
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json)
Hash identifier: pFXjWUsx/B2lJuWSZCc3C3TEC6ojRdktXN3uH/L63Ms=
Subject key identifier: AC:B5:DC:37:90:28:99:20:21:66:06:24:83:3A:3B:EF:9E:22:00:80
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial: 12E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
Manifest number: 12CE
Signing time: Sat 28 Feb 2026 17:08:12 +0000
Manifest this update: Sat 28 Feb 2026 17:08:12 +0000
Manifest next update: Sat 07 Mar 2026 17:08:12 +0000
Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: guWX0ODMe6Wj4KDvp+QvxLBnwWJ8dxrtYjcwNd+nRss=)
2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: /Ap9CSMlbg4Z4XpJ5kSZEcOsTjIpg7hIcLCNKU8Ina4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4840 (0x12e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Validity
Not Before: Feb 28 17:08:12 2026 GMT
Not After : Mar 7 17:08:12 2026 GMT
Subject: CN=69a320fc-95ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:b7:72:8a:a9:8b:fe:4a:19:01:2f:5d:9e:
ff:53:2b:b0:38:dc:c3:27:30:ca:e3:1a:d5:f3:16:
41:6e:cc:37:42:5f:f3:e6:aa:05:d1:e6:e6:a4:73:
2a:4e:14:63:cb:a0:90:9b:7f:ec:67:f4:54:e4:d6:
a4:bf:b8:a8:3c:c5:d2:9b:8e:2f:37:69:be:af:46:
3e:fc:70:36:3d:24:ca:6e:04:4f:4c:92:e3:a0:e9:
fe:99:4e:b7:3d:78:c5:c9:ac:ff:c4:fa:2f:ff:b8:
f7:a4:04:d1:aa:a2:19:78:a9:e2:63:d9:51:7f:6f:
d3:47:6b:c2:c9:60:e0:12:1c:64:de:76:55:c1:6e:
ec:d3:74:d5:68:4e:1a:84:46:09:d1:23:77:59:3f:
3e:2e:20:cc:16:33:2d:22:56:6b:6a:f4:6a:fe:e3:
27:60:e3:fa:96:b5:90:ca:b7:c2:30:db:5a:d7:97:
63:37:e3:bd:48:8d:15:48:11:0e:97:43:6a:06:53:
09:3c:18:68:13:4c:41:1d:a9:9e:0a:b2:48:37:75:
de:cc:26:04:7a:27:5a:80:be:f6:2b:c8:4f:d3:54:
02:ef:ae:98:62:bf:3e:ed:91:cb:f3:a1:0b:c5:8f:
e2:0d:5d:4f:3f:16:79:81:91:da:79:53:ff:dd:0d:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:DC:37:90:28:99:20:21:66:06:24:83:3A:3B:EF:9E:22:00:80
X509v3 Authority Key Identifier:
keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:52:19:07:05:23:06:df:ff:64:fa:b0:0a:e2:47:4d:59:62:
80:1a:98:ea:08:2c:65:41:66:3a:d1:d8:67:e0:10:44:c0:fc:
4f:a8:d4:cc:ac:00:18:4b:c6:15:4f:fa:96:cd:36:f3:39:29:
92:24:fc:6a:8e:7b:79:11:28:c9:64:5a:e7:ff:b6:aa:b5:19:
50:1c:ce:5c:75:9c:d5:fa:c5:82:42:d0:de:08:77:d2:fe:28:
3e:e2:16:44:dd:31:34:ee:38:b0:5d:6a:e1:16:9a:d8:6e:7b:
e8:ef:0b:64:51:39:6d:3d:7e:c3:e8:eb:bd:5f:7c:dc:96:e1:
46:e9:cd:17:c2:cb:31:db:2e:fd:6a:5f:d5:74:bc:14:4d:27:
3b:7e:d8:ad:fe:7f:d7:93:77:bf:b3:1e:90:64:62:2d:e0:2c:
72:2f:81:29:42:04:db:a4:7b:55:c6:de:b1:22:d5:bf:99:82:
b7:8a:75:2e:08:48:cb:78:7b:1d:d4:8a:5f:67:f4:bd:97:84:
a6:70:6b:c3:35:b2:6c:42:a7:f5:26:69:be:fd:19:5f:d9:8f:
6a:01:81:20:f2:a7:24:16:4d:55:58:6d:eb:51:d1:c4:38:01:
d2:80:f7:4e:85:49:7a:2e:f6:e4:f5:49:52:f6:f6:f2:33:a1:
fa:d9:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:58 2026 by rpki-client