
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier: icqOVHJsn9GmkkAx7uZFVEoV5DQaBVOiNyM3s0s1BQ0=
Subject key identifier: 88:B9:3C:A8:A8:C5:32:8C:4D:D1:EC:B9:78:8B:18:5F:DB:4F:95:66
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number: F2
Signing time: Wed 25 Mar 2026 05:33:47 +0000
Manifest this update: Wed 25 Mar 2026 05:33:47 +0000
Manifest next update: Wed 01 Apr 2026 05:33:47 +0000
Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: bJMRzdlN4igT/6tJ/oIbY62bkVJRq9yIOPxNhZd1pnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Validity
Not Before: Mar 25 05:33:47 2026 GMT
Not After : Apr 1 05:33:47 2026 GMT
Subject: CN=69c373bb-a21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:da:e5:59:f0:86:12:3e:38:02:64:b4:fe:
90:de:ff:cc:7a:de:39:09:66:bc:af:b4:c4:24:18:
3e:6b:50:e1:01:d7:2d:14:10:5e:28:ca:a3:50:ec:
02:46:cc:ad:65:74:4f:b8:f4:5a:a1:21:89:00:c1:
dd:80:23:f6:0c:0b:d9:f9:3d:2d:c3:41:5d:68:84:
fb:08:8c:90:97:5d:f1:54:3d:d6:50:72:10:7e:33:
ef:9d:ab:47:30:7d:dd:8b:a3:c5:7f:45:9c:97:e2:
c2:68:5e:ce:f0:87:b3:63:a3:39:8d:b8:8b:28:18:
b7:fa:9e:6f:39:8c:06:64:55:e8:eb:c1:6c:f3:60:
8c:5b:9d:9c:2c:af:9a:d0:d1:be:44:3c:30:bb:e6:
05:58:a6:78:48:c9:03:2f:5d:6b:ae:73:a3:87:0b:
d4:d5:c2:ed:2b:47:eb:bc:5c:4c:75:6a:6f:6b:04:
0f:5a:cb:dc:ff:a5:f1:3c:40:78:94:78:41:22:b3:
3d:44:28:75:66:10:19:f0:27:40:2e:83:a6:1c:ad:
fc:ff:14:90:d6:42:eb:cb:70:1a:8a:ca:57:d7:4b:
db:a2:f4:df:c3:30:20:3a:29:2b:4b:cc:15:b7:2d:
19:56:67:fc:d5:d1:e5:50:a6:01:d2:47:92:a9:56:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:3C:A8:A8:C5:32:8C:4D:D1:EC:B9:78:8B:18:5F:DB:4F:95:66
X509v3 Authority Key Identifier:
keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:2c:60:20:70:26:63:47:f3:35:0c:2e:0d:82:2b:a2:63:db:
f2:30:18:6a:b8:f6:1b:46:b1:6d:3c:4b:8a:1f:68:85:7d:7a:
68:5c:3c:37:40:ba:f9:6d:96:a6:f0:13:46:0a:5a:15:51:c8:
04:68:f4:72:11:40:c1:e7:bf:85:67:42:12:b8:dd:0a:c9:ef:
9d:21:3c:8a:5b:32:e8:5c:71:73:a0:22:70:b9:f0:0e:18:29:
9f:18:3b:de:66:bd:a5:9b:7b:0f:29:36:e2:e7:52:05:9f:94:
e1:63:af:76:4d:d6:a2:a4:21:5e:42:95:ad:5e:91:0a:8f:90:
db:8e:de:f3:7a:27:ef:ca:1d:8b:bb:0d:28:14:75:e4:54:bb:
84:19:a9:77:3e:9f:31:42:2f:b0:cb:3e:c3:4f:2d:6a:65:b3:
2e:51:90:ae:48:f6:b4:62:4b:32:46:85:64:6d:77:bc:78:0f:
cb:fa:78:12:90:6c:16:b3:54:e5:54:0f:60:90:da:a5:b0:7e:
a0:54:af:97:3c:f1:73:df:b3:a6:7f:f4:9c:f7:02:cd:c5:19:
00:65:96:ec:bd:4f:04:41:8f:2a:24:1b:38:fa:88:9a:8c:2d:
f9:03:9d:1c:fb:33:8e:14:57:3c:20:1c:a5:5b:46:70:35:da:
ec:0d:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:27 2026 by rpki-client