
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier: ulfG8DDsyjfLxhIfs/cVlIBULWy6ZW5v6PuAEc4iUz8=
Subject key identifier: EB:BF:5C:A6:D4:DF:08:12:B3:73:FD:1E:49:7D:BF:5D:AC:7C:A1:FC
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 088B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number: 0883
Signing time: Sat 28 Feb 2026 20:54:51 +0000
Manifest this update: Sat 28 Feb 2026 20:54:51 +0000
Manifest next update: Sat 07 Mar 2026 20:54:51 +0000
Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: j3xSPSzPUIaSoIqtyCyTXbQhdeTpNT2d7wT6q529TdE=)
2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: UfZS2K3maG4LNqHTiPHXDFG7crLVwGTXsGf24GudMzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187 (0x88b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Validity
Not Before: Feb 28 20:54:51 2026 GMT
Not After : Mar 7 20:54:51 2026 GMT
Subject: CN=69a3561b-831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:1f:6f:2c:e8:55:06:5a:62:a7:13:3f:26:
c0:35:11:3c:2f:0a:c1:34:58:a0:e5:cd:f7:3f:11:
81:97:ae:c7:03:69:cb:27:92:cb:61:ca:70:32:5a:
0f:3c:7a:f6:5e:6b:b3:86:ae:0a:08:5a:84:2d:19:
86:8a:85:60:69:c2:b7:60:86:4c:2e:b0:2b:80:5e:
9e:0e:55:53:92:2b:15:54:2e:86:51:99:81:ae:18:
7e:73:dc:49:5c:fe:30:7c:a9:74:d9:ff:66:1c:35:
5c:5e:3c:22:e0:c6:10:d1:95:b9:7d:66:a0:b8:c5:
c7:2d:a4:bc:64:11:64:07:d7:20:b4:81:bf:60:de:
58:ca:66:c5:5f:ae:cb:97:75:69:21:af:bd:f1:47:
ea:66:ca:1c:0e:6e:75:0c:8e:84:f8:ff:5b:e2:a8:
56:52:16:93:41:ba:a2:91:08:2a:14:0b:47:9e:21:
54:15:c8:e9:88:95:b5:8a:d8:53:88:d9:54:cd:12:
1a:c3:25:29:b9:6f:b2:31:e5:04:c3:23:82:d5:71:
94:bf:22:0b:3b:6d:18:8b:1e:d1:c5:8b:75:b3:cd:
9b:c3:aa:98:4e:99:4f:3f:ba:3e:b0:6a:20:5e:c6:
ea:c6:06:7a:4d:81:38:c1:f0:fe:c1:6a:15:a8:55:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:5C:A6:D4:DF:08:12:B3:73:FD:1E:49:7D:BF:5D:AC:7C:A1:FC
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:3c:7b:21:91:10:ed:34:c6:d1:02:62:d1:07:fb:09:73:77:
32:6b:49:87:f7:01:1c:76:6a:75:bd:c9:37:c4:44:2c:33:44:
e2:45:b4:8b:3f:7a:31:d8:fa:6b:12:7d:66:65:5f:24:33:e5:
3e:7d:9f:02:05:05:06:48:88:71:b7:34:8f:52:dc:9a:86:c9:
90:72:36:8a:81:16:6c:55:df:a5:a0:fc:52:e5:ab:e6:2b:e7:
8a:67:e3:54:a8:77:86:a2:6d:39:61:ce:76:bd:82:92:5d:45:
03:4a:26:24:28:88:3a:60:4c:97:b5:fd:9e:6a:67:c3:f8:eb:
9c:99:1a:07:6f:67:b5:50:ff:f6:fc:aa:3a:d7:17:46:ad:3b:
02:ac:e4:c5:9d:48:b4:60:7e:a3:51:30:fb:23:7c:3f:fd:8f:
01:d9:9c:a0:79:67:98:be:c0:ec:bb:8a:8e:19:e9:a9:a9:02:
77:8e:a9:b0:85:ec:54:ab:06:c5:11:cf:45:dc:c4:ad:90:dd:
a5:ee:ef:5e:85:60:b6:56:25:ca:32:cc:aa:4d:f7:95:7c:bf:
78:e3:4a:37:1b:b0:2c:8a:43:26:10:ad:ab:a8:ba:9e:99:fc:
70:59:9c:79:bf:36:89:2e:f9:40:a1:96:6b:84:90:05:e9:91:
27:d3:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:12:29 2026 by rpki-client