
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier: cC7Cgzq0JgxH2iV8GzRKrKMstdnv0tQuem03YjirEYI=
Subject key identifier: DA:57:19:99:8D:01:06:A1:11:0F:1E:8B:B9:7D:5F:78:E7:7B:74:C1
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial: 04F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number: 04ED
Signing time: Mon 20 Apr 2026 23:39:58 +0000
Manifest this update: Mon 20 Apr 2026 23:39:57 +0000
Manifest next update: Mon 27 Apr 2026 23:39:57 +0000
Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: B+D51J3hrLsfyMxiWrieAbszQ5L+3wvVT9WWNgnTNvI=)
2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: F+I43DaEg4RPjKbDgo7LbT/oq9DuBWqE4SqCTrHW1b0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Validity
Not Before: Apr 20 23:39:57 2026 GMT
Not After : Apr 27 23:39:57 2026 GMT
Subject: CN=69e6b94e-98ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:ae:22:4d:b0:de:2d:00:26:40:bd:6e:b3:
42:62:e3:e5:ca:b1:ee:0d:b4:4f:bb:a3:e4:40:8e:
df:9b:dc:6f:27:04:66:78:bd:92:02:59:5c:1d:5d:
19:e3:7d:2c:c2:67:df:5b:e8:e4:37:49:02:13:0f:
92:1f:f0:96:40:3d:65:80:3e:76:35:22:c2:b0:be:
b8:2b:25:12:a8:ee:52:27:40:a6:26:77:9c:f5:dc:
de:3d:6a:9f:59:54:df:bf:ac:b3:2b:a8:0d:e8:ac:
72:10:0c:f0:25:4d:99:f0:b2:2c:48:48:a4:3e:9c:
88:bc:d9:01:48:59:5b:b0:8a:34:5e:2c:ff:ae:a5:
52:a2:d3:81:e1:c4:33:f6:69:fc:76:96:d4:1e:08:
cc:94:85:01:a3:b7:3c:b6:9c:8b:7b:40:68:66:22:
17:32:d4:66:cc:98:d0:7f:89:bb:b0:8c:7b:2e:26:
5f:6f:b7:4f:96:c5:12:5c:3b:fb:b9:5f:41:81:52:
6b:8d:d6:a6:ca:c6:2c:88:01:a3:96:93:f3:34:d8:
61:38:83:92:e2:0f:0c:5d:12:f3:c4:9e:6d:ea:04:
19:05:49:8c:96:ec:01:68:06:45:02:d5:0d:ee:f8:
5f:45:3c:80:5b:b8:b5:a1:b4:59:fc:8b:59:f0:6b:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:19:99:8D:01:06:A1:11:0F:1E:8B:B9:7D:5F:78:E7:7B:74:C1
X509v3 Authority Key Identifier:
keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:51:69:a1:a5:fc:30:3a:7b:b4:e7:e9:5e:9f:c3:d1:8c:92:
02:36:b4:85:22:69:48:1b:1e:bc:07:98:21:89:96:e6:1b:b7:
16:8a:f0:25:95:90:86:df:70:f2:2e:4a:fd:29:de:ac:a1:3e:
30:75:27:0f:f1:76:46:d9:d4:21:7e:fb:7f:31:cf:c0:a0:cd:
8c:8c:62:bc:b2:76:14:34:df:a5:68:4f:ea:c0:f6:85:79:78:
6c:04:e7:d0:c9:6b:25:63:39:ae:ca:ec:fb:cc:df:9f:45:c9:
28:55:f1:a6:63:f5:fb:ef:2c:d2:8c:ac:5b:26:9e:8a:76:2f:
89:a6:5f:83:fb:02:ec:e6:d4:04:0c:b5:54:47:f6:86:00:dd:
96:70:d2:43:5f:a2:75:e8:cc:30:1a:56:25:0b:44:fc:b5:3e:
61:fc:6c:5b:63:c2:86:0d:fa:ff:0e:e0:9b:04:44:26:e0:27:
9f:28:7e:82:7b:36:4f:e0:ef:8a:97:c8:48:06:e9:0e:6b:7e:
8d:5c:93:8f:ea:92:a9:34:f6:21:aa:96:29:20:93:63:04:05:
7f:39:af:ca:40:fe:f4:3e:15:fc:90:19:9b:2c:b5:80:45:17:
75:f3:3a:36:24:9c:45:ce:79:a7:fd:f8:6b:ac:78:92:bf:55:
0d:82:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:00:11 2026 by rpki-client