
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
File: qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft (raw, json)
Hash identifier: NFF2QIH36omaD4pJec/F4I2KstjHxpWgL1snOdbOQyw=
Subject key identifier: D3:36:B5:C1:0E:D8:6D:01:04:B5:4B:C9:F0:32:3C:CC:46:8D:BD:24
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
Manifest number: 022B
Signing time: Wed 25 Mar 2026 02:21:21 +0000
Manifest this update: Wed 25 Mar 2026 02:21:21 +0000
Manifest next update: Wed 01 Apr 2026 02:21:21 +0000
Files and hashes: 1: qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl (hash: MYP+tItw8KW9+h313zzFWrdmM3lF5nTZpnYp6ZSPjBo=)
2: C9DBA6A666A211EE8C285556C4F9AE02.roa (hash: 036SMhOSIDJiCYH/Aa49/ufrn1FEnv9HqMNnhWlvrLI=)
3: EAF431DAEC3011F0A9E1B992416F56BC.roa (hash: pi5IdFH8BXBZqxet6PyncdKtsmtgqEe3vNhv2Ot0+1Q=)
4: 2F40B3CA8D5B11F0A0B1D010C4F9AE02.roa (hash: Xmd47SSJ8r1PNJ+biTEY3Fc1Fo382wK4VChB/7hTug4=)
5: 8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (hash: 3B96UlkLTKNYWeeC54aVnV7PH9CyaSoRvKgcab08m08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Mar 25 02:21:21 2026 GMT
Not After : Apr 1 02:21:21 2026 GMT
Subject: CN=69c346a1-fd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:2c:71:38:fc:7c:ad:0d:c1:84:76:af:ff:
a8:5d:2d:a8:82:2a:65:bf:6e:79:d7:ba:75:54:fc:
2e:b9:2c:e8:6f:b9:4a:95:5a:60:c6:fd:13:8f:2e:
73:f5:8b:e4:ce:07:5e:3d:0b:58:da:d1:b4:9a:d8:
52:0b:a9:a1:36:66:b6:c7:db:6a:56:b1:bc:1c:63:
fc:7a:1e:d0:3c:6a:1f:1d:5a:62:d1:58:9e:54:53:
b2:2e:4b:17:f3:73:e0:14:eb:0d:09:66:92:ff:40:
50:36:b4:78:57:ea:c9:36:47:ca:2b:8c:82:3b:b5:
2d:e9:50:38:03:83:73:43:75:32:24:ea:3a:fa:ef:
36:db:c2:4a:96:b5:b5:9c:25:bb:ee:25:c4:66:2b:
15:ea:46:ba:a3:ff:bf:f8:72:e7:44:05:58:1a:28:
99:f6:10:10:67:e0:26:90:bf:3f:6f:04:92:e3:49:
c6:5b:f8:33:7c:b0:98:19:89:45:0e:98:66:ec:4d:
7a:c9:f1:75:98:13:84:06:7a:8e:f5:10:9f:f6:73:
a2:ee:bc:35:5b:37:f9:35:e3:92:7b:8a:dd:55:22:
4d:18:9d:b8:b6:ab:53:13:3f:56:d1:72:31:14:86:
f1:d9:35:aa:d5:1d:de:f8:22:0a:40:99:6a:50:7f:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:36:B5:C1:0E:D8:6D:01:04:B5:4B:C9:F0:32:3C:CC:46:8D:BD:24
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3b:d4:e0:63:8d:1c:c0:c9:95:6a:da:ce:6f:18:6f:0f:eb:
b3:86:ec:fe:12:7b:17:4a:02:ed:6c:46:81:b7:26:0e:11:a9:
dc:b6:0b:6c:49:96:c6:70:38:bc:66:cb:62:c3:35:c5:1e:7e:
aa:96:de:ab:7f:cf:6b:4b:57:4f:71:04:4f:38:73:97:a4:f2:
97:98:6a:ec:ed:90:f0:bc:69:96:8f:c6:56:f7:8f:a3:fe:e8:
73:17:82:89:32:61:d7:77:58:3f:55:c5:ac:46:3f:b3:64:f5:
e9:9f:09:d3:80:e1:5d:d1:d9:5c:6e:21:6e:77:90:fb:3c:5b:
d0:46:fc:63:cf:aa:60:76:ea:fb:71:4f:98:68:41:cb:5a:7e:
6f:65:67:c8:05:e6:11:d5:6b:d4:68:91:bc:2b:14:4f:0a:81:
9d:2f:cc:25:05:3e:83:8e:f9:20:23:48:18:07:e2:8f:32:42:
6b:f7:bd:55:d7:13:e9:a7:26:33:3d:ef:bc:c5:32:94:4c:09:
48:c4:9a:a3:70:fa:9f:36:23:57:dc:e9:b1:48:29:df:72:90:
6f:3f:f7:ca:65:f8:ce:d0:92:b9:9b:d8:0c:64:33:39:2c:6b:
31:07:14:95:35:79:2e:f6:96:9a:55:e3:6e:1a:b8:d3:1e:b3:
0f:85:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:02 2026 by rpki-client