
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
File: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json)
Hash identifier: TO9NvhK281LX23mabDElwxYU8P9SFOz+uvf1/q3Fox0=
Subject key identifier: 4C:AA:A7:62:83:0D:17:C3:6D:48:14:30:43:01:75:54:77:E0:77:5E
Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90
Certificate issuer: /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
Manifest number: EA
Signing time: Wed 25 Mar 2026 05:37:38 +0000
Manifest this update: Wed 25 Mar 2026 05:37:37 +0000
Manifest next update: Wed 01 Apr 2026 05:37:37 +0000
Files and hashes: 1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: GS+I3ToifxYmQAfyNZQyCH+dWZdQRvuUYVNdX2yBFy0=)
2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: u4mwNlgT9UA3emr1msxCItgQ3HwJ34nNspI4kxYnXPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl
rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590
Validity
Not Before: Mar 25 05:37:37 2026 GMT
Not After : Apr 1 05:37:37 2026 GMT
Subject: CN=69c374a2-7833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:39:38:35:06:f1:91:e0:ae:59:38:11:cf:
56:d0:e0:e8:a9:7a:29:2a:08:a3:aa:84:5e:61:dc:
12:e7:f9:60:93:80:e7:3b:f0:9f:8d:8e:8c:20:11:
01:26:1b:30:18:d8:d1:e2:4c:ad:08:03:60:58:6d:
e3:f5:38:0e:46:1c:6e:c5:20:27:45:ff:b4:d0:31:
68:9f:86:88:24:d1:46:9b:5d:6d:1f:10:be:62:0a:
df:9a:c5:90:c3:6b:d8:b0:99:00:09:f7:a3:0a:90:
f7:74:d9:b5:2a:e2:ca:70:d7:b5:b5:78:f2:a2:b4:
5a:c7:e5:0b:9c:21:b0:51:a2:97:74:57:c0:57:ab:
5b:4b:ab:70:32:c0:c0:e7:d8:83:e5:2f:04:1f:92:
35:c5:9e:f1:77:60:ac:51:0f:e8:b4:b7:91:aa:43:
55:1c:bb:f4:61:49:3e:d0:d7:96:82:c0:11:5e:b1:
23:ad:db:88:c8:6e:61:12:ff:6f:6f:5c:d8:59:21:
3e:74:92:4a:cd:71:8f:ee:96:b4:08:62:07:23:82:
9d:cc:2a:c4:77:23:ef:83:dc:8d:0a:16:4d:ed:8e:
db:3f:5e:23:ff:3d:42:af:2c:a0:6c:5f:ae:06:31:
c6:7c:61:f6:ae:aa:c8:8b:f4:81:9d:b7:10:ec:e0:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:A7:62:83:0D:17:C3:6D:48:14:30:43:01:75:54:77:E0:77:5E
X509v3 Authority Key Identifier:
keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b7:6b:a4:43:72:37:99:7d:cf:2c:8e:ac:7d:42:a6:27:34:
39:d8:72:4f:2b:14:b1:49:2e:9f:35:25:d6:db:c6:52:26:23:
09:93:4b:41:57:7a:18:e6:4c:6d:62:b6:24:47:e2:92:95:e7:
38:0d:86:fa:cb:7b:a7:6a:d2:91:1e:02:c8:e1:d1:ae:75:8f:
04:66:e2:aa:3f:b2:02:2b:1a:85:91:a7:31:52:48:24:d3:cb:
ba:e9:64:fd:01:08:3f:d9:26:f7:4f:6c:b6:a5:43:5a:76:2e:
c0:87:f0:2f:fd:1d:61:13:23:d0:93:48:d6:f9:30:0c:bf:23:
4d:fb:e8:b6:d9:51:37:52:c9:46:82:eb:9f:9d:58:ec:dd:0b:
1e:9c:cc:08:9a:f8:d7:37:4c:a7:23:4f:db:fe:e3:73:4b:a9:
9c:a2:76:eb:5a:0a:c8:be:12:16:9b:95:62:9d:4c:a8:ac:cd:
fc:c3:b9:29:f3:c3:89:b2:ed:36:bc:e2:bc:41:1c:7a:e2:07:
c2:a6:17:02:b8:2a:20:1c:c3:05:77:f7:82:fa:7c:fc:bf:88:
74:f2:e3:a5:30:af:73:36:3c:21:48:14:43:da:4a:17:e8:f0:
ed:0f:1e:c9:6e:65:04:cf:1d:9f:56:b9:7d:16:82:6c:08:c9:
d3:d1:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:07:46 2026 by rpki-client