
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
File: -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json)
Hash identifier: XuTjnMvQVM3Bwhknch2yhFJVgOx0Tgw0tojVSO2ZFBY=
Subject key identifier: 96:6E:96:3B:B3:A4:AE:5A:19:A1:F9:45:A0:F8:91:C6:A0:C4:82:39
Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
Certificate issuer: /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Certificate serial: 0711
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
Manifest number: 0707
Signing time: Tue 24 Mar 2026 21:39:03 +0000
Manifest this update: Tue 24 Mar 2026 21:39:03 +0000
Manifest next update: Tue 31 Mar 2026 21:39:03 +0000
Files and hashes: 1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: Sjrr4ckUk/PfpL3T+L73tbxhwGG48p2mzNM9BS7dBlA=)
2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: NGP8ke2DkEB3hYpbUVG6UTVU7Lf4hrBe8aQecdq/b3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809 (0x711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Validity
Not Before: Mar 24 21:39:03 2026 GMT
Not After : Mar 31 21:39:03 2026 GMT
Subject: CN=69c30477-796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:7d:aa:ba:96:41:57:72:ac:f9:d9:28:88:
61:74:8d:a0:20:75:1f:09:83:58:f6:bd:78:e1:bb:
0b:3f:9e:2d:f5:cb:5b:b6:85:fa:13:2f:f5:d5:07:
3c:20:96:05:71:0d:4f:d5:de:54:3a:70:b6:90:89:
2a:c0:ad:53:57:26:8a:5f:4d:d2:82:c2:86:77:6e:
39:44:6a:4d:f6:4e:b7:fd:9e:0d:8d:ea:83:e4:ca:
2b:c8:f8:54:f7:2f:bd:04:49:36:09:91:b5:20:ee:
df:11:dc:8e:11:d6:e7:1f:bb:04:1e:3c:8b:19:42:
17:c7:35:d6:e0:e5:56:b6:38:27:ca:75:57:7a:72:
73:9e:bd:2e:b4:9e:44:5f:7e:1e:16:19:51:79:18:
d7:8a:c5:2b:0c:e3:99:a5:b0:77:11:e9:27:d2:b8:
c3:f8:28:d7:89:53:9e:0e:2b:20:9a:87:0a:54:8d:
ce:f8:86:d2:8d:b0:3c:e4:c7:2b:02:79:bc:e7:d9:
97:8b:d1:14:9d:78:be:54:27:fa:1b:c3:1d:56:2f:
ec:84:de:8a:e1:f2:9b:4b:67:2d:38:99:c7:c9:4d:
e1:68:55:6a:e0:0f:8a:8c:cf:ec:65:6e:73:c4:b1:
71:9d:24:3e:7a:c1:c8:23:0e:53:b4:cc:9a:a2:ab:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6E:96:3B:B3:A4:AE:5A:19:A1:F9:45:A0:F8:91:C6:A0:C4:82:39
X509v3 Authority Key Identifier:
keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:64:1b:03:93:0f:a5:26:f7:64:15:21:03:0d:d7:64:76:81:
87:70:c1:03:8b:3b:94:c5:a0:d6:e7:d6:75:fd:b7:6d:ac:d5:
8b:16:c4:63:a0:88:38:b5:28:e9:57:f9:27:c9:97:66:33:f2:
17:98:2d:62:27:fe:fa:19:88:e0:79:39:b5:7d:8f:0a:05:fb:
08:52:14:b1:6d:8e:d2:00:d8:9b:94:8f:11:32:1a:15:7b:c7:
ee:28:6e:b0:82:23:e7:54:2b:75:1a:10:04:ed:67:5d:92:e2:
66:80:82:86:46:db:ce:7b:39:c4:12:e9:e9:04:5a:33:6d:cf:
e4:b2:74:d8:d2:40:79:40:98:a5:07:51:fd:7e:b8:e2:72:a8:
c2:23:f9:b1:79:68:cc:a3:c4:fb:19:72:ab:45:13:a7:5d:e1:
6a:e8:bd:5d:fc:e2:98:48:9d:82:4e:45:6b:af:0f:e9:69:cf:
be:e8:ad:48:f3:86:6a:c0:3f:fe:a3:33:70:d2:f5:19:a8:e5:
3f:a2:c6:4d:d3:f2:b5:dc:82:45:a5:71:61:aa:77:8c:c4:18:
da:bd:55:bb:6c:17:13:eb:54:fc:f0:18:0d:2f:ab:10:f4:24:
36:61:f2:75:93:94:d9:7f:79:ad:9b:84:24:f5:a6:bd:dd:b5:
da:15:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:18:37 2026 by rpki-client