
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json)
Hash identifier: sxNqLWrl83fR4vgUz1JSzXppwWdyO3c7JjBtloao/Ns=
Subject key identifier: 61:EC:52:72:B5:96:9D:DB:C6:12:6B:05:2D:05:B3:AF:63:69:ED:4D
Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF
Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF
Certificate serial: 34FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
Manifest number: 34FC
Signing time: Tue 12 May 2026 15:19:14 +0000
Manifest this update: Tue 12 May 2026 15:19:14 +0000
Manifest next update: Tue 19 May 2026 15:19:14 +0000
Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: /vqS1hkJOYIdh4PO+m87aULJmbqhFn2oF9WgM0CT3rg=)
2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: oojYcBMoonELSfe45pkI581LosRHOK0/3Xt8Hp4n/PY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl
rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13567 (0x34ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF
Validity
Not Before: May 12 15:19:14 2026 GMT
Not After : May 19 15:19:14 2026 GMT
Subject: CN=6a0344f2-349c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:81:e1:8b:74:55:76:68:6a:58:b8:ec:49:
e1:86:d4:e6:1b:b4:1d:49:b8:af:07:ea:3e:96:8a:
88:e6:8f:9e:ca:8f:4c:a1:a5:71:7a:bf:22:72:7b:
bf:47:f4:15:ba:78:83:23:c9:fc:67:95:ab:45:16:
3c:fd:90:23:ac:a2:27:70:2d:2a:11:cf:79:3b:14:
14:db:95:76:16:83:d2:af:09:d9:38:ce:f3:80:65:
7d:68:05:40:1d:1a:6c:5d:74:aa:7b:fb:f1:10:ec:
c2:ff:0a:3a:78:8f:18:95:40:1f:b6:da:4a:f9:b3:
34:69:5b:71:b4:42:2f:20:ab:b9:c4:1b:f5:be:e7:
94:4f:c4:46:21:83:b9:bd:87:1d:2a:20:f5:07:a0:
a4:80:df:91:90:63:d2:d0:de:6b:67:b1:1e:22:fd:
6f:01:f2:e2:80:bb:d5:93:b0:70:68:d5:cf:5a:14:
40:03:3e:90:65:e9:9f:02:1e:b6:2d:91:90:ff:78:
cc:3b:65:a4:59:43:c5:e0:7c:f4:70:68:6a:3c:41:
a2:10:17:d6:9a:16:e7:58:b3:53:df:60:fb:86:4a:
45:da:02:9c:ad:79:83:8e:22:ad:c5:2b:be:d5:85:
30:d5:8c:69:cc:91:24:f3:85:18:4b:c4:20:93:b7:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:52:72:B5:96:9D:DB:C6:12:6B:05:2D:05:B3:AF:63:69:ED:4D
X509v3 Authority Key Identifier:
keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a1:4d:b4:61:c6:a0:bf:3b:10:03:c6:b1:8c:7c:40:b6:89:
37:08:a8:65:d4:01:75:be:19:14:7e:4d:d5:19:a1:f6:2a:3a:
6c:8c:7a:b1:d6:98:f9:65:33:02:99:f6:dc:48:bb:92:fb:38:
5b:e9:6f:34:61:3b:b8:58:8f:d9:73:6a:89:ff:29:74:10:6a:
59:0f:d7:2e:d7:9f:3a:a9:41:92:71:5d:67:37:83:9a:52:c3:
60:b4:8d:5b:3a:f1:4b:bd:c8:8c:64:f7:a8:1c:0a:40:4e:dc:
d7:9a:5d:88:2a:95:1a:4a:20:05:b6:ae:b1:ba:1f:bf:ca:95:
3c:b8:fe:5f:b5:3b:29:66:95:ab:dc:c4:31:4f:d1:21:d1:2b:
b7:7b:36:83:97:39:98:fc:f7:bd:cf:48:5a:c6:57:dd:f3:fc:
64:0d:6f:3c:69:c9:c4:1f:83:04:af:e3:55:ff:04:1f:66:0f:
0e:a7:12:1b:1a:4d:fd:79:05:2e:bf:44:c8:eb:aa:8d:41:59:
d9:c8:87:ea:1b:2f:b7:92:7e:15:1a:3d:ba:1e:fc:95:be:fc:
74:3e:da:70:2f:26:56:25:70:b6:3e:4d:53:d5:eb:48:1e:08:
1d:0c:9b:5c:95:56:94:65:c9:40:f0:00:2e:4d:cf:72:57:4f:
3c:f3:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:54:58 2026 by rpki-client