
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier: dIlZfGUaxuz//ykJPwjpkdyGIFAOx+PwybPgB64WQzs=
Subject key identifier: E0:B2:CA:9A:B2:58:EB:17:17:53:7C:6F:1B:F1:B4:09:CF:DA:17:14
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number: 02B7
Signing time: Sun 15 Nov 2026 01:45:48 +0000
Manifest this update: Sun 15 Nov 2026 01:45:47 +0000
Manifest next update: Sun 22 Nov 2026 01:45:47 +0000
Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: PqwkW6HV2dIT/GpTfxOGRpdEnP630glsZm26lnhnHKE=)
2: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=)
3: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=)
4: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Validity
Not Before: Nov 15 01:45:47 2026 GMT
Not After : Nov 22 01:45:47 2026 GMT
Subject: CN=6af90ecc-73cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:77:d3:d8:f5:cb:87:b1:72:be:78:e8:5a:
a3:22:02:d5:5d:f9:19:c5:46:13:3f:7a:a2:e9:b3:
9a:52:7a:5b:2f:95:69:67:7e:c5:f9:ce:41:39:1a:
b4:67:ff:a8:b3:c5:81:f2:76:cc:f2:8d:d7:6e:2d:
67:43:d3:25:82:21:2b:bf:5c:a0:e6:7b:11:5b:d0:
8b:7d:e8:74:8c:54:93:4a:35:6b:54:58:90:88:d2:
12:65:e7:3a:b5:9e:8a:3d:f8:99:48:23:0d:35:c5:
3f:e1:c5:a5:0a:49:87:c1:99:82:49:b9:44:e7:8b:
91:4a:f4:c0:e7:2f:b0:8f:a4:97:64:06:36:c1:fe:
54:ce:fc:3a:db:66:25:3e:56:50:b1:ef:bb:91:e0:
b1:cd:4b:34:96:fa:f6:40:03:3a:df:fc:d6:43:35:
10:e9:6e:48:d6:46:1d:8b:ee:4e:45:d6:c1:ce:c1:
5c:29:19:a9:e9:10:31:8d:73:16:9a:d3:e3:75:0c:
7a:5a:a7:48:b5:61:81:b4:d6:56:15:ee:bb:ab:8f:
62:f4:90:25:9e:76:03:d5:c2:35:e6:db:2f:92:ca:
f1:64:34:78:ed:fb:da:d9:fc:b8:b9:02:f1:99:55:
6f:5e:7c:22:aa:e7:d1:5a:46:81:a8:dc:2e:11:7b:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B2:CA:9A:B2:58:EB:17:17:53:7C:6F:1B:F1:B4:09:CF:DA:17:14
X509v3 Authority Key Identifier:
keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:09:78:ff:99:80:97:75:1c:bd:1a:ba:53:19:60:7b:3c:
11:15:bc:dc:0a:a1:ff:87:b6:c7:bb:28:1c:b6:0c:c7:8b:f3:
f3:23:af:79:f5:29:a8:48:0e:db:b4:4a:a8:15:10:ea:dc:74:
80:2a:14:51:25:30:2d:f7:20:93:cd:a6:01:87:31:db:be:9f:
bc:e1:87:40:10:9d:d0:86:b8:8f:4d:8f:bb:6b:f4:c3:47:f8:
e0:ff:a6:76:a3:85:5c:a8:54:c8:02:57:aa:42:cd:d3:30:e8:
a9:b5:ff:eb:10:f7:99:21:43:49:33:b2:62:e8:9d:f2:6a:d5:
dc:81:b8:0a:51:63:65:12:91:45:38:73:e9:c2:ba:8f:6f:c4:
f5:fa:de:91:2d:1f:d8:da:4b:4f:e1:65:26:53:3c:6f:df:f8:
13:f4:58:f5:1b:bf:1d:b0:6f:2a:e1:d8:ef:fc:b0:89:cb:75:
90:7e:55:e9:b0:ca:24:5e:0b:74:15:af:b3:f7:c8:ac:ae:89:
fe:7e:e4:2c:fb:d5:f4:15:a0:36:7b:7f:20:76:1d:f8:c1:dd:
1d:ea:ea:a9:de:18:9e:ca:7e:6e:6f:da:dc:bb:a8:46:32:35:
f2:42:87:10:17:eb:66:7c:34:cc:7d:25:cd:6e:25:3f:76:a4:
25:5f:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:39 2026 by rpki-client