
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier: SQZUW9sX2FFYdwDD+uinC4//NazUVUBg4P5VQ6w5TXU=
Subject key identifier: 18:69:61:8F:76:D8:6C:BF:E6:18:11:1D:6F:92:A2:EC:B5:5C:BB:F3
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number: 014C
Signing time: Wed 25 Mar 2026 04:25:27 +0000
Manifest this update: Wed 25 Mar 2026 04:25:26 +0000
Manifest next update: Wed 01 Apr 2026 04:25:26 +0000
Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: vUopJFd73h4uGg8owpxI7gFNk95lNGiuEzcVbWmLpPY=)
2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: 6H8TGs6GoQ4vBmeljzoTgBms2GLqQP8yLJrxq9ef4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Validity
Not Before: Mar 25 04:25:26 2026 GMT
Not After : Apr 1 04:25:26 2026 GMT
Subject: CN=69c363b7-d94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:3b:de:cf:84:8f:43:b9:da:d6:ed:cf:3b:
f4:9f:ac:0d:a7:85:58:3d:6f:75:89:ea:90:11:d1:
db:72:c5:28:fd:40:5b:30:89:b8:3d:e4:1f:df:dc:
57:90:bb:27:14:f9:b9:87:12:38:2b:e9:2b:2f:3d:
d2:85:8c:51:d8:35:fd:62:9d:93:c0:19:28:44:e1:
b8:77:5c:00:c0:da:2c:36:f3:49:eb:70:d5:26:81:
85:d9:9b:80:b4:cb:ea:41:15:96:60:cc:24:d4:cf:
e6:a2:de:ed:3e:67:32:9f:72:2c:06:fa:93:aa:a7:
3a:c2:bf:07:e5:8a:ee:d8:30:3d:98:34:36:4b:5b:
d3:33:32:8b:80:f6:86:48:67:d0:ed:4e:6c:32:62:
19:66:c7:09:32:60:76:09:2f:ac:3b:82:0b:b4:12:
5b:f3:ab:b2:16:33:f0:eb:d5:18:2f:83:8b:31:0c:
6d:7f:0e:44:1a:ce:9c:25:72:ab:b8:7c:34:88:61:
33:b3:e6:be:65:f9:61:90:22:56:89:08:7d:0b:c8:
22:2f:c2:43:ff:9d:9b:19:fc:6a:80:45:37:e3:dd:
db:b9:b5:71:5b:a2:1c:f5:30:bc:c8:b6:16:bf:7e:
c8:f3:74:e3:9b:06:e5:25:2c:36:8d:eb:49:10:fc:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:61:8F:76:D8:6C:BF:E6:18:11:1D:6F:92:A2:EC:B5:5C:BB:F3
X509v3 Authority Key Identifier:
keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:a6:30:b6:cc:e5:82:51:da:26:d6:2e:a0:a2:77:88:7c:
8d:33:49:92:c4:05:86:ec:96:95:e4:cc:54:6d:3d:a0:11:16:
52:b5:b6:e8:04:a8:16:79:ce:08:c0:e8:77:9a:ed:45:36:ef:
ed:5f:56:2f:52:ad:9e:3d:fb:3b:42:e0:59:0a:c8:2f:86:ae:
41:c2:3f:ea:31:18:68:70:76:bd:4a:cf:ff:a3:01:bd:09:f2:
f8:bd:2a:05:0b:11:34:e3:f3:2f:1b:a7:2a:38:3e:28:7e:22:
b4:04:61:94:f1:46:fb:52:26:36:fe:be:0f:0c:32:8d:29:ab:
8c:32:c8:a1:83:6d:b5:c5:a2:8e:ed:06:b5:21:20:73:e1:ef:
63:0d:21:5f:54:02:68:3d:50:e2:d8:99:70:8b:1f:82:d1:a1:
73:a6:a6:a1:e3:e3:0b:3f:49:f5:f6:4e:7a:63:e8:35:ef:70:
77:f8:13:9d:cb:59:af:3d:0b:fb:7e:34:62:da:ba:f6:83:6d:
9e:b2:34:b7:08:79:66:73:b5:77:38:b2:53:79:79:ae:a6:98:
b6:87:13:2a:32:70:69:29:30:e1:1c:26:29:8b:1a:37:6d:85:
3f:09:34:fc:9c:17:db:bf:be:6e:58:c1:c9:e1:15:10:7b:bc:
fb:20:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:33:25 2026 by rpki-client