
$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier: v3dhLr+h/mTVePHeUhPBu8WGlVXht+zaIrNBTWnHxnA=
Subject key identifier: 23:F5:2B:AB:BD:29:24:D8:8F:8A:6C:81:4C:4F:5A:59:5D:77:F1:DA
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number: 0174
Signing time: Wed 25 Mar 2026 04:02:22 +0000
Manifest this update: Wed 25 Mar 2026 04:02:21 +0000
Manifest next update: Wed 01 Apr 2026 04:02:21 +0000
Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: H/uc7UNdPoJqP1DESu3yMKZVacd9Vlo55ak1YifKRPQ=)
2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: KlNM/yfkSE+noMo4pBbPbKUObjnAMx3gXh75VDyO61o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Validity
Not Before: Mar 25 04:02:21 2026 GMT
Not After : Apr 1 04:02:21 2026 GMT
Subject: CN=69c35e4d-c6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:fb:f3:f8:4e:9c:7b:f0:08:6c:c6:68:67:
6c:e1:d4:30:4b:28:6a:02:45:a1:98:76:64:2f:42:
8c:0c:18:94:04:c7:35:d8:96:03:c8:b6:39:6d:fc:
43:18:ab:3b:b9:9b:50:4a:e3:e2:22:86:7a:e1:22:
62:60:0a:68:42:a5:06:44:81:ab:41:31:34:bb:76:
da:ba:45:42:c9:1e:2c:06:de:af:4c:9a:96:c0:ae:
34:a0:62:66:12:e7:0d:10:d3:40:7f:c2:72:54:53:
ba:9e:5d:ee:82:54:0a:ae:a5:f9:ab:8a:85:90:0e:
c7:14:45:03:d9:39:3e:60:a5:90:38:65:cb:bb:67:
b3:f6:43:14:93:34:df:7f:54:30:10:a8:e1:34:5e:
d3:56:8a:23:c0:2e:89:bf:fa:a7:e1:14:73:e3:a8:
1c:62:4d:ff:9c:0b:be:21:e9:00:0b:f0:10:2e:c7:
e3:06:4a:7b:ed:15:48:a3:61:89:df:97:48:d3:6d:
03:01:ee:dc:8f:61:7e:45:1d:8d:eb:b7:ff:12:a1:
7b:d2:05:08:62:5a:05:76:d9:73:0c:a9:32:9d:1b:
4c:54:21:1c:87:96:3a:c6:d8:54:d0:b0:76:e5:19:
45:f4:ce:97:7a:5a:f3:f1:3a:e1:6d:be:a3:ad:47:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F5:2B:AB:BD:29:24:D8:8F:8A:6C:81:4C:4F:5A:59:5D:77:F1:DA
X509v3 Authority Key Identifier:
keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:13:6e:52:89:07:14:35:f0:7f:5e:22:ed:7c:e4:6f:40:
bb:39:f8:bc:04:25:a4:21:68:3b:e6:b1:da:80:b2:70:78:6c:
c2:36:19:a3:ed:b5:b8:84:87:e2:63:f9:0e:e6:d3:2e:a1:cf:
71:58:04:2a:bf:97:98:43:56:91:42:8b:7f:24:e2:00:2c:e8:
f0:d0:1f:bd:21:27:f7:5e:bd:6f:ec:fb:3b:d3:44:10:0a:8d:
b9:ae:21:e5:bd:ba:6e:cb:e9:d5:18:ed:d3:49:85:ce:d1:b4:
c9:eb:b3:c4:cd:50:29:58:fb:71:b4:16:10:25:3d:e8:0c:9d:
db:b2:00:3d:0c:b2:d5:26:1e:92:0d:87:7e:5e:9e:c6:a1:1c:
cc:36:98:d0:fa:bd:6c:77:d2:fe:97:79:04:f8:3e:75:e8:d8:
24:3a:c9:c2:fe:7b:14:0d:05:92:45:00:d8:e2:44:eb:a1:3d:
e9:7a:d8:62:4e:d8:53:26:4e:8d:9f:1c:27:61:f3:c4:f4:c7:
06:e2:78:8d:cb:2e:29:09:ec:94:18:3c:2f:30:e3:dc:36:b7:
97:c2:06:8c:9a:18:7b:de:c4:56:75:da:a0:29:5d:08:7e:37:
7b:f4:11:ac:6a:21:72:77:0b:a8:c7:8b:46:b9:27:cf:21:6b:
4f:1d:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:37 2026 by rpki-client