
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier: 8mILSBv+5oV3Ltl3hOU+zowGvGkZOjRFj1iJZA+2iNs=
Subject key identifier: 26:F3:32:E7:7F:C3:7E:89:38:BA:45:5E:B1:5E:3D:C0:26:57:CF:BE
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number: 0100
Signing time: Wed 25 Mar 2026 05:20:05 +0000
Manifest this update: Wed 25 Mar 2026 05:20:04 +0000
Manifest next update: Wed 01 Apr 2026 05:20:04 +0000
Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: BIPSHDiV/VrZkUVw/BODZC4zIFifYbSPISbxpokVhLc=)
2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: jxhoNvhc+MHJtTBpxrrKXdZBqlL2SJCnjwyJaGHJC6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Validity
Not Before: Mar 25 05:20:04 2026 GMT
Not After : Apr 1 05:20:04 2026 GMT
Subject: CN=69c37085-369f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:12:ed:06:56:ff:1b:cb:66:31:67:3b:b1:
59:ae:72:62:ff:7b:55:8b:93:5a:45:66:5e:9d:b1:
3a:0e:33:21:e5:95:dd:01:88:42:06:91:9c:80:8a:
b1:a2:57:53:2f:d8:61:a0:9b:15:ef:93:dc:ab:23:
58:b9:c9:89:2d:fd:a3:d8:c9:41:5d:5a:0c:a3:27:
6e:59:ce:ed:fb:41:73:7b:07:1b:eb:ab:0e:f7:ea:
30:d3:cb:48:c5:42:68:fa:3f:d8:66:fd:ce:ca:cd:
40:aa:23:6d:0a:38:c3:7e:c5:a2:55:b8:d4:bf:93:
e2:e1:c8:5b:12:21:3e:98:93:3a:10:09:0a:77:8e:
ad:c3:b7:49:66:90:a0:1d:58:fb:be:f3:e1:2e:9b:
2b:6b:11:c2:5a:2f:a4:88:bb:a0:d1:a4:af:1d:7d:
a0:ce:32:e2:35:b3:00:dd:cb:16:6b:66:90:98:d5:
f6:ef:92:72:81:82:fb:10:68:6b:fe:28:9c:bb:7a:
83:7c:95:37:ce:bf:3c:79:15:b7:9c:8a:3e:56:96:
33:ee:d6:67:18:94:5e:30:ee:da:a1:ce:db:29:5d:
76:cb:b7:ac:0e:fe:26:72:35:95:92:4e:81:2f:7b:
ef:ae:91:a6:98:3d:8d:0f:96:d3:4a:bc:2a:c0:9e:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F3:32:E7:7F:C3:7E:89:38:BA:45:5E:B1:5E:3D:C0:26:57:CF:BE
X509v3 Authority Key Identifier:
keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ca:63:26:d3:70:be:f8:15:a5:be:07:fb:03:1c:0f:a2:ce:
65:68:5a:1d:82:a2:86:5f:99:ef:70:41:8f:56:71:bf:4a:c7:
9e:d7:45:f1:f9:80:3b:56:c7:94:eb:c8:e4:d4:77:2a:13:2c:
ea:37:5f:17:8f:49:d4:d9:ea:bd:b3:57:3b:3a:5d:1d:c8:7f:
5e:4a:8f:dd:03:36:cd:89:f3:12:36:bc:1c:ac:e4:91:30:bd:
83:bc:71:fe:3b:12:71:6b:6b:20:48:a2:24:9b:ca:a0:31:71:
37:5a:a2:a1:89:d8:e0:62:0a:e9:fb:70:5b:6d:4b:9f:be:e2:
27:18:1e:26:6b:75:95:e8:11:ae:7d:f1:ef:6f:de:34:68:d4:
ef:13:22:08:46:a8:ec:40:43:96:49:62:f1:0e:86:4b:5f:7f:
3c:57:1b:3e:4d:3c:ea:55:26:7d:a1:61:01:df:9b:93:f4:4a:
de:8a:29:30:f7:33:6d:0c:cd:c7:11:a8:f9:bb:06:7f:cf:cd:
e2:0f:12:a7:cb:c4:59:b9:ae:d7:67:f9:8e:fa:9d:76:8b:ec:
f3:9c:ca:1d:29:70:0e:06:99:38:80:5a:51:13:80:d8:e6:95:
57:6c:d4:18:41:d3:f0:3c:26:97:cd:1e:67:39:05:ab:3d:15:
f0:24:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:39 2026 by rpki-client