
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: C3+hPY4IIx0zJAZmLxYlXq+rLCmY+lDt9vsXWcZPXXI=
Subject key identifier: 53:09:9A:94:27:12:95:4F:16:CF:A9:3C:42:F3:EB:8A:D7:B8:EB:12
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0DCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0D81
Signing time: Tue 24 Mar 2026 17:55:00 +0000
Manifest this update: Tue 24 Mar 2026 17:54:59 +0000
Manifest next update: Tue 31 Mar 2026 17:54:59 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: EJqY2J506N5vczfZl+4Bogaric3noA9fxtkSi9ur/Tw=)
2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: QjZN8PsVpzkoWIICmligd2O6gIegIT1gafBVCPi+v+w=)
3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: +gB29cGq/h+v+MdgQRGvCd66xqfyWOjfVCA6l6TXb64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3532 (0xdcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Mar 24 17:54:59 2026 GMT
Not After : Mar 31 17:54:59 2026 GMT
Subject: CN=69c2cff4-c6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:39:4d:8f:05:33:d6:ca:5f:be:04:b5:6f:
4f:74:46:a4:f7:0e:2f:ad:c8:78:a7:91:da:48:88:
08:16:3f:1b:ce:cf:6f:9c:dc:26:95:ef:a6:f9:79:
20:10:14:33:fa:69:08:fc:2e:6f:11:43:39:13:fb:
55:74:6e:6c:a8:4c:13:68:16:d5:fc:ea:ad:09:bf:
29:3a:87:5a:7e:c4:4e:a9:d2:fd:63:39:8a:a0:51:
5c:b7:14:7e:e8:40:6f:23:23:01:37:42:62:ba:de:
3f:ff:00:53:35:6c:43:eb:ac:37:47:bf:45:84:86:
4e:ed:4f:49:01:bd:f2:ef:7f:b2:7d:97:06:ba:27:
88:7d:c7:30:91:4e:74:5c:66:be:b6:a0:ac:29:6f:
e2:1e:95:15:f1:20:c0:fd:75:43:74:63:29:9b:9d:
6a:5e:f3:77:bd:ca:06:64:d9:f8:68:a3:82:47:71:
e6:26:f8:77:60:e4:43:a3:97:67:ff:e5:7f:73:77:
d8:36:da:97:d6:7c:49:93:3f:af:6e:1c:d3:2c:4e:
11:ad:fd:11:af:47:92:9c:24:0d:3f:20:c7:c0:9e:
ea:9a:f8:18:5c:9c:d1:3d:ea:81:d8:8e:70:46:08:
76:bc:49:1a:f9:e2:6a:2e:51:2a:cf:7f:2b:50:92:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:09:9A:94:27:12:95:4F:16:CF:A9:3C:42:F3:EB:8A:D7:B8:EB:12
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ca:22:ed:c8:bb:63:a5:93:e3:f8:65:19:29:77:c4:02:5b:
1a:2f:49:5f:3a:e9:bc:91:2c:ac:0d:79:4d:21:d8:b8:3a:b5:
af:fc:8f:35:18:62:26:98:d1:88:ea:67:54:fb:43:3d:e2:7a:
00:ea:79:05:67:ff:7d:cb:22:d2:31:e7:5e:e7:7f:75:9d:7d:
8b:0c:9d:61:e0:98:f9:20:f8:0d:22:1d:87:30:0e:9b:88:2a:
48:99:08:d1:8e:49:2e:c2:4e:0f:2f:16:25:77:b4:09:c0:4f:
4a:d7:45:38:8e:3f:b6:d1:35:ba:c3:76:63:11:00:65:32:de:
af:cb:14:f8:2d:3c:a2:17:37:46:15:7b:ca:58:32:8d:10:7f:
70:99:36:69:86:f5:c9:64:c5:45:d4:ef:3a:c9:48:2a:6e:21:
6a:5b:80:1c:4f:13:d8:79:61:81:4f:9f:6c:2d:cb:78:2a:46:
ee:c2:16:5c:b1:e0:ba:9a:2f:2c:8f:e3:39:89:43:51:42:1e:
53:c7:47:49:e4:ab:6e:3e:24:96:61:4f:f7:96:72:99:aa:ab:
8b:7b:07:8f:64:1b:33:aa:70:80:1e:71:e8:06:74:61:af:90:
42:5c:fb:89:85:0c:aa:75:d2:f7:ca:5a:fd:64:c0:df:59:c1:
6c:9e:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:15 2026 by rpki-client