
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier: hAzXW//BFcUbPZygGHTebbED6RXoKhbV2zo9GC/JryQ=
Subject key identifier: 2C:AC:AD:98:CC:E2:7A:8F:C6:B3:D0:5D:C4:FD:9B:09:37:08:D0:D0
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number: 020D
Signing time: Wed 25 Mar 2026 02:20:56 +0000
Manifest this update: Wed 25 Mar 2026 02:20:56 +0000
Manifest next update: Wed 01 Apr 2026 02:20:56 +0000
Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: m1WqzF1cpFWFU4U1Aj/35c922Tymv1KAypR2Ng15vKk=)
2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: zpm4WI/rpoX+PhSp4A1fa7cTi+uUSsWISqGvT07i/hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Validity
Not Before: Mar 25 02:20:56 2026 GMT
Not After : Apr 1 02:20:56 2026 GMT
Subject: CN=69c34688-cfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:83:d7:0c:c5:b3:16:58:63:50:64:fc:f1:
72:64:68:2f:35:90:f3:e2:c7:20:77:0a:de:93:39:
e1:76:c1:0c:82:07:82:49:36:6d:3f:14:00:0f:72:
d8:eb:f6:55:4e:21:48:08:15:bf:2a:ef:0c:a8:ed:
c2:fd:5a:36:1e:32:49:e0:9c:4c:24:87:5c:6d:5b:
05:d6:07:04:45:ea:61:bd:b9:2e:60:0e:4a:99:a5:
85:b6:a2:26:3d:7f:41:7f:b3:c6:a1:05:8a:ed:b6:
56:c0:9b:5e:fa:09:53:1b:aa:fc:65:11:32:c9:bd:
10:f0:dc:d9:7e:50:ff:7a:93:48:2d:60:12:17:b8:
77:4e:a6:b2:9b:4c:88:8e:e6:e0:3f:9f:b2:32:6b:
b5:ba:31:23:a8:c0:33:73:1e:4e:50:4f:85:ee:7a:
84:bd:40:ad:d8:6e:97:ab:e8:ed:b7:1f:5f:e5:70:
d5:a6:7a:f7:df:ec:e6:58:33:2d:79:be:3e:ce:af:
ce:8a:f9:09:a8:b5:51:c7:16:e3:ee:7a:18:cb:40:
ed:7b:4a:d2:76:4b:5c:f1:7a:8a:bc:16:ec:c5:2f:
d7:99:16:62:bd:d1:24:e8:9b:c7:c9:4c:38:06:22:
25:3d:9b:32:1c:6e:fb:cd:c2:38:25:0a:48:c5:71:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:AD:98:CC:E2:7A:8F:C6:B3:D0:5D:C4:FD:9B:09:37:08:D0:D0
X509v3 Authority Key Identifier:
keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:5c:3b:10:bd:fd:17:89:12:04:ba:3c:27:73:f8:32:d9:2e:
a2:07:59:73:9b:4b:08:73:c4:da:1d:cf:c8:ac:44:5b:34:9c:
51:7f:17:5c:5c:15:db:10:63:1c:33:19:ef:11:e7:85:b3:8f:
b0:e2:c3:ff:97:c4:d4:ed:b9:5b:a0:a6:0f:46:7e:fd:46:39:
1b:e2:66:8c:8f:94:2c:d8:23:33:22:e6:f0:eb:52:c8:28:c1:
b3:2a:ea:a8:ea:7d:22:b4:1c:52:12:8e:4d:bd:bd:29:43:54:
d1:78:5c:2f:d2:7a:cb:40:34:f3:88:48:5c:f5:15:fd:e9:db:
80:7a:cb:be:31:5a:e7:55:25:30:01:f4:45:f8:17:d4:a7:fa:
ac:d0:6d:ac:d3:fc:99:3a:2a:3b:2e:1e:2b:9f:d1:67:50:6a:
a1:6e:0c:61:38:a7:f1:8e:c5:48:f9:da:86:a5:d2:39:18:92:
55:f9:5d:e7:01:4a:d1:71:5f:99:7c:44:1d:c4:ec:b1:04:38:
3e:b1:16:8b:98:4d:ee:7b:17:2a:d5:29:b8:73:e8:43:cc:ac:
bb:56:19:5e:d0:2a:87:91:82:bf:b6:4c:20:5e:f3:6d:ae:86:
be:23:8f:84:c5:8e:0e:38:29:0e:fe:6d:3a:a7:7e:c9:89:68:
4f:62:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:59 2026 by rpki-client