
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File: qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier: oAr5En+ErDHRqS5fj40E5eEOjwbP6kxJktHM7O0d8qw=
Subject key identifier: 48:2B:F3:54:B1:6F:E2:33:9F:33:43:DA:C3:F2:15:0D:9F:AD:86:86
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial: 08EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number: 08BE
Signing time: Tue 24 Mar 2026 20:14:03 +0000
Manifest this update: Tue 24 Mar 2026 20:14:02 +0000
Manifest next update: Tue 31 Mar 2026 20:14:02 +0000
Files and hashes: 1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: CYydL79mOANC03AlAEqJlCBZmthfrbb8q6oO/3id7ps=)
2: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: ANvPyrpt4+aMfuxQf395OtEz75spyBRAaKqNhIGXldo=)
3: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: tazQVZXkAFkDAuLygNbIRhAUk4EIl5TN/X+HKanbw0o=)
4: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: qLlqNwlaPLdL74Mt7s2Fed23RK/fRGvf/YX6d5A2kU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Validity
Not Before: Mar 24 20:14:02 2026 GMT
Not After : Mar 31 20:14:02 2026 GMT
Subject: CN=69c2f08b-1745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:ff:c8:2b:76:f3:28:02:d6:5a:25:ac:7d:
c1:cd:3b:2e:10:47:4e:80:b3:40:2a:05:c4:ed:a8:
f1:fd:c2:f6:99:bb:b2:09:86:b6:9c:b2:73:a5:4c:
89:a6:39:7b:f7:2f:24:73:e6:02:e0:05:de:40:c8:
d0:9c:f5:9d:ab:a2:26:4f:c0:51:b5:26:ff:bc:97:
2c:82:cc:26:6d:34:c1:f5:c8:dd:37:c7:ad:d1:48:
6d:41:2e:19:7f:3d:32:3d:1f:c0:9b:ce:d6:ef:6d:
16:a7:17:1e:be:1b:a0:ed:e2:60:8a:5e:cb:43:92:
ca:89:0b:c9:91:dd:5d:7a:d9:b5:e8:89:77:50:49:
72:8e:10:04:e7:6d:60:d3:10:6f:24:b5:ec:c4:fc:
2e:22:4c:eb:ff:47:8e:32:73:2d:59:bd:a5:aa:b2:
8a:bf:8a:f5:01:b6:5e:a6:c2:fd:ac:bb:87:d7:8e:
7f:fd:7f:83:9f:08:03:b0:ef:58:b9:41:9b:0a:28:
e7:ea:d4:11:1d:4b:b6:3c:24:01:47:a2:bf:e7:ac:
9e:67:93:ac:ab:08:0e:8d:80:66:35:82:9a:42:3c:
62:71:4c:e6:9c:b0:e8:c4:e6:f1:6c:7c:5b:e5:0c:
8a:93:56:84:93:17:70:17:62:70:9d:71:ba:81:89:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:F3:54:B1:6F:E2:33:9F:33:43:DA:C3:F2:15:0D:9F:AD:86:86
X509v3 Authority Key Identifier:
keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:6c:d2:89:34:23:83:11:af:b0:91:f6:2c:40:3f:6f:77:78:
98:bc:16:5b:15:97:ea:7d:98:78:b3:20:41:b3:e0:3d:5f:c3:
8d:76:9c:10:f7:f1:62:fb:f8:10:13:35:68:19:40:01:42:12:
a4:6d:a2:7b:1d:71:f7:b5:77:42:13:a7:72:3d:63:0b:a2:b8:
e5:82:fc:cd:6d:8b:53:2a:ee:83:d0:cc:9f:f5:ff:30:df:a9:
62:5a:b0:33:5e:a2:91:97:ee:50:17:ff:ff:14:94:d9:64:01:
f4:b8:ae:c0:66:47:32:88:c1:77:a5:83:15:42:13:21:74:a4:
21:0f:0d:89:5a:dd:72:39:a9:32:8c:38:b3:60:90:02:9e:01:
dd:17:57:0e:cd:65:0a:fd:02:43:22:88:cc:89:36:de:71:34:
2d:25:03:5e:17:4f:ca:bf:cd:cb:00:83:4d:e7:9f:40:3d:1e:
89:3f:41:e4:6f:ed:86:ca:32:84:80:22:10:13:89:4c:0d:80:
24:b9:c0:ac:2c:17:2b:d8:21:ed:c9:6f:7c:31:78:c1:59:76:
ba:c2:fe:8a:78:cc:f8:17:61:87:70:e1:36:4f:2e:4d:57:ce:
7b:82:a1:98:9a:8b:db:78:51:4c:d3:e4:e9:a8:9d:8c:23:a6:
3c:11:60:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFQjAxMTAvBgNVBAUTKEFBQTYyREI0N0YwMTJCMjZERDg2OThFMkNDMzVERThG
Mjk0Mzc3NjEwHhcNMjYwMzI0MjAxNDAyWhcNMjYwMzMxMjAxNDAyWjAYMRYwFAYD
VQQDEw02OWMyZjA4Yi0xNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmoH/yCt28ygC1lolrH3BzTsuEEdOgLNAKgXE7ajx/cL2mbuyCYa2nLJzpUyJ
pjl79y8kc+YC4AXeQMjQnPWdq6ImT8BRtSb/vJcsgswmbTTB9cjdN8et0UhtQS4Z
fz0yPR/Am87W720Wpxcevhug7eJgil7LQ5LKiQvJkd1detm16Il3UElyjhAE521g
0xBvJLXsxPwuIkzr/0eOMnMtWb2lqrKKv4r1AbZepsL9rLuH145//X+DnwgDsO9Y
uUGbCijn6tQRHUu2PCQBR6K/56yeZ5OsqwgOjYBmNYKaQjxicUzmnLDoxObxbHxb
5QyKk1aEkxdwF2JwnXG6gYlzOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEgr81Sx
b+IznzND2sPyFQ2frYaGMB8GA1UdIwQYMBaAFKqmLbR/ASsm3YaY4sw13o8pQ3dh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC82NUQxREIyQ0RB
RUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5YmRocGppekRYZWp5bERk
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FxWXR0SDhCS3liZGhwaml6RFhlanlsRGQyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEVCMC82NUQxREIyQ0RBRUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5
YmRocGppekRYZWp5bERkMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhmzSiTQjgxGvsJH2LEA/b3d4mLwWWxWX6n2YeLMgQbPgPV/DjXacEPfxYvv4
EBM1aBlAAUISpG2iex1x97V3QhOncj1jC6K45YL8zW2LUyrug9DMn/X/MN+pYlqw
M16ikZfuUBf//xSU2WQB9LiuwGZHMojBd6WDFUITIXSkIQ8NiVrdcjmpMow4s2CQ
Ap4B3RdXDs1lCv0CQyKIzIk23nE0LSUDXhdPyr/NywCDTeefQD0eiT9B5G/thsoy
hIAiEBOJTA2AJLnArCwXK9gh7clvfDF4wVl2usL+injM+Bdhh3DhNk8uTVfOe4Kh
mJqL23hRTNPk6aidjCOmPBFgjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:46 2026 by rpki-client