
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
File: q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft (raw, json)
Hash identifier: wveGgkPNsiOh4lMw2tUnX4GfDCJKieaExMHKnyD68CY=
Subject key identifier: 84:D9:15:6E:A4:FC:14:6C:19:8E:BE:64:EB:95:8D:B9:C7:FC:5F:BE
Authority key identifier: AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
Certificate issuer: /CN=A914E1BD/serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
Manifest number: 23
Signing time: Wed 25 Mar 2026 08:02:00 +0000
Manifest this update: Wed 25 Mar 2026 08:02:00 +0000
Manifest next update: Wed 01 Apr 2026 08:02:00 +0000
Files and hashes: 1: q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl (hash: 9viniCwikRqHr9/X19LuOcR1dbIbB5tsKNx4wEz4Llk=)
2: FC4E4156FB3411F0841666933D6F56BC.roa (hash: EB7Zu5vP9pgptqSutxDmsy3gmbeSeQdiZ2X1SMg8Qf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1BD, serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Validity
Not Before: Mar 25 08:02:00 2026 GMT
Not After : Apr 1 08:02:00 2026 GMT
Subject: CN=69c39678-6e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:9e:f7:b0:15:4b:b9:b6:f7:35:ce:45:27:
84:a6:4b:db:13:6c:18:b7:00:b1:d4:53:04:9e:72:
a8:9b:7f:04:96:0f:62:d9:8e:8e:95:6e:46:3d:38:
5b:c2:1a:ab:1c:16:84:fa:ff:98:36:9a:69:5b:6f:
be:2b:57:0d:b1:2b:bd:34:6a:7d:74:da:37:72:8a:
fe:e6:bb:b2:64:73:87:ad:81:74:5d:fa:ec:6f:1e:
ec:29:20:2e:56:83:b7:48:1a:57:c7:d1:b6:01:09:
d9:4a:67:fc:23:5a:22:fd:ac:89:23:a4:c7:3b:ef:
6f:49:7c:8c:cb:1b:b7:a9:59:0f:33:07:a4:88:a4:
3e:43:78:65:40:94:3f:46:46:f0:be:28:60:d5:d9:
23:77:3e:13:ea:3e:71:0d:86:c0:a3:d7:22:6b:3e:
9f:d7:bf:d3:66:f1:3a:b9:09:59:62:fa:d4:58:8c:
4e:45:cd:f2:74:70:ac:d5:87:ac:23:24:4d:92:58:
b3:23:c3:74:05:61:f8:d0:21:b6:e3:49:1b:92:18:
2c:d0:e8:d8:ee:5c:35:48:2b:a5:e2:e8:03:fe:11:
c4:d6:e8:ea:8b:04:8f:b6:5a:4a:81:c1:1d:8c:72:
a2:c7:f3:61:e6:08:01:2a:35:44:b3:dc:9b:0a:95:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D9:15:6E:A4:FC:14:6C:19:8E:BE:64:EB:95:8D:B9:C7:FC:5F:BE
X509v3 Authority Key Identifier:
keyid:AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:8d:2f:0e:43:d2:81:6c:e9:22:0c:3c:93:08:69:44:86:
b1:89:b5:57:d3:a8:55:d0:6d:bb:b3:10:27:11:84:98:b1:d8:
46:38:f9:96:12:08:43:32:63:f4:b0:e3:01:3b:e0:1e:d1:7a:
b9:46:9b:64:a3:84:f7:59:53:66:fb:d1:bb:d8:36:68:25:9d:
c8:74:6f:5c:a3:33:01:7a:71:50:54:47:4b:dd:78:26:15:60:
a9:92:13:e5:e8:5a:fb:44:c8:5b:e6:03:45:29:2a:c6:7b:60:
5f:78:c4:88:e9:95:b5:1b:b4:c4:4f:69:29:5c:b1:48:22:91:
39:20:db:05:82:fd:60:ae:21:7e:5a:2b:5b:08:4d:3e:ad:13:
1e:60:e8:ae:db:88:16:31:ad:09:ec:7f:99:c2:75:4c:80:96:
c1:d6:59:0d:48:c5:56:10:e8:8f:7e:74:57:78:e8:e8:7b:ee:
ad:cb:93:9f:74:04:0c:8f:2e:0c:17:96:d6:da:ec:aa:23:5b:
fe:29:b9:d6:47:a7:71:df:46:96:24:3a:6a:eb:8e:6b:62:3e:
4a:af:7d:5a:15:d9:fb:b8:65:01:a7:32:4c:ba:c3:72:85:9e:
05:52:95:32:83:7d:39:0e:7c:87:a9:3b:24:08:71:38:8d:27:
a4:53:15:3b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTFCRDExMC8GA1UEBRMoQUJBMjZDN0I3NTAxNTU5QUM0MTA5QjhGNUFGRjJERjQz
MzcxNTNGQzAeFw0yNjAzMjUwODAyMDBaFw0yNjA0MDEwODAyMDBaMBgxFjAUBgNV
BAMTDTY5YzM5Njc4LTZlNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJLZ73sBVLubb3Nc5FJ4SmS9sTbBi3ALHUUwSecqibfwSWD2LZjo6VbkY9OFvC
GqscFoT6/5g2mmlbb74rVw2xK700an102jdyiv7mu7Jkc4etgXRd+uxvHuwpIC5W
g7dIGlfH0bYBCdlKZ/wjWiL9rIkjpMc7729JfIzLG7epWQ8zB6SIpD5DeGVAlD9G
RvC+KGDV2SN3PhPqPnENhsCj1yJrPp/Xv9Nm8Tq5CVli+tRYjE5FzfJ0cKzVh6wj
JE2SWLMjw3QFYfjQIbbjSRuSGCzQ6NjuXDVIK6Xi6AP+EcTW6OqLBI+2WkqBwR2M
cqLH82HmCAEqNUSz3JsKld29AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhNkVbqT8
FGwZjr5k65WNucf8X74wHwYDVR0jBBgwFoAUq6Jse3UBVZrEEJuPWv8t9DNxU/ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMUJELzY0NjhGREEwRkIx
MDExRjA5NDdEQjg1Njc0NkY1NkJDL3E2SnNlM1VCVlpyRUVKdVBXdjh0OUROeFVf
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcTZKc2UzVUJWWnJFRUp1UFd2OHQ5RE54VV93LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
MUJELzY0NjhGREEwRkIxMDExRjA5NDdEQjg1Njc0NkY1NkJDL3E2SnNlM1VCVlpy
RUVKdVBXdjh0OUROeFVfdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCeEI0vDkPSgWzpIgw8kwhpRIaxibVX06hV0G27sxAnEYSYsdhGOPmWEghDMmP0
sOMBO+Ae0Xq5Rptko4T3WVNm+9G72DZoJZ3IdG9cozMBenFQVEdL3XgmFWCpkhPl
6Fr7RMhb5gNFKSrGe2BfeMSI6ZW1G7TET2kpXLFIIpE5INsFgv1griF+WitbCE0+
rRMeYOiu24gWMa0J7H+ZwnVMgJbB1lkNSMVWEOiPfnRXeOjoe+6ty5OfdAQMjy4M
F5bW2uyqI1v+KbnWR6dx30aWJDpq645rYj5Kr31aFdn7uGUBpzJMusNyhZ4FUpUy
g305DnyHqTskCHE4jSekUxU7
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:07:22 2026 by rpki-client