
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier: DLrwu0xRy6iLZYojN+VAe+yP6cblY2tocselqHndx60=
Subject key identifier: 1C:82:9C:4B:41:38:BF:D8:5A:0D:E2:D7:2E:A6:7D:14:00:77:BF:60
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number: 024C
Signing time: Fri 17 Apr 2026 02:20:56 +0000
Manifest this update: Fri 17 Apr 2026 02:20:55 +0000
Manifest next update: Fri 24 Apr 2026 02:20:55 +0000
Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: AR2u6G5Oz0MqrXgqT3E9NwImfgoKNd2APpZU5a0uJ2U=)
2: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=)
3: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=)
4: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Validity
Not Before: Apr 17 02:20:55 2026 GMT
Not After : Apr 24 02:20:55 2026 GMT
Subject: CN=69e19907-bbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:d4:19:07:4a:47:9b:38:8c:58:37:77:34:
5f:e9:a0:48:12:cf:35:32:cc:68:f4:ce:29:48:7a:
0f:f1:bb:be:53:89:2b:e7:70:fe:fa:67:f0:d9:20:
07:c4:33:d9:c2:08:c2:d6:6a:d3:02:d4:ed:e4:87:
94:46:35:29:0e:3f:4c:b6:9f:14:87:b1:37:d2:4c:
a4:7c:49:c8:29:5e:1c:06:6b:18:b1:ba:2a:f1:4c:
e8:21:88:d4:2b:a6:b3:cd:68:59:1e:6e:01:18:b2:
6f:51:5c:b1:4d:94:04:c5:1c:3d:bd:35:95:65:bc:
ca:d9:a3:f9:3d:8d:9d:3b:e8:68:90:37:64:92:f4:
c6:7b:b2:23:10:06:07:b5:1f:6a:cb:1c:4c:f9:ba:
1d:10:23:5a:dc:a9:2a:58:75:9b:a3:50:75:ff:bb:
b8:18:b6:f1:e1:dc:52:ff:c1:bc:65:b9:96:24:d0:
7a:3a:fc:ef:93:1b:4e:0b:c2:3d:32:16:1c:f5:6d:
89:c8:82:b6:a8:c3:95:2f:63:75:70:72:5d:42:e2:
6c:08:d0:1c:b1:7b:0b:2c:aa:00:dc:76:5d:9e:c1:
95:58:0b:12:d7:ab:9a:3c:92:c7:79:66:f9:9d:eb:
97:de:87:60:8f:6e:48:08:b9:96:96:c3:73:9c:5d:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:82:9C:4B:41:38:BF:D8:5A:0D:E2:D7:2E:A6:7D:14:00:77:BF:60
X509v3 Authority Key Identifier:
keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:7e:7e:9a:fc:83:e0:be:5f:b9:2f:66:23:18:ca:ec:3d:
ad:e9:ec:fe:b1:b0:58:c1:89:f4:96:95:ce:cc:4f:1d:c3:7c:
dc:55:c6:18:93:9c:84:d3:c8:bc:fa:ab:f1:05:f5:57:86:ed:
47:ba:58:c9:a4:39:01:58:3d:92:64:f0:6e:14:d5:c8:18:57:
04:1a:e3:15:2c:ec:94:20:85:92:87:d3:95:4a:bf:6e:58:07:
ed:fd:63:14:ca:76:57:59:25:f7:fc:0b:22:53:b9:16:70:eb:
b9:7f:7f:f0:e4:ca:6d:cd:f9:58:0d:91:d0:2f:f5:66:21:2e:
f2:6f:d2:7e:af:d8:9b:e5:5f:8f:fd:6a:6e:d5:97:e9:a3:01:
ef:3f:5f:52:08:b0:a4:1f:25:b7:73:a9:04:03:30:89:63:27:
68:00:5b:c2:72:22:92:1f:24:b7:c0:20:17:98:5b:44:ec:81:
eb:88:29:9d:34:44:cc:91:9f:e2:23:97:b5:46:a6:41:a3:09:
fd:56:5c:27:97:d4:4a:a5:f7:42:fb:99:76:ec:c7:1b:0f:32:
74:b5:08:bf:fb:0b:ed:2a:78:fe:c4:03:0b:05:b7:c4:f6:ac:
b2:6c:a5:08:66:40:ae:c1:85:3c:9b:37:aa:7f:e7:52:ce:ba:
d4:3a:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:16:01 2026 by rpki-client