
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
File: Q03xGF63GUxktwjMLSVjSCTiTh4.mft (raw, json)
Hash identifier: JuxkQnFpPusrFaKvlZnfPnIK0FYxl78DSfZsc+u7DX4=
Subject key identifier: 17:34:B0:1A:CC:33:80:63:29:8C:1C:43:3B:0E:08:D6:23:51:73:70
Authority key identifier: 43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E
Certificate issuer: /CN=A911CC94/serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
Manifest number: 73
Signing time: Sat 17 Oct 2026 08:36:21 +0000
Manifest this update: Sat 17 Oct 2026 08:36:20 +0000
Manifest next update: Sat 24 Oct 2026 08:36:20 +0000
Files and hashes: 1: Q03xGF63GUxktwjMLSVjSCTiTh4.crl (hash: AhseJ8hbmlwkXgNtY9C4FUpfZt3Begp+Qv8+DZMYShA=)
2: DB87563A1C5711F1811E0EC90A3D8C67.roa (hash: Uot0wKL2V+rres779GpUT7rmL47pZ4/zXDcozOfp2iU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl
rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 08:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC94, serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E
Validity
Not Before: Oct 17 08:36:20 2026 GMT
Not After : Oct 24 08:36:20 2026 GMT
Subject: CN=6ad33384-6a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:df:10:1e:a9:56:3f:7f:31:cd:6c:bc:86:75:
cb:06:4e:9e:f0:38:ce:c5:9b:8b:0d:f3:16:c0:19:
ee:f6:c7:9b:6c:04:3f:c4:72:64:cd:b8:e7:c8:ac:
17:40:a7:0a:d6:2b:e4:bf:3d:21:60:a2:37:b1:08:
3a:00:fe:f6:94:a2:0e:c9:fd:2b:ba:4a:14:d0:91:
b7:aa:8b:8e:6f:bc:ee:f7:ce:12:99:6c:b3:56:5a:
3d:f1:76:fe:6b:f7:5b:b8:25:6c:f8:01:2e:a3:68:
d3:66:fc:26:b5:69:d4:4a:eb:e3:f3:ef:b4:e3:39:
58:e1:0d:77:84:7b:83:1b:97:74:ce:91:f0:0d:64:
da:25:e7:96:7d:b9:94:f7:0c:80:39:13:33:87:b2:
8f:68:f9:bd:6e:ca:7e:fa:d3:20:3d:79:90:3e:29:
c7:0d:24:3a:5e:d2:43:53:6c:2d:ad:38:5a:c1:f8:
03:65:e5:8e:e2:88:28:ea:9c:e7:1f:59:4d:0a:78:
a2:30:8a:e3:d4:28:4d:bd:f4:01:ab:0c:a5:1a:79:
b9:af:9e:fd:e0:e0:23:a6:61:c1:50:bd:53:84:38:
31:7a:8e:3f:19:ac:9f:31:43:da:0c:35:8c:b8:a4:
3b:f8:dd:65:f5:e8:f2:e2:64:73:ee:cd:10:f6:53:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:B0:1A:CC:33:80:63:29:8C:1C:43:3B:0E:08:D6:23:51:73:70
X509v3 Authority Key Identifier:
keyid:43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:14:af:e8:97:8c:f1:9b:d0:34:c7:3a:fd:b0:f3:61:1c:
e2:f9:4a:44:ba:d9:9c:96:a8:c8:59:9b:d6:2d:79:d1:93:11:
f0:2e:2e:91:c8:dd:42:aa:aa:d9:bf:d1:cd:a8:b0:4a:bf:c8:
ae:e7:c5:92:2d:61:8c:72:14:31:41:2c:30:a5:dd:5d:99:d8:
eb:e5:bf:01:ba:7c:73:3f:9f:f9:4f:19:75:b7:a1:24:c9:5b:
d5:3d:5b:88:0e:d9:96:70:61:74:2d:c8:85:a7:c7:3a:b4:cc:
12:c9:d7:89:b5:52:9b:be:13:f6:d9:66:3a:ee:00:c7:05:86:
ac:2d:6b:64:92:f4:e3:ab:73:29:14:c3:67:18:16:a6:7c:5a:
9c:57:bf:f9:46:22:9d:37:63:3c:ac:68:2b:e8:35:29:e7:15:
3b:d5:2c:e4:f8:18:32:b0:7c:69:51:85:64:a3:69:f1:d0:b5:
c5:ea:2d:f4:77:95:7f:2b:14:78:2b:3a:4d:05:07:8c:55:49:
f7:bc:37:3a:a6:d5:47:5a:42:1b:a1:a6:f5:8d:c0:81:58:3b:
14:03:37:88:a8:68:09:3e:57:61:06:d1:2b:60:3d:9b:76:4e:
72:73:ab:1f:ae:3f:91:31:7d:64:2b:1c:99:58:23:b9:be:bd:
6a:7a:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:57:26 2026 by rpki-client