
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json)
Hash identifier: rAt/CRTU3WHyXvRZ6dOvnIBvAsykmPnDdR6MN79AmPc=
Subject key identifier: 7F:91:DB:84:62:D1:74:69:CC:6D:B8:A8:9D:72:4D:F5:D6:39:90:41
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial: 0B5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
Manifest number: 0B48
Signing time: Tue 24 Mar 2026 19:04:14 +0000
Manifest this update: Tue 24 Mar 2026 19:04:13 +0000
Manifest next update: Tue 31 Mar 2026 19:04:13 +0000
Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: UdE10pOs+xpe1rCf/zyAzx4e3E9NChMa81sxl11WX4o=)
2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: o6fRayD/nqN2dEBUcuypm1nutFG8wp7LbMA0ZmrlfaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2906 (0xb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Validity
Not Before: Mar 24 19:04:13 2026 GMT
Not After : Mar 31 19:04:13 2026 GMT
Subject: CN=69c2e02d-4e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:ed:72:b1:1d:68:05:d2:d8:d3:1d:04:9d:
0e:c7:82:39:dc:4f:eb:4d:e3:03:57:b3:e9:75:96:
69:7a:51:94:21:fe:21:56:5c:4f:cd:9b:c3:cd:42:
a4:b1:61:cc:a2:ba:19:21:05:2b:1e:37:bc:12:91:
81:bd:78:40:46:49:ec:54:67:b3:04:b6:b2:fd:d5:
ec:f8:5f:51:fa:38:3b:23:8e:54:a1:9d:54:a1:3c:
5a:d9:07:fe:8d:91:f7:9f:2c:c2:53:eb:a9:1d:36:
41:00:9d:fb:73:2a:1b:56:a5:de:e9:d4:49:8f:1c:
85:fd:45:fb:77:45:1e:3a:d3:21:a2:3b:f6:c6:ca:
65:1b:b9:ee:58:e5:74:98:4d:14:92:7f:2d:29:e3:
9c:07:5b:cb:b6:44:86:5d:e9:78:4b:e6:50:ee:f9:
39:76:ff:40:ee:91:ec:9a:88:b2:f0:f2:f9:34:c4:
98:b4:4a:2c:f6:0b:33:37:cb:70:e4:11:01:8b:de:
ce:0a:dc:fd:e2:25:6c:70:99:db:d0:d6:78:27:11:
34:2f:3c:e4:41:2e:09:25:27:82:d8:c9:da:b2:e6:
60:23:7e:e9:89:29:3c:f3:d7:87:96:25:e2:24:08:
2f:9a:d4:79:3e:49:f1:68:ec:f9:7f:e3:9b:72:82:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:DB:84:62:D1:74:69:CC:6D:B8:A8:9D:72:4D:F5:D6:39:90:41
X509v3 Authority Key Identifier:
keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c0:b4:e2:67:91:3a:00:89:03:df:8b:fc:1d:1a:ae:7c:f5:
9f:0b:12:db:67:8e:0f:24:d9:75:c8:f6:e7:be:79:00:8e:e2:
58:f0:24:5e:6a:a2:9f:62:30:54:51:c4:3d:85:d8:10:15:08:
6a:2b:bc:18:bd:ce:5b:9c:d0:59:09:ec:93:09:ae:8e:59:8a:
c4:7d:7d:71:db:36:5a:d6:bb:ae:4f:b1:38:a0:9b:67:06:bf:
f9:a0:7f:4d:ab:72:c0:73:44:66:c1:66:e5:df:83:71:54:1e:
bc:9c:3e:a4:38:39:78:34:9b:96:ee:44:87:87:59:6c:49:43:
f3:84:7e:08:f0:7e:2f:59:e4:5d:0f:ae:98:bd:23:d5:fb:b3:
1e:75:06:a0:f6:09:03:f3:27:a8:05:b7:84:53:c0:ff:b5:9d:
f9:ee:dd:ea:a6:12:93:4d:c5:13:e6:ad:38:d2:84:45:db:e5:
ba:18:b5:3e:2e:57:7a:de:96:ea:66:67:ba:57:a1:a0:b4:4c:
9f:3a:17:d6:fa:e4:65:cd:99:35:b8:68:14:8d:cd:f1:74:43:
bc:bd:2a:55:88:d9:df:32:19:22:4e:3a:3d:2a:91:42:3f:b4:
12:bc:d4:e9:93:84:a0:e0:ac:82:17:8b:2a:61:88:d1:90:a4:
d7:7d:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:36 2026 by rpki-client