
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft
File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json)
Hash identifier: M8xI0IzlxdWL83M7hwdanR+1Pk3eTEicCz150neojgM=
Subject key identifier: 7C:F1:00:A8:5C:38:51:DC:67:0E:2B:6D:B9:EE:2A:B0:99:A2:A8:B8
Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7
Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft
Manifest number: 01F7
Signing time: Wed 25 Mar 2026 02:33:18 +0000
Manifest this update: Wed 25 Mar 2026 02:33:18 +0000
Manifest next update: Wed 01 Apr 2026 02:33:18 +0000
Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: C3EBSLfJlQBYuhw9N0OqfeZOoelmMRauUn9wKWHl8ds=)
2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: PZSS0Lk/xCF/5ioQ5ULIhRmgPu74E/AEMi2/vsULm5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl
rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7
Validity
Not Before: Mar 25 02:33:18 2026 GMT
Not After : Apr 1 02:33:18 2026 GMT
Subject: CN=69c3496e-a2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:8e:f5:3c:94:0a:57:ca:52:1a:df:31:96:
86:56:b9:3a:44:dd:bf:40:86:cd:4b:57:9f:dd:a3:
e9:81:01:d7:f6:91:4d:e5:10:32:9a:43:58:4b:47:
01:0b:96:18:c1:98:02:99:43:0f:65:ab:f4:dc:48:
8d:d0:fc:1b:44:b1:c7:61:8f:88:28:86:ee:ab:eb:
a5:44:85:bd:34:86:c6:ef:4c:67:bc:8b:58:71:2f:
6d:9f:0a:53:4b:a2:03:75:66:50:66:99:35:ca:be:
8e:f5:58:67:6d:fb:14:24:a7:cb:58:00:32:fb:1f:
86:60:3e:ab:f5:f3:20:02:a0:90:03:08:b1:4e:8c:
fb:a4:66:e4:14:33:83:cc:6c:14:88:c2:ca:9c:68:
4e:5b:65:bf:b3:5c:79:84:26:1a:db:a5:02:c1:59:
05:b2:34:b2:b1:9a:84:f1:5e:d9:07:ec:16:99:47:
b0:e2:de:23:26:7b:ee:be:2f:6e:3c:46:dd:37:76:
93:ac:96:1a:69:aa:8e:23:bb:db:c7:76:ab:82:a1:
ed:a9:a3:ae:68:cd:c0:b3:d8:31:60:e6:6d:d8:66:
66:02:4a:57:1c:ec:1b:62:14:15:ca:96:f1:bf:06:
ec:56:cb:0f:0b:c9:be:bd:fd:d5:9b:6e:77:fa:ac:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F1:00:A8:5C:38:51:DC:67:0E:2B:6D:B9:EE:2A:B0:99:A2:A8:B8
X509v3 Authority Key Identifier:
keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:87:76:41:dd:d5:f2:33:bf:7b:55:65:3c:ba:74:06:87:51:
d0:12:69:54:ec:3e:59:8c:91:6d:c0:64:33:00:92:77:45:4e:
c9:05:70:f2:5c:79:07:be:17:91:1e:64:4f:4d:2b:4a:07:85:
15:4e:31:0d:33:e6:0b:db:4a:b7:ef:b2:5d:6e:ee:99:4f:5a:
ed:f7:6e:87:7d:ec:8a:86:38:b9:8a:20:85:a6:f2:35:d2:b2:
9e:51:31:80:57:81:ae:57:ce:06:29:fa:fc:49:f9:34:5f:ad:
49:4d:69:36:7d:e9:8f:72:7c:c9:15:64:89:06:20:36:ee:32:
b2:5c:b9:3b:98:a9:06:ff:1b:bc:d1:19:73:43:09:1e:21:61:
c7:f2:05:04:80:f5:59:0d:bb:da:e8:15:ad:4f:94:75:3a:b9:
4f:bf:ba:a1:da:2b:45:92:77:7f:8c:3c:80:3d:8a:06:5e:ad:
1b:9c:00:50:9e:fc:a8:ed:c9:b7:fb:35:ee:88:85:7c:87:6c:
70:89:af:65:ed:6b:1f:14:6e:4a:e8:78:40:69:59:ec:fb:ff:
d9:34:8b:f7:39:06:08:90:fc:c7:83:b9:52:e7:25:c6:ba:fe:
7f:00:5b:e5:dc:c8:75:b7:4c:62:cf:3b:18:8b:f5:7b:ed:b1:
05:a1:f3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:22 2026 by rpki-client