
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier: yCM8fgpb44mtjLgha6bQtcDKqBVefRcEvBleRyHSb88=
Subject key identifier: D5:90:60:5D:DA:09:D9:AF:1F:C4:E0:FF:85:07:AA:CB:83:8F:D9:EC
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial: 09D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number: 09B3
Signing time: Sat 28 Feb 2026 20:16:14 +0000
Manifest this update: Sat 28 Feb 2026 20:16:14 +0000
Manifest next update: Sat 07 Mar 2026 20:16:14 +0000
Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: Of9/nQCGeqgd9wLwVlm5V+bACE1C4KqxO2xHLy9qzFc=)
2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: kkd/CbtVIoWblEY1duaDls2Uy2Uyf0EyvNKyp/C3IM4=)
3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: jIPkDEf13TMiFg2C0rBtFKVkCQXwsHcdNzopb74LLvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Validity
Not Before: Feb 28 20:16:14 2026 GMT
Not After : Mar 7 20:16:14 2026 GMT
Subject: CN=69a34d0e-9dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:c1:de:40:21:72:cf:06:db:1f:d9:e9:95:
f2:ea:de:c5:98:98:b2:28:43:f8:d2:2f:85:5c:b1:
d6:72:0d:3a:a3:49:d5:1b:f1:48:19:0e:f4:ec:19:
e3:37:97:cd:18:5c:b4:75:98:d5:8d:3f:41:a1:75:
3c:60:5e:46:bf:56:32:96:36:11:b0:66:ec:b0:cf:
67:a3:79:f7:2b:b1:52:76:30:59:94:a8:24:98:e7:
e3:e3:ca:b6:bc:3e:fe:b3:2b:f1:a1:e0:08:c0:cb:
70:09:01:37:ca:c9:d8:8e:60:de:fe:8a:ad:29:3b:
40:ee:18:f9:34:0f:6d:3d:3f:39:e2:e0:a8:f3:26:
1f:6c:ba:ae:a4:4d:1a:fd:bb:1e:29:70:fc:31:78:
ad:97:f9:e9:94:91:6b:09:54:e6:e0:c4:0f:a6:d0:
a1:9b:06:c6:a6:36:1d:f2:d7:21:78:2b:b5:80:61:
58:53:b3:51:db:9f:58:8a:9f:e3:4d:0c:7c:8e:b5:
42:6f:df:68:12:77:d4:7a:e7:85:75:1e:e3:a6:b8:
65:88:76:a7:e9:a2:2a:21:9b:c5:e6:b1:fc:2a:60:
9a:87:d6:57:16:33:e6:1d:27:a5:ba:7d:8c:12:8a:
80:88:10:ca:31:d6:7f:1f:3a:c2:66:d1:a9:c2:4e:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:60:5D:DA:09:D9:AF:1F:C4:E0:FF:85:07:AA:CB:83:8F:D9:EC
X509v3 Authority Key Identifier:
keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:ee:ba:65:55:84:fe:30:25:cd:44:ed:bb:c0:94:27:d5:
52:4f:f3:9a:01:71:91:e1:e0:da:d1:c2:71:af:cc:11:65:8e:
f6:b4:19:88:2c:04:23:ac:0a:0f:52:60:c2:78:09:36:f9:b5:
3a:fe:0e:10:ba:dd:c0:0d:6e:f3:a6:1e:44:a7:72:25:da:21:
8f:e5:9c:49:47:84:45:67:11:58:5a:ed:63:b5:a0:f2:f8:6d:
59:3a:01:a4:a8:35:74:9d:92:65:e3:57:d9:53:f2:6a:82:96:
6d:b5:df:9a:fd:f3:65:30:4c:32:cb:a3:54:20:b3:35:ec:8c:
32:f3:bc:60:8c:86:5c:dd:9b:bf:19:63:91:2d:d3:f3:fc:9d:
75:52:cf:91:5e:82:0b:35:fd:d2:1f:5f:2d:05:b8:a3:c2:44:
75:6e:63:cd:9c:84:dc:1e:f9:0b:ce:2d:63:31:60:48:62:5c:
3d:0f:aa:fb:04:91:ff:58:0c:d1:63:93:bc:d6:6c:a6:5b:71:
a8:80:dd:2f:a7:08:49:e6:a4:fd:d0:d7:3c:40:e5:90:4f:7e:
0d:ab:d7:96:b5:32:86:84:0b:59:66:9e:01:5d:e0:e5:69:b9:
0f:4c:bf:d4:91:2e:a0:87:06:a4:81:94:e1:07:cc:21:7e:7e:
be:24:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:51 2026 by rpki-client