
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json)
Hash identifier: 6VETi3hLFU1yLHSQmzOA20J+ukTlLTcXGh5E157Ler8=
Subject key identifier: 64:2D:60:49:74:35:35:AA:0E:48:B4:30:05:D3:79:4B:64:0D:6E:88
Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
Manifest number: 87
Signing time: Wed 25 Mar 2026 06:53:37 +0000
Manifest this update: Wed 25 Mar 2026 06:53:37 +0000
Manifest next update: Wed 01 Apr 2026 06:53:37 +0000
Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: GnyGKo9GcVf8/34doUF3+ysR7uiTdvKTF6/WoYMu/ao=)
2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: ho1DZ3ql7FH8KEvSw9jHcuNGeNUnpqTSi1kUFzWjPnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Validity
Not Before: Mar 25 06:53:37 2026 GMT
Not After : Apr 1 06:53:37 2026 GMT
Subject: CN=69c38671-2381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:9e:6a:9a:c2:d7:b9:a6:e5:31:61:cb:44:
00:71:da:52:ad:05:dd:22:4c:6d:aa:dd:5c:14:bb:
86:b1:04:94:4d:60:ad:cb:a0:af:59:16:ca:a6:9f:
5d:2f:f6:cc:c9:b9:6e:64:d4:74:ea:89:f7:de:72:
96:74:71:da:f9:83:e8:03:c5:c0:7d:8b:59:6a:e3:
08:a1:84:c5:6a:a6:66:37:4d:d4:da:7c:b6:4d:88:
47:bf:19:ba:c9:5e:0b:e7:f2:a8:8e:d2:f4:b4:66:
07:b9:ef:d4:b7:68:7c:21:6e:73:b6:c8:24:14:70:
2c:85:33:07:77:eb:a7:ff:21:3d:da:d8:a8:5a:d1:
38:46:05:b4:7e:5d:5c:0b:c3:31:2b:38:ad:1c:85:
d5:fb:87:0a:11:88:09:92:26:a4:89:f3:c1:1d:bc:
df:17:f3:1e:5c:33:46:26:52:3c:2f:f4:cb:13:9e:
b4:66:61:c4:39:eb:84:18:25:bf:da:de:47:dc:09:
db:5e:84:4a:69:11:70:fb:c4:e1:c5:6b:2e:a9:58:
73:35:ce:9c:1e:38:f0:07:bc:eb:ec:e2:2e:f0:a6:
d4:a5:c1:8f:d1:6d:40:a0:9f:c8:53:ba:c8:9d:3a:
4e:fe:10:c7:3e:70:01:fe:41:4a:67:bb:0b:c7:6b:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:60:49:74:35:35:AA:0E:48:B4:30:05:D3:79:4B:64:0D:6E:88
X509v3 Authority Key Identifier:
keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:34:70:09:d6:c9:92:f3:26:ce:b5:b2:a3:94:a4:22:c1:
79:29:c4:52:d9:ba:a2:cd:92:94:f8:4a:89:20:e3:dd:c1:2d:
5b:fa:20:0c:fd:d4:9d:ba:cb:44:6d:61:09:5d:6c:b1:d8:cb:
12:f9:3b:78:ed:2e:71:39:e1:a2:cd:8d:11:6c:f1:f7:b4:e3:
c1:1d:ee:a0:4c:1e:2d:25:b1:73:39:c1:12:57:5c:9a:2a:c1:
2c:a1:a0:47:f8:bd:d8:08:3e:cc:4f:86:c1:e7:7f:32:8e:4d:
a3:d2:e0:63:1f:e2:31:d6:10:1b:12:24:07:51:8e:fa:03:51:
c5:01:94:10:bf:e2:0d:e2:83:a5:8d:b4:39:d5:14:60:25:f3:
1a:9f:55:8f:70:43:08:ed:5a:e5:7d:20:97:ec:f0:87:b7:82:
b8:8b:f9:c9:63:09:bc:95:ff:f3:28:2d:47:53:0f:dc:da:a7:
ad:77:05:f1:e8:4e:43:04:b3:76:04:b7:65:8b:73:c3:2c:6c:
3c:f6:b3:3c:84:9a:10:b8:58:78:80:97:7c:98:0d:c0:c8:0a:
88:1c:99:47:f6:2e:dd:02:a3:68:97:87:a1:29:6c:f0:f0:fd:
8d:47:d5:5f:b1:62:02:8a:c7:82:5c:41:bd:04:ac:8a:7a:10:
da:55:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:07 2026 by rpki-client