
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json)
Hash identifier: gojM3eMNIICaRkgHYL4Zcyo8lPqayPWCt1LcNS/F948=
Subject key identifier: 6D:A5:E1:B1:6D:11:B8:15:56:1F:19:30:CC:50:C3:BE:98:70:AC:B5
Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Certificate serial: 0465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
Manifest number: 0451
Signing time: Sat 04 Apr 2026 23:59:08 +0000
Manifest this update: Sat 04 Apr 2026 23:59:07 +0000
Manifest next update: Sat 11 Apr 2026 23:59:07 +0000
Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: TTLmvrx+DnY1RamGz/dV/BmgzeDxKtkzgjUSoJTFC5Y=)
2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: KtIufux/j8uZsLjUbLPfpnJOkVL/4Ue5N16JttxJrtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Validity
Not Before: Apr 4 23:59:07 2026 GMT
Not After : Apr 11 23:59:07 2026 GMT
Subject: CN=69d1a5cc-4470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:b2:f0:7b:2e:d8:b5:ee:da:f3:f4:92:08:
f3:a9:9e:c4:04:bf:1d:e4:30:6f:db:31:6b:f3:21:
81:27:2a:83:e8:8f:98:e4:34:63:4c:7c:31:25:e2:
60:18:44:83:7d:7d:76:70:c4:02:84:0e:ca:3a:f7:
73:6f:4a:91:89:ff:90:05:c2:0e:aa:97:c4:ea:7a:
f7:df:58:d9:3c:fd:8c:a8:39:93:1f:b1:70:08:25:
5f:c5:87:a0:16:0d:2c:61:f3:7e:f4:09:7a:ac:a4:
b5:8c:04:d9:28:9f:53:1f:0e:cb:33:47:c1:09:f5:
23:60:e1:ae:0e:93:5f:a3:c4:5b:75:e8:f8:17:2c:
eb:72:f5:94:c2:d3:ab:9b:c0:bb:af:7e:33:31:aa:
76:b9:e3:bf:2e:dd:d0:fc:cc:48:2b:bb:d7:8a:57:
d7:e7:33:f8:45:5a:cf:ff:6a:77:de:a6:e2:3f:86:
3e:65:d5:9f:39:bb:58:25:34:d8:62:fb:e9:94:b5:
49:f5:22:b2:cc:35:c1:bf:d2:12:1d:00:18:c5:6b:
91:93:5f:22:97:5b:41:c2:91:65:f5:71:33:61:93:
3b:ea:f0:c8:9c:f8:70:82:02:77:f1:2c:06:33:84:
69:69:d4:42:6d:7d:76:4c:b8:67:0d:18:67:7f:e8:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A5:E1:B1:6D:11:B8:15:56:1F:19:30:CC:50:C3:BE:98:70:AC:B5
X509v3 Authority Key Identifier:
keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:af:26:29:50:72:19:bd:b5:48:50:84:d8:44:c2:2e:d1:7d:
25:87:20:af:39:fc:17:df:3a:35:51:4b:dd:86:bc:00:ac:c1:
d9:66:63:48:00:bc:03:37:ea:e5:aa:59:68:78:85:0c:b2:d6:
2f:50:b3:16:21:63:db:a1:78:87:46:cf:f5:b4:5e:39:6f:bb:
30:b0:af:2e:4e:f8:e1:cf:3f:97:8d:39:ec:c4:9a:8b:ce:0d:
fd:e3:fc:ea:dd:13:68:ab:27:11:ba:bd:58:35:fa:1d:14:85:
e1:72:f7:b1:ab:cc:26:b8:34:eb:a6:b4:c9:9a:46:9a:bf:2b:
e0:b3:66:3d:9e:50:e7:f9:13:a8:ce:d6:4e:23:13:c3:b1:0e:
59:a6:17:44:6b:a8:61:ad:4d:86:2a:d7:4d:62:33:ce:b7:ef:
6a:f3:c8:26:ed:34:78:e9:19:0f:89:c4:f0:cb:6f:41:1d:d3:
e0:ec:f6:49:19:f3:db:a1:6b:5d:0d:f3:8e:83:33:49:6a:05:
b7:95:d3:96:0d:34:a3:0a:32:f9:8e:84:51:73:f6:de:30:bf:
4e:bc:e1:14:10:b7:ab:04:f0:a0:af:eb:b6:fb:64:d5:17:b7:
e9:db:b8:d3:a9:5f:dd:50:7e:a5:ce:57:96:d9:29:90:40:b3:
06:35:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:46 2026 by rpki-client