
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json)
Hash identifier: u+GB9mtuDeFVIG/SpwCWEAtQ6RuSVtXdjTdLNsGpzrE=
Subject key identifier: EF:26:5A:47:9E:C4:A1:7C:EF:73:98:13:B3:A2:8E:74:34:5E:F8:63
Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
Manifest number: 02BE
Signing time: Wed 25 Mar 2026 01:04:32 +0000
Manifest this update: Wed 25 Mar 2026 01:04:32 +0000
Manifest next update: Wed 01 Apr 2026 01:04:32 +0000
Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: 0LsJgLoaSDcFbjmABhEkiWYVaB/OKh9c+lWq2XZaauA=)
2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: 8pnF8r5Xhn3OD85TXM+iL6QbA+jKGQalG5vIFE6zqm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl
rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Validity
Not Before: Mar 25 01:04:32 2026 GMT
Not After : Apr 1 01:04:32 2026 GMT
Subject: CN=69c334a0-fa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:b2:0a:15:d8:a6:c1:80:55:5d:5a:ff:30:
d5:b7:ae:28:78:77:c8:7b:78:3e:ad:7d:95:e1:60:
77:c4:07:66:67:4c:f0:3a:8b:fb:18:60:68:0f:e3:
eb:99:75:0d:9a:fb:12:33:87:89:d4:54:d0:ed:f2:
b2:17:f6:56:5c:41:87:57:12:49:30:72:74:f5:2c:
c9:bc:54:73:44:ef:f5:24:f6:95:62:87:10:5b:12:
55:fd:14:ab:2d:41:1b:54:0c:a5:50:6a:6b:b9:bb:
e5:eb:95:48:ec:9b:06:46:03:c6:a4:d4:7b:c4:d2:
27:5e:69:0e:c2:df:f0:4d:9d:69:1f:d3:e9:be:17:
6f:7d:ad:f4:6d:00:44:dc:dc:47:e7:f2:72:d2:72:
bb:c9:27:05:56:da:7f:83:58:1f:75:31:c1:1c:ef:
86:65:1a:ef:37:2c:e2:cc:1b:ba:f8:39:dc:fe:21:
25:3a:3f:f5:5d:dc:0f:4f:25:f9:e0:b5:c0:a0:c5:
50:34:f4:9a:a3:f4:76:90:01:7f:46:16:ec:c2:07:
57:53:ce:f6:07:99:2c:e1:10:e9:c2:ea:9f:70:01:
33:42:1f:3e:0d:3b:f8:e5:32:a4:c9:8e:97:9d:72:
7b:23:45:05:4f:06:ae:53:a6:46:40:7c:14:ba:8d:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:5A:47:9E:C4:A1:7C:EF:73:98:13:B3:A2:8E:74:34:5E:F8:63
X509v3 Authority Key Identifier:
keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c3:42:2b:c7:95:b2:7f:67:43:85:db:7e:1f:c2:ef:53:14:
fa:e5:2b:54:4e:cf:40:30:f9:89:12:8d:21:1a:d1:6b:10:e7:
ff:d4:ae:ce:be:61:bf:4f:7c:71:cd:38:19:8e:eb:f7:2a:27:
4a:82:79:0a:c4:51:81:92:a1:7a:f7:42:10:37:08:4d:f3:3a:
24:3c:fe:33:9f:53:ec:73:13:61:70:04:57:b1:ee:e0:ae:3c:
06:47:8c:c3:fe:55:df:df:6d:b0:88:f2:0f:a4:f2:8a:54:31:
dc:e2:49:b5:75:57:cd:8f:f1:c8:13:50:dd:dd:51:f0:ee:ed:
23:66:6c:bf:0d:b5:24:11:0d:90:c2:d5:2d:11:b6:88:b9:57:
5e:c1:df:60:3e:aa:73:17:2e:50:66:92:d7:9b:a0:09:d9:e4:
50:2d:a1:23:72:a6:43:bb:1f:30:80:df:04:d1:8e:01:b2:8b:
35:3d:d1:30:37:cf:8d:6e:01:45:0c:70:bf:cd:f5:7c:6b:95:
4c:ee:14:b4:81:64:90:10:98:49:2f:c7:1d:a2:de:2d:c9:aa:
05:d6:f6:d6:84:5b:a5:68:35:58:7e:6e:c5:e7:ce:cd:ed:d1:
15:9c:68:19:ed:76:1d:18:3c:84:d0:f4:a0:c1:60:01:5b:14:
62:b2:2b:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx
QjUxMTNEQjkwHhcNMjYwMzI1MDEwNDMyWhcNMjYwNDAxMDEwNDMyWjAYMRYwFAYD
VQQDEw02OWMzMzRhMC1mYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0EyyChXYpsGAVV1a/zDVt64oeHfIe3g+rX2V4WB3xAdmZ0zwOov7GGBoD+Pr
mXUNmvsSM4eJ1FTQ7fKyF/ZWXEGHVxJJMHJ09SzJvFRzRO/1JPaVYocQWxJV/RSr
LUEbVAylUGprubvl65VI7JsGRgPGpNR7xNInXmkOwt/wTZ1pH9Ppvhdvfa30bQBE
3NxH5/Jy0nK7yScFVtp/g1gfdTHBHO+GZRrvNyzizBu6+Dnc/iElOj/1XdwPTyX5
4LXAoMVQNPSao/R2kAF/RhbswgdXU872B5ks4RDpwuqfcAEzQh8+DTv45TKkyY6X
nXJ7I0UFTwauU6ZGQHwUuo0vEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8mWkee
xKF873OYE7OijnQ0XvhjMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy
NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx
dVJFejZXTHY5LUliVVJQYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoMNCK8eVsn9nQ4Xbfh/C71MU+uUrVE7PQDD5iRKNIRrRaxDn/9Suzr5hv098
cc04GY7r9yonSoJ5CsRRgZKhevdCEDcITfM6JDz+M59T7HMTYXAEV7Hu4K48BkeM
w/5V399tsIjyD6TyilQx3OJJtXVXzY/xyBNQ3d1R8O7tI2Zsvw21JBENkMLVLRG2
iLlXXsHfYD6qcxcuUGaS15ugCdnkUC2hI3KmQ7sfMIDfBNGOAbKLNT3RMDfPjW4B
RQxwv831fGuVTO4UtIFkkBCYSS/HHaLeLcmqBdb21oRbpWg1WH5uxefOze3RFZxo
Ge12HRg8hND0oMFgAVsUYrIrXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:27 2026 by rpki-client