
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier: BEpGCxYkxvKV3BYKXtyEL/x7LIb9YQC+mRhbzWrSDgM=
Subject key identifier: 16:8C:B4:36:90:1A:6A:0B:99:DA:EA:9C:63:7C:88:58:8E:53:D8:93
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 089B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number: 0891
Signing time: Tue 24 Mar 2026 20:18:54 +0000
Manifest this update: Tue 24 Mar 2026 20:18:53 +0000
Manifest next update: Tue 31 Mar 2026 20:18:53 +0000
Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: c0nFcmQZXEUWLmmp6E9tJETVThkxZknK2slmiq/yJ/U=)
2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: 9TmPmA1+zthJxiNmUQ4CrTPbBg0Xhy5uru/BuqYwuPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Validity
Not Before: Mar 24 20:18:53 2026 GMT
Not After : Mar 31 20:18:53 2026 GMT
Subject: CN=69c2f1ae-532c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:bc:90:df:77:6a:d3:29:15:d2:e2:bf:da:
d7:cc:36:01:d2:4b:86:bd:d8:59:42:48:b9:8f:55:
75:d0:39:bb:c9:1b:07:d9:be:d3:7e:67:97:18:df:
b0:72:b2:8f:25:66:cc:3e:e7:87:3b:1b:6d:4d:b5:
72:19:0d:37:b8:3d:24:46:ee:95:50:7b:cd:e0:5e:
44:6c:a5:0d:1f:05:65:3a:56:97:18:92:06:a1:f9:
8c:81:9c:ab:5a:88:6d:ce:00:a9:f7:b3:25:37:07:
61:cf:0e:2e:ec:df:87:d9:cc:0f:8e:04:1f:fa:74:
32:d4:7c:d9:d5:84:0e:af:da:e2:e1:b4:27:74:6d:
30:31:42:0f:05:e8:5c:82:4b:9c:7e:4f:c4:23:79:
f6:12:b6:35:01:f5:2e:b2:fc:f3:ff:15:fe:a4:b7:
40:eb:7e:2b:69:38:2e:76:34:51:1c:be:0e:18:72:
6e:62:16:a9:6b:98:ca:97:b6:2f:aa:5f:25:b8:f3:
4a:a7:07:4c:13:9e:40:86:34:19:7c:e0:fb:87:f2:
d7:d7:24:f6:69:25:d5:a9:37:90:5b:91:67:d1:f8:
1d:8e:3c:20:93:06:36:73:19:b4:5d:33:21:73:c1:
77:a2:18:93:9c:38:b6:bf:2e:b4:41:d2:1d:d2:b6:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:B4:36:90:1A:6A:0B:99:DA:EA:9C:63:7C:88:58:8E:53:D8:93
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:fd:50:b6:64:b6:09:14:9f:f2:0a:6d:b1:cc:ee:1e:8b:cd:
2d:f5:08:d7:42:88:6a:f0:fc:ba:9e:d8:b0:96:e7:92:7e:3d:
a7:d1:8a:d4:47:a7:db:5c:99:42:28:02:b3:13:c2:0a:fc:a1:
99:ff:10:0f:e9:ab:b8:83:4e:e9:a4:e6:07:9c:d2:7b:ff:bf:
f4:d4:c5:98:f8:50:bf:07:4c:17:62:6d:52:a6:5d:c8:c5:63:
30:2e:48:27:ca:fc:23:11:cb:8e:63:ca:ae:d3:35:6d:34:fb:
9a:09:75:9d:2f:34:1c:97:8b:18:bf:5a:2f:04:82:8c:1b:74:
fc:80:32:17:75:6a:2f:8e:46:70:04:a7:e8:39:9d:4f:09:85:
22:7c:87:0c:71:4d:e5:82:03:4f:fa:93:bd:93:71:40:01:e3:
2e:7d:c6:81:8c:ec:6c:32:51:f2:22:aa:9c:e0:3c:40:04:76:
4d:15:1c:6c:1b:71:75:6e:62:4a:8a:e7:6f:f7:02:55:55:a1:
d9:2d:38:34:8f:4c:8e:07:6c:6a:99:fc:36:98:af:e9:92:f6:
cc:67:db:34:be:85:0a:1e:69:2e:5e:70:36:ae:67:b4:7b:30:
15:c4:99:53:e9:ac:9b:6f:01:13:aa:a6:99:11:c8:f1:d0:ab:
2d:66:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:58 2026 by rpki-client