
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
File: QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json)
Hash identifier: /R5oAdkdCsgbpOcP/axcJOTdb7P75I2L6SJ9M9r8QNk=
Subject key identifier: CA:46:10:8E:C4:8E:0A:92:47:5A:55:30:D0:BB:3E:65:6D:80:E7:C4
Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
Certificate issuer: /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
Manifest number: 06D5
Signing time: Sat 28 Feb 2026 22:41:13 +0000
Manifest this update: Sat 28 Feb 2026 22:41:13 +0000
Manifest next update: Sat 07 Mar 2026 22:41:13 +0000
Files and hashes: 1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: 83aLkQ5nsa9zKXdetISxgnCoUD5fsqho/nuhB97n3qY=)
2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: JUDELwHgPtKuVC+Zxi+8ziVhRWeVBos3PiAym1dLOsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Validity
Not Before: Feb 28 22:41:13 2026 GMT
Not After : Mar 7 22:41:13 2026 GMT
Subject: CN=69a36f09-3e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:3c:15:18:d7:06:86:16:23:52:87:59:98:
0e:6b:44:7b:59:aa:e6:3d:54:de:e0:74:e4:8c:ea:
d1:10:00:8d:e0:20:68:ab:81:e0:86:0e:e4:43:3e:
c4:15:09:10:11:76:50:ee:27:74:4c:94:ca:1c:a0:
01:9a:16:db:5b:67:34:f4:8e:2b:2d:e5:30:f1:af:
36:83:10:f1:9d:21:7f:76:87:0a:7a:b1:fc:87:d4:
b5:a1:3f:4b:a9:2e:e3:6d:f6:be:0d:14:4e:cb:39:
fb:63:2c:1f:b4:aa:5b:20:30:a6:ae:4a:60:ab:26:
95:bb:98:53:37:dd:d8:71:fa:93:1d:bf:94:da:b5:
6d:57:ac:2e:33:57:05:e0:7e:a5:28:34:f1:88:b9:
49:f0:15:64:9c:39:fe:43:09:2a:09:8a:47:72:4b:
91:f1:57:f1:44:cb:db:05:d6:7e:8b:5e:6e:37:48:
a6:3c:86:56:87:12:3e:ac:10:11:aa:5f:94:6a:24:
db:7a:dc:06:a8:c8:49:84:55:f4:c8:12:53:5c:a7:
71:ac:24:df:b1:46:31:66:4d:ba:8e:b6:55:5d:bd:
0a:2a:5a:24:35:5a:7e:83:53:e8:6f:56:64:69:1c:
ce:54:9f:f0:96:61:87:86:e5:76:28:58:94:90:8b:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:10:8E:C4:8E:0A:92:47:5A:55:30:D0:BB:3E:65:6D:80:E7:C4
X509v3 Authority Key Identifier:
keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:93:76:bb:ef:90:90:bf:1d:a8:29:6d:98:36:1a:a5:36:62:
19:ff:5a:91:09:8b:bc:d8:bf:58:4e:24:40:7b:6d:f9:77:6e:
fc:ec:c4:aa:26:12:85:e1:d7:54:95:9e:49:5f:2a:43:4e:06:
fd:bd:a3:03:6e:2e:63:a4:ca:02:5c:4f:b4:e8:3b:0e:a7:5c:
42:7e:97:ff:e6:c6:15:66:0c:c1:44:e8:90:4d:f1:76:bb:ff:
70:75:5e:f9:4f:33:eb:44:4e:dc:b1:68:c6:2b:2e:e5:6f:2b:
c6:ea:60:91:e2:ec:04:23:b2:f8:c0:32:02:aa:01:15:b3:71:
ad:1a:a1:56:8f:d9:8d:e6:15:43:e8:03:e0:45:81:99:1c:82:
05:e6:15:60:83:2f:0d:f5:b0:b9:23:fa:c0:1c:28:e8:bd:3c:
1b:94:6a:7d:4d:5a:41:65:f2:59:e1:a4:92:2e:62:a7:ab:0e:
7c:ef:bd:99:42:b4:af:c8:26:f7:71:ed:fe:7f:7a:60:a2:76:
ac:d0:67:21:6c:6d:15:1e:5e:e1:df:da:96:7d:15:04:2d:af:
f2:4c:37:a9:5c:6c:45:b9:c4:19:3c:49:35:b9:07:9e:6d:57:
10:3c:97:b7:37:9b:86:15:ef:80:13:7d:b3:07:da:1f:34:a5:
06:f6:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:39 2026 by rpki-client