
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json)
Hash identifier: dAYQAXqB8+y4ocM3Q/O4aoOO0c5ciUjFIB911tZz574=
Subject key identifier: 72:97:C6:0C:01:1B:8E:73:F9:2E:C6:0B:23:5F:BA:EC:BC:8B:F7:AA
Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8
Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
Manifest number: 0102
Signing time: Wed 25 Mar 2026 05:25:31 +0000
Manifest this update: Wed 25 Mar 2026 05:25:31 +0000
Manifest next update: Wed 01 Apr 2026 05:25:31 +0000
Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: LNuBej5FmqWOgeQp8dyXSOqaZhcvW2pNvr/1DtvsLxE=)
2: 450039D4FF2E11F0AFF66B6D89EE528E.roa (hash: OWCucafOwXwEDRCjulLNjuJ23YlVUqM5OZtvjWuvgwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl
rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
Validity
Not Before: Mar 25 05:25:31 2026 GMT
Not After : Apr 1 05:25:31 2026 GMT
Subject: CN=69c371cb-3c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:78:30:35:49:0d:9b:36:0e:70:63:6c:61:
12:5d:fe:a7:0b:eb:a4:6b:f3:96:bb:dc:56:32:78:
74:ce:b3:6f:a3:4b:1a:7b:6d:7b:e5:d0:e3:10:20:
be:87:a1:16:dc:a9:32:3c:c6:da:44:71:3b:ed:a6:
a9:08:a6:48:97:db:28:fc:31:70:23:3f:e7:c9:bb:
ca:bd:b1:7e:dc:cd:3a:60:8e:c4:23:79:09:59:d4:
e0:ce:b2:ad:8f:1c:7e:06:b7:f0:d1:26:0f:84:38:
14:3f:35:16:cc:7b:a8:1f:69:94:17:78:ca:49:be:
be:d1:e4:81:a9:08:ac:92:3a:5e:ae:17:5d:61:9c:
45:b4:43:f3:89:56:a3:3a:ca:2d:03:38:88:b1:b6:
31:e0:ee:7a:04:17:18:7c:16:1f:6f:df:38:f4:dc:
86:fd:23:62:32:df:7d:3a:fa:1d:c8:46:90:1a:47:
f2:64:ec:77:bc:dd:43:7f:1d:2a:74:c8:ac:86:84:
57:51:c5:05:85:8f:3a:39:65:61:76:fe:1b:99:68:
22:d2:35:16:8c:69:91:5a:4e:63:4a:6b:4a:2b:7e:
dd:47:ca:91:d3:64:e3:0a:5d:a9:ae:0f:ac:0c:a7:
cb:3a:2b:af:61:38:f0:21:e1:55:0f:21:b4:ef:f9:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:97:C6:0C:01:1B:8E:73:F9:2E:C6:0B:23:5F:BA:EC:BC:8B:F7:AA
X509v3 Authority Key Identifier:
keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ed:ec:7c:50:91:de:91:b0:c8:53:72:a9:21:8f:eb:e4:a8:
04:76:37:9f:e6:94:bb:d5:bb:09:3d:d1:8b:87:3e:41:d4:c8:
db:f0:3b:0c:36:6e:b1:aa:66:44:e0:91:82:89:ec:77:f5:4d:
88:86:de:07:30:a8:86:a9:da:0e:ff:fe:f7:69:e7:cb:f7:d5:
a2:5c:84:0b:64:1f:db:b4:f5:cd:02:c8:ce:35:4e:b2:1c:f7:
92:e3:7a:fd:37:a0:5c:02:01:e4:cc:e6:73:53:3a:7c:7d:64:
5e:7e:36:77:24:51:90:b5:74:ca:2f:3f:76:3e:cd:99:72:38:
30:d8:3c:6b:40:0c:ff:1f:73:ad:db:27:ed:21:9b:40:94:7d:
a4:3f:f3:bb:4e:6b:c2:b6:fb:64:f0:6d:d3:e5:76:a6:37:e1:
2c:33:66:f1:fb:c7:74:dc:2b:36:2e:3d:e1:0d:fe:b2:9d:3d:
c1:d4:b5:13:67:ad:96:fa:7f:64:4d:6e:0e:1f:4e:0c:b8:ad:
7d:40:61:2a:1f:0e:86:fd:cd:0d:25:1d:3b:ce:5a:52:5a:51:
79:08:df:8e:7c:7f:dd:42:35:8f:af:50:cf:5e:6e:37:ba:de:
80:1b:f1:ca:a5:ab:e9:64:02:16:73:b8:f0:88:5d:85:5d:56:
29:55:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:00 2026 by rpki-client