
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json)
Hash identifier: QkNAzWo/7SNHRaTFmKpkdNbdgp6EmbAW4kiF62Nn0z8=
Subject key identifier: DD:6F:C2:71:C8:0A:C1:DA:78:70:F6:69:BB:E1:94:35:61:91:54:C4
Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
Manifest number: 0294
Signing time: Wed 25 Mar 2026 01:10:30 +0000
Manifest this update: Wed 25 Mar 2026 01:10:30 +0000
Manifest next update: Wed 01 Apr 2026 01:10:30 +0000
Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: 71J2r0wxgh4ETgEB0zLq09HRv/2+St2qEKKcmqF2Y0E=)
2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: Ae2D09RrIAEsj2zD2tu6+cplYXPngj1cvZnsDaiUJHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl
rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Validity
Not Before: Mar 25 01:10:30 2026 GMT
Not After : Apr 1 01:10:30 2026 GMT
Subject: CN=69c33606-60bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:df:d0:75:88:ac:cf:d6:91:ee:43:10:b8:
e8:fa:7e:f8:80:37:c8:ed:fa:2b:a3:b1:1e:e7:71:
0e:f5:85:a9:ea:eb:4d:fe:79:88:8a:6f:ef:8b:cd:
14:be:01:bf:8c:a4:27:03:2b:fa:b5:b0:05:ea:f7:
25:89:c0:5c:af:cd:2c:c8:31:f6:a6:84:f4:44:5b:
39:ff:4f:63:bc:49:89:36:bf:ac:68:1e:68:05:d2:
37:cd:0c:a6:4e:69:32:09:8d:b7:20:1d:52:fe:d7:
5c:79:43:46:8d:6d:e0:63:db:c3:26:6f:d5:a3:f7:
ed:ae:d9:28:64:a6:18:5d:dd:e7:62:bd:7b:f4:fd:
5b:da:39:4d:46:cb:2e:91:9c:dc:1e:66:11:0f:bb:
eb:88:86:db:64:bb:32:53:ef:4b:3a:d0:9c:c8:dc:
04:4b:62:e4:13:b5:e1:13:15:02:de:86:10:be:a5:
d3:04:68:f8:6c:fb:91:aa:a5:a4:86:56:42:57:b4:
98:8d:8e:68:be:26:1c:35:66:21:28:b6:fd:72:29:
9c:0c:0f:12:1f:25:77:44:ac:61:03:6f:e8:79:a1:
82:01:59:25:d2:a0:fc:23:b0:15:65:8d:b6:a0:84:
cc:d6:b1:0a:38:d8:6d:77:87:5e:eb:dd:6a:97:6b:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6F:C2:71:C8:0A:C1:DA:78:70:F6:69:BB:E1:94:35:61:91:54:C4
X509v3 Authority Key Identifier:
keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c3:a7:ae:30:8d:be:b6:ec:8a:ab:37:c0:7e:e3:88:89:ce:
4e:ad:13:d2:d6:e2:e2:c6:41:86:43:8d:11:0d:90:d8:84:0a:
26:73:e2:0d:7c:2f:47:e4:05:35:1a:20:e9:9a:a5:41:b5:6b:
58:af:1f:ec:37:d2:8f:84:0d:f4:56:c7:9a:df:4e:77:06:80:
4b:89:4d:c0:2b:d3:47:21:29:40:3b:7e:ef:27:fc:44:dc:dd:
df:d7:fe:0d:88:ba:e7:9e:25:95:d3:cd:92:63:b9:36:4d:92:
e5:b6:3b:39:1b:a3:8d:20:59:96:81:5a:c8:12:9b:18:63:03:
47:51:de:aa:20:23:d4:a6:22:a2:be:73:99:fa:09:22:62:48:
c1:e4:30:86:63:be:ca:a7:9d:7b:1e:3c:92:a6:01:df:95:81:
6b:35:08:2a:01:4b:89:78:6a:73:74:3f:b6:65:27:b6:39:e0:
71:3d:c5:e0:45:4d:d0:97:a9:31:56:de:b7:ff:98:9a:ca:d6:
e5:e0:c0:07:98:d3:ae:c3:f6:2c:a2:f8:e1:6b:28:fa:d2:0b:
d8:9c:a3:6e:e4:e5:3c:6c:96:69:d8:d2:36:b4:c6:11:c3:19:
61:e2:50:5a:3e:0e:31:88:52:b0:65:50:69:bd:3a:dd:c3:77:
28:00:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:13 2026 by rpki-client