
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json)
Hash identifier: sURPA/Z2FT1ZENxdqIw4yvCkx3LtVv8r19Sm63j2Icw=
Subject key identifier: 5A:1F:8E:05:63:54:D5:2B:C3:A8:94:18:3D:CD:50:2B:31:C9:7A:12
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial: 035F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
Manifest number: 0357
Signing time: Sun 05 Apr 2026 00:41:23 +0000
Manifest this update: Sun 05 Apr 2026 00:41:23 +0000
Manifest next update: Sun 12 Apr 2026 00:41:23 +0000
Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: 6U0r6X4uCj6B3QokNE1ft7HGR4vbYoY2zdCjHUWQcpg=)
2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: tyV63/6XwWHMEnlVNrZpKRUTH+qgqLOvrBf/JcSlvnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503
Validity
Not Before: Apr 5 00:41:23 2026 GMT
Not After : Apr 12 00:41:23 2026 GMT
Subject: CN=69d1afb3-058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:0b:ce:e1:41:49:0c:1d:dd:93:7b:92:09:
60:7d:64:10:6a:f2:5e:37:86:97:c8:b7:9e:51:20:
53:04:54:b7:de:26:b9:24:c1:72:27:41:65:b4:fd:
15:46:5f:80:bf:a1:47:e0:c1:39:15:e8:71:b1:a6:
58:8a:71:85:cf:bc:05:b2:0e:1f:10:90:16:1c:cb:
a2:17:56:0f:b4:fb:98:b3:1f:11:54:26:3e:c9:b6:
09:27:da:c3:9d:5e:0d:da:73:9c:a1:18:4f:69:24:
fe:f2:07:47:b9:8f:d0:dc:8e:39:2a:72:93:02:de:
22:01:38:c7:c5:1b:99:12:7c:29:b2:b0:1f:b6:61:
45:10:a3:fa:a1:90:e2:e7:da:8b:c5:88:a9:43:db:
1d:f6:18:2e:34:b0:e8:33:54:1c:63:f3:1e:d3:1f:
8c:02:12:1f:b2:20:20:25:2e:93:53:73:6e:63:61:
1e:99:65:e1:39:27:e6:21:8d:26:62:e2:24:c1:1b:
3a:88:d3:13:4b:1e:92:e6:30:28:0b:de:e6:b3:7a:
49:3a:ac:83:f0:bb:22:aa:b9:21:a8:6b:96:ff:f4:
c4:8c:b6:13:fb:00:82:85:54:08:22:15:06:14:fc:
35:5b:4a:1f:73:b3:0a:6e:86:cd:d2:ed:3b:18:1f:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1F:8E:05:63:54:D5:2B:C3:A8:94:18:3D:CD:50:2B:31:C9:7A:12
X509v3 Authority Key Identifier:
keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6f:1f:8e:df:c1:fd:5f:d7:53:dd:04:b0:12:5f:83:ce:20:
92:89:07:74:20:a1:60:5b:77:65:66:4a:2b:05:bc:f5:8b:b0:
3c:28:ad:7a:5b:d2:19:6d:fb:05:2a:74:a2:a6:fd:52:8f:7f:
3a:b7:8c:44:f3:b2:5e:2b:a8:11:01:f4:cf:80:ae:0f:79:fb:
5a:33:ec:5c:2f:41:c9:95:10:67:cc:7d:b9:d5:e7:19:98:f7:
f2:b4:58:fa:45:be:fe:ef:fa:e9:9b:70:ac:ea:56:02:30:28:
76:99:a2:be:a8:d1:8a:cb:d7:b0:54:4c:ad:ad:5c:21:2c:8e:
38:9e:ab:59:2f:50:62:1e:8e:8a:74:6f:83:d4:e4:5d:a9:0e:
eb:2e:36:03:db:62:63:d4:fa:2f:df:6a:ca:b7:aa:c9:69:32:
e2:b0:21:51:f3:19:66:1c:b1:3b:e0:fa:39:74:6c:59:8b:45:
d3:a3:25:64:85:ac:20:4e:07:f7:e6:0e:38:59:92:5b:33:3a:
d8:fd:33:b3:69:59:74:bb:72:25:f9:6e:5f:5f:e7:b7:78:cb:
2a:69:35:04:11:70:69:1e:cd:ba:30:fa:d4:02:41:0d:0b:94:
e9:f1:fa:71:ce:46:88:67:b4:ed:a1:ee:c9:df:d4:a0:3c:8d:
63:0a:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:53 2026 by rpki-client