
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier: x+7ehLi5tdFCe3RJENoxbvuBXpoxNYkqKi1Q3rK4hqQ=
Subject key identifier: C7:F3:59:D5:1E:EF:22:5B:85:06:CE:E2:BB:32:E7:33:B9:85:50:EB
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial: 07CC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number: 07C1
Signing time: Tue 24 Mar 2026 19:07:17 +0000
Manifest this update: Tue 24 Mar 2026 19:07:17 +0000
Manifest next update: Tue 31 Mar 2026 19:07:17 +0000
Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: gUE3CGvzWbMRj/UeID8q4Y6y8IJv0uWHe52n46AAnPg=)
2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: c7jY30a9dJukguRUt1oXhwvjqaK7nWMN1x9vvGobLv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Validity
Not Before: Mar 24 19:07:17 2026 GMT
Not After : Mar 31 19:07:17 2026 GMT
Subject: CN=69c2e0e5-1cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:68:66:94:b8:c9:09:b8:69:2b:6e:41:21:
08:22:2b:00:1c:6a:74:01:f6:66:36:de:d8:46:9c:
ba:40:55:19:d9:20:34:36:c2:75:0b:af:ab:65:77:
16:55:30:88:d9:f2:35:c6:f8:b1:e0:e2:14:24:9c:
60:ee:5d:68:13:b5:08:2c:31:72:64:88:83:bc:52:
de:20:ec:56:9a:c1:be:18:9b:af:74:4e:88:03:23:
bb:a2:2e:25:09:69:4b:9a:fb:e2:92:bd:0a:c9:17:
85:1f:98:a0:2f:54:ed:47:25:cc:fa:3a:40:a6:9d:
67:c9:00:f5:a4:47:d6:62:8e:b8:3d:5b:5c:76:0f:
83:20:08:65:19:24:0b:5d:62:32:21:d7:e4:a3:16:
de:6b:3c:00:6c:5d:cb:65:48:30:51:0e:66:e7:06:
85:c7:00:a6:2b:5a:6b:cc:e4:3b:78:90:2c:ca:78:
93:51:f2:bb:cb:97:a9:5e:7d:e0:60:17:32:ea:86:
19:cd:de:a8:4e:f7:48:51:47:d2:97:27:5e:3d:c0:
32:7a:2b:17:1a:6f:80:05:05:82:53:cf:f0:21:6e:
34:0c:e2:c3:45:ab:7e:8b:30:18:70:a8:c8:f4:3f:
88:e8:1d:3a:ef:44:d6:52:f0:28:35:dd:ca:33:69:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:59:D5:1E:EF:22:5B:85:06:CE:E2:BB:32:E7:33:B9:85:50:EB
X509v3 Authority Key Identifier:
keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:ee:9e:7f:7f:f6:0c:04:4d:c7:f4:3d:42:97:a2:4a:24:9c:
b0:56:6d:c6:42:b5:b2:00:8f:97:db:4f:eb:50:44:eb:68:05:
f8:88:54:9a:51:18:43:02:ca:12:5d:9e:eb:5f:90:3d:5b:8d:
be:3a:54:83:12:be:99:85:33:53:21:b6:39:ab:92:e2:a3:86:
f6:7b:d6:50:88:8b:68:14:99:65:88:d6:16:ad:74:ab:d4:0e:
c7:52:9e:6b:da:95:03:f1:a5:e7:fe:3e:5d:55:3f:94:ad:83:
4e:bd:58:ac:0d:8d:3b:c4:13:08:87:55:3e:c5:66:4c:38:cb:
f0:d6:12:03:e6:de:f4:99:19:a4:b7:41:1d:41:65:9e:8d:73:
59:d8:30:07:0d:b0:6c:53:05:22:8e:80:51:2d:44:b5:f9:49:
01:bc:f3:ad:92:23:15:5c:1e:90:15:09:65:e7:ac:0b:58:35:
76:0b:6b:ea:d2:5b:b3:25:55:0b:09:c7:8f:97:f0:38:7d:2a:
10:97:03:eb:48:db:b7:6c:76:d3:6b:50:b9:b1:37:fd:41:0d:
19:8c:90:66:dc:14:0f:64:2f:f4:6a:bd:e8:4b:58:86:46:9a:
0e:77:66:9d:c8:b5:16:c8:bf:d4:be:7b:67:81:90:f6:a8:46:
07:44:71:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx
NUM0QjUyMDkwHhcNMjYwMzI0MTkwNzE3WhcNMjYwMzMxMTkwNzE3WjAYMRYwFAYD
VQQDEw02OWMyZTBlNS0xY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTtoZpS4yQm4aStuQSEIIisAHGp0AfZmNt7YRpy6QFUZ2SA0NsJ1C6+rZXcW
VTCI2fI1xvix4OIUJJxg7l1oE7UILDFyZIiDvFLeIOxWmsG+GJuvdE6IAyO7oi4l
CWlLmvvikr0KyReFH5igL1TtRyXM+jpApp1nyQD1pEfWYo64PVtcdg+DIAhlGSQL
XWIyIdfkoxbeazwAbF3LZUgwUQ5m5waFxwCmK1przOQ7eJAsyniTUfK7y5epXn3g
YBcy6oYZzd6oTvdIUUfSlydePcAyeisXGm+ABQWCU8/wIW40DOLDRat+izAYcKjI
9D+I6B0670TWUvAoNd3KM2nAWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfzWdUe
7yJbhQbO4rsy5zO5hVDrMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF
ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o
OUV0cTh1OC00UmdWeExVZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUu6ef3/2DARNx/Q9QpeiSiScsFZtxkK1sgCPl9tP61BE62gF+IhUmlEYQwLK
El2e61+QPVuNvjpUgxK+mYUzUyG2OauS4qOG9nvWUIiLaBSZZYjWFq10q9QOx1Ke
a9qVA/Gl5/4+XVU/lK2DTr1YrA2NO8QTCIdVPsVmTDjL8NYSA+be9JkZpLdBHUFl
no1zWdgwBw2wbFMFIo6AUS1EtflJAbzzrZIjFVwekBUJZeesC1g1dgtr6tJbsyVV
CwnHj5fwOH0qEJcD60jbt2x202tQubE3/UENGYyQZtwUD2Qv9Gq96EtYhkaaDndm
nci1Fsi/1L57Z4GQ9qhGB0Rx4w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:36 2026 by rpki-client