
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json)
Hash identifier: U7uMDXcf0YF5in12DHlJCUnQVEhzMxXZX+5k8j7hePs=
Subject key identifier: 6F:02:15:D1:26:8D:78:E0:5E:F3:31:44:A0:E8:98:6A:52:74:C3:DE
Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7
Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7
Certificate serial: 1256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
Manifest number: 124C
Signing time: Tue 12 May 2026 17:07:27 +0000
Manifest this update: Tue 12 May 2026 17:07:27 +0000
Manifest next update: Tue 19 May 2026 17:07:27 +0000
Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: qMVPymnHQYBRXBezqTGqGCSrb5KXlTPNPtR4WMUWxL4=)
2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: haDczAt/oRlo22edPz5C27xE4ffdwsxRT0uAhldT0vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl
rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4694 (0x1256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7
Validity
Not Before: May 12 17:07:27 2026 GMT
Not After : May 19 17:07:27 2026 GMT
Subject: CN=6a035e4f-798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:0f:3c:61:51:8e:3e:26:2b:ce:20:0f:b2:
60:7c:22:89:44:71:b2:3b:ad:db:c4:30:56:8f:c3:
b6:16:25:32:a3:4f:44:94:c6:80:eb:96:fa:bd:72:
b0:87:ea:ea:37:4a:64:a0:b4:d8:3c:f5:09:51:8e:
f8:61:4a:a0:9f:f0:ee:08:04:7e:d4:e8:2a:5c:0a:
73:b7:28:d0:1f:23:23:24:7f:e5:d8:5f:c6:98:7a:
00:63:96:a9:21:3e:86:bb:e4:fd:6b:c5:b7:2c:70:
1a:ce:1b:fc:bc:0d:db:96:43:22:4d:d8:38:23:ef:
6d:ba:81:0b:a5:00:57:89:e9:95:cc:46:af:b9:5f:
e1:87:7d:37:42:fb:fd:f8:bb:c1:78:78:88:0e:d4:
96:83:4c:55:50:b8:a7:dc:84:01:b8:1c:f9:43:cc:
1e:9d:d2:bd:29:b9:87:03:5c:93:ab:7d:eb:ea:e5:
af:de:db:81:57:18:92:28:88:a6:c8:70:20:14:b2:
a0:86:ac:d4:06:ad:ba:be:33:2f:92:c1:3a:43:4a:
b8:b2:c1:a7:52:9c:3a:9d:9b:0a:f2:28:39:ae:ba:
38:96:68:05:6b:1a:8e:5c:26:a5:1f:19:f0:ed:04:
e2:66:b4:ee:1e:11:0a:2f:90:cd:97:7a:45:0f:1b:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:02:15:D1:26:8D:78:E0:5E:F3:31:44:A0:E8:98:6A:52:74:C3:DE
X509v3 Authority Key Identifier:
keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:67:50:8b:87:a3:ed:80:ba:17:9c:6e:9f:85:48:b6:24:0a:
61:9b:0b:e1:4c:10:5f:25:52:c9:a1:fe:ae:53:ff:28:41:e8:
86:45:56:4e:c0:6b:d5:74:6b:35:d3:86:f2:5f:c9:a0:3e:1b:
2f:31:71:1a:6f:37:61:39:63:5a:7e:d6:03:51:36:64:f1:48:
b5:3d:c5:14:89:ad:b4:13:f3:1c:42:99:f2:03:89:cc:1c:f7:
18:ca:6e:e4:90:8b:74:94:9e:d1:b3:54:d8:7a:c7:4c:57:11:
f5:a2:e2:1a:e1:92:bf:8f:2a:ce:e3:15:b3:aa:4e:22:6a:4c:
16:12:66:e9:3b:11:01:77:1c:f7:73:a0:aa:de:a6:be:5b:c9:
3a:69:40:5b:91:05:96:ef:fe:4e:7b:cd:93:db:f1:b8:f3:f5:
52:b6:7e:2b:69:25:31:c9:ce:4b:58:7b:3d:ab:ab:0b:17:04:
e9:81:80:bd:21:3c:07:d1:14:50:3c:c3:60:8f:06:b2:8e:bf:
31:3c:7c:30:1b:99:af:40:5a:45:74:a6:67:d7:6a:ef:3a:92:
ba:10:72:3e:71:e5:a3:bc:d1:a1:35:b5:d5:59:93:da:75:4b:
1f:1c:8d:a5:c7:5c:72:c5:74:73:27:9e:b9:48:51:bc:09:e8:
08:44:2c:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICElYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4
NUI1MDBFQzcwHhcNMjYwNTEyMTcwNzI3WhcNMjYwNTE5MTcwNzI3WjAYMRYwFAYD
VQQDEw02YTAzNWU0Zi03OThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtNMPPGFRjj4mK84gD7JgfCKJRHGyO63bxDBWj8O2FiUyo09ElMaA65b6vXKw
h+rqN0pkoLTYPPUJUY74YUqgn/DuCAR+1OgqXApztyjQHyMjJH/l2F/GmHoAY5ap
IT6Gu+T9a8W3LHAazhv8vA3blkMiTdg4I+9tuoELpQBXiemVzEavuV/hh303Qvv9
+LvBeHiIDtSWg0xVULin3IQBuBz5Q8wendK9KbmHA1yTq33r6uWv3tuBVxiSKIim
yHAgFLKghqzUBq26vjMvksE6Q0q4ssGnUpw6nZsK8ig5rro4lmgFaxqOXCalHxnw
7QTiZrTuHhEKL5DNl3pFDxt15QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8CFdEm
jXjgXvMxRKDomGpSdMPeMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4
M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp
dzZOY2NCeUhaYWFGdFFEc2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk2dQi4ej7YC6F5xun4VItiQKYZsL4UwQXyVSyaH+rlP/KEHohkVWTsBr1XRr
NdOG8l/JoD4bLzFxGm83YTljWn7WA1E2ZPFItT3FFImttBPzHEKZ8gOJzBz3GMpu
5JCLdJSe0bNU2HrHTFcR9aLiGuGSv48qzuMVs6pOImpMFhJm6TsRAXcc93Ogqt6m
vlvJOmlAW5EFlu/+TnvNk9vxuPP1UrZ+K2klMcnOS1h7PaurCxcE6YGAvSE8B9EU
UDzDYI8Gso6/MTx8MBuZr0BaRXSmZ9dq7zqSuhByPnHlo7zRoTW11VmT2nVLHxyN
pcdccsV0cyeeuUhRvAnoCEQs7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 01:26:51 2026 by rpki-client