
$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File: QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier: CDsyDmfU/7nzLs+HIZMTwFGrMBXcqcKHpGzzZiHAPQg=
Subject key identifier: 02:98:66:A5:C9:1B:4E:2F:C4:1D:84:11:08:D2:3D:D9:F2:E7:72:62
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer: /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number: E5
Signing time: Wed 25 Mar 2026 05:42:17 +0000
Manifest this update: Wed 25 Mar 2026 05:42:17 +0000
Manifest next update: Wed 01 Apr 2026 05:42:17 +0000
Files and hashes: 1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: XzFX5ECAiu+Sh1rC5eFV+ZKsuHecYNePYCdDb7xDPqE=)
2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: tykKMCNyhL8YIODSIbVTOG4k2NzgIkvRLrrP9k8uYXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Validity
Not Before: Mar 25 05:42:17 2026 GMT
Not After : Apr 1 05:42:17 2026 GMT
Subject: CN=69c375b9-0c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:80:21:f2:71:93:30:5f:70:73:0a:f1:90:
7d:9e:07:6a:4e:eb:88:26:49:21:5a:be:6a:51:95:
83:e9:4c:b5:ff:8d:7a:d3:67:04:6d:b9:34:b9:29:
76:83:c3:39:bc:54:4b:7a:d9:f0:ac:fb:5a:9c:58:
7a:5d:50:e8:d5:e4:2b:64:01:63:e3:94:a9:bd:b7:
87:66:b0:cd:7a:8c:7f:80:4c:e6:59:e0:09:e8:19:
ce:87:95:dc:2d:30:c5:94:58:63:e4:7d:7b:44:89:
00:73:49:e8:8e:0f:cd:21:7f:c4:97:ee:d7:e4:1d:
74:b4:a7:93:fb:ef:f3:9e:c4:03:f9:fe:a8:ac:b3:
4b:fd:02:69:eb:9c:67:f0:16:76:a9:bb:e8:a9:06:
81:ee:1d:f0:49:4e:6b:7b:17:34:1e:57:bc:1e:77:
42:23:a1:e1:31:6d:32:86:55:ab:75:2e:ec:9e:74:
6e:04:72:22:5c:9d:51:c9:2a:f8:45:e5:b2:24:6e:
fe:a2:48:0b:66:89:b5:b8:47:34:7d:ca:84:78:b4:
1c:35:19:ff:31:ea:8c:ba:07:a2:89:36:e3:62:c7:
ea:4c:0f:51:6d:36:4b:9b:44:55:0d:89:f5:a0:c1:
e2:90:5b:8d:7b:89:61:bf:9f:d2:84:2a:35:b0:97:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:66:A5:C9:1B:4E:2F:C4:1D:84:11:08:D2:3D:D9:F2:E7:72:62
X509v3 Authority Key Identifier:
keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6d:6f:73:5d:93:13:2d:f1:1e:d7:9c:3d:5f:e8:69:ef:b1:
d5:8d:4a:3c:26:a7:3b:40:24:20:6c:b7:c9:3e:c3:a2:83:f8:
6a:12:52:3d:ae:fd:19:cc:9c:1f:9a:26:53:0a:4f:42:1c:0d:
9e:8f:76:de:c5:cf:09:c8:c2:74:22:e0:51:eb:85:b5:aa:05:
3a:b9:75:08:af:2b:97:bd:65:30:f5:0b:74:a3:98:49:d6:5a:
2f:71:e2:69:a6:a5:31:7f:07:75:64:30:84:7c:9c:e0:0e:36:
38:ad:08:9c:e4:68:2d:75:10:8e:c1:ed:50:55:10:65:5f:4f:
d7:ab:2c:c4:4a:e4:3f:d7:e8:21:7c:02:26:4b:27:cf:33:b7:
d5:e0:13:3c:9d:0a:16:d7:b4:67:46:7e:5b:f7:64:09:76:ee:
10:6e:04:39:74:67:38:61:7b:65:08:5e:98:07:4a:97:a6:bd:
68:50:3e:56:34:81:e0:0e:1d:d6:44:d4:1c:5b:48:c8:55:18:
4b:ad:e6:6e:41:26:cf:54:bc:f4:a8:45:0e:4d:4e:43:a3:31:
21:3c:04:4b:a7:2d:85:67:91:a7:f0:c4:10:28:f9:3e:41:0d:
f3:6b:7b:3e:ce:ad:96:ee:95:df:38:bf:91:ee:2a:a6:d8:5f:
48:93:ff:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:53 2026 by rpki-client