:4a:36:c8:b5:e9:8d:7c:00:cd:a2:79:
8e:3a:7c:64:81:60:29:1a:5b:b9:9a:04:47:96:2f:ca:e3:a6:
94:c4:c2:60:5c:48:04:39:8e:77:28:b0:e8:e3:af:7b:82:ec:
a6:62:94:12:b8:81:32:96:46:51:20:1f:b4:2e:ca:d3:f1:9d:
f1:10:c6:ad:b4:82:00:a4:f2:91:3c:60:bf:43:95:04:63:4e:
42:9a:a9:fd:82:93:0e:f4:eb:ef:5f:5b:b9:f1:f2:e1:b4:bb:
f9:f1:a4:4b:95:57:85:c2:fc:d6:1d:2b:b1:08:f3:56:5f:57:
70:9b:4b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 10:23:56 2026 by rpki-client