
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier: aeH3o13bqIUO6UJxd3ko+w+mFR16aydVvWReinvt+Mg=
Subject key identifier: 32:C9:77:DC:56:73:9D:C5:97:55:45:07:8F:34:3B:70:9F:FC:00:A2
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer: /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number: DF
Signing time: Sun 01 Mar 2026 22:59:10 +0000
Manifest this update: Sun 01 Mar 2026 22:59:09 +0000
Manifest next update: Sun 08 Mar 2026 22:59:09 +0000
Files and hashes: 1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: 7U8E1zD/puWljV3OpkowHHdtRnY1E7/hnOsngG+/580=)
2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: 8tYgQgRp4d2ZPoYvXeSoALvp6R7P/24619a0Wb2QQ3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Validity
Not Before: Mar 1 22:59:09 2026 GMT
Not After : Mar 8 22:59:09 2026 GMT
Subject: CN=69a4c4be-a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:9a:92:c6:ca:86:c4:b2:5c:af:ca:f8:8c:
de:71:6c:97:89:79:ce:32:5e:8d:13:19:b6:17:3b:
75:89:27:45:d2:b1:19:4e:62:89:77:30:7c:c5:91:
34:8c:4d:a3:15:1e:44:6f:b8:18:f8:06:bc:60:9d:
b7:0d:58:a3:54:c4:89:0b:57:27:0a:68:10:03:70:
16:0b:a4:9c:a8:08:8e:f8:55:23:8c:d4:93:34:50:
fc:18:f5:b0:11:e3:27:6d:61:9c:76:af:1d:62:b8:
b9:0c:59:b2:3c:fd:79:3f:d4:92:19:ed:d5:a4:18:
a7:e0:5b:9a:f1:39:22:bb:e8:f4:4e:35:13:72:5f:
f0:c2:01:4f:e2:36:2b:4e:7a:b9:96:1d:b7:1e:be:
a9:c1:02:c0:73:ba:13:87:d1:d7:06:22:6f:57:74:
ab:9e:e4:9a:4e:9d:90:b9:57:a3:35:f7:d9:c9:f0:
b3:69:67:22:e6:b2:4c:51:82:b8:53:ab:ac:0b:3f:
c0:72:56:e3:db:f3:59:20:00:c4:e1:3d:5e:f8:12:
b3:31:5e:91:8e:df:01:a1:58:da:27:e9:f3:db:92:
cf:01:78:a0:00:b5:9f:6e:cc:a4:65:c3:be:61:6a:
49:58:37:35:11:64:16:c1:c5:01:1b:8e:d3:48:64:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:77:DC:56:73:9D:C5:97:55:45:07:8F:34:3B:70:9F:FC:00:A2
X509v3 Authority Key Identifier:
keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:ea:e7:3f:b3:93:99:3e:41:46:0a:78:b3:f8:17:18:d3:
3a:c8:a4:f6:2f:3c:63:31:e0:db:dc:ab:d5:eb:1a:10:6b:36:
71:72:e5:f9:c5:c6:6c:73:96:1b:da:96:ec:7b:27:99:2c:b6:
69:c7:49:6d:cb:ab:a4:ee:97:0c:e4:27:e7:a8:ce:4d:8f:66:
f8:cd:ba:f9:72:de:ba:37:c1:45:08:26:56:3a:2a:cf:bb:c6:
a8:33:8d:d3:81:ce:35:f8:63:3f:dd:2a:57:f1:2d:98:21:18:
1c:e1:e8:34:88:36:62:24:49:a7:52:43:81:28:e8:2e:6f:3a:
86:e6:64:ee:24:30:52:d8:ce:14:a0:b1:e8:d8:62:59:93:09:
10:24:1e:95:d7:39:33:d2:b8:83:21:80:9d:d3:36:01:3e:25:
7a:47:82:ef:3d:3c:91:6e:d8:df:eb:a6:42:54:35:dc:e2:f3:
de:9d:13:eb:48:06:48:21:af:47:75:38:8e:a0:6f:fb:61:3b:
06:ca:df:5c:d8:22:f2:83:e4:03:39:0d:ab:3b:42:85:38:3d:
9c:7d:9c:21:9b:f2:e9:54:28:d3:a2:69:22:e2:b7:ca:18:05:
03:d9:3a:f4:88:b8:5c:7a:ec:ae:bf:0a:ee:51:22:50:38:25:
8c:2f:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:52 2026 by rpki-client