
$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json)
Hash identifier: PQiu7gK904NxWi56LEVcIGnY8C4rThYa8XDyfPPzA94=
Subject key identifier: C9:A1:2A:D7:63:AA:47:73:71:BA:34:4E:86:79:AA:89:15:F1:7F:0D
Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Certificate serial: 02C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
Manifest number: 02BE
Signing time: Mon 02 Mar 2026 00:24:23 +0000
Manifest this update: Mon 02 Mar 2026 00:24:21 +0000
Manifest next update: Mon 09 Mar 2026 00:24:21 +0000
Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: mjYtvCpXySjUJ6Z2JzPIppnzZ3CrS1cwR4E8PRzdRHU=)
2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: UjqlRAwfwNLo2LEBYwVtNQxCTDJqJ6taRgiSuyPlUdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Validity
Not Before: Mar 2 00:24:21 2026 GMT
Not After : Mar 9 00:24:21 2026 GMT
Subject: CN=69a4d8b6-b11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bc:4c:f6:5f:5f:62:ad:ea:0a:15:27:e8:13:
74:75:58:bc:53:4d:98:00:58:f7:c4:fa:f0:47:e4:
fa:e5:e8:81:af:ab:1e:e7:d0:b9:46:45:b6:dd:21:
d5:02:2f:cd:e8:44:5d:0b:2a:67:4d:9a:b5:57:24:
66:f0:d5:0d:94:ad:4e:27:81:01:33:2c:0a:5b:80:
e0:d4:24:67:0b:bf:d5:5f:ab:c9:8a:e3:0e:a8:58:
b3:80:db:0f:ec:11:35:17:4c:de:c0:90:d6:ac:03:
12:2d:b0:61:3b:6b:be:f0:dc:2c:9f:2d:ae:b5:a6:
bb:bd:dd:63:6f:65:26:60:73:12:e3:34:05:ac:08:
09:bf:ed:60:4a:b4:1d:55:e7:a4:d7:b5:84:73:6a:
c1:ea:a2:be:b8:7e:e6:fc:fc:ee:ef:c5:cc:70:a6:
47:5b:e3:47:67:10:b8:47:ae:fc:ae:6d:90:3b:dd:
f9:f5:d6:2a:77:10:84:cc:a8:9e:65:23:16:e7:3e:
12:4a:95:21:89:e6:36:43:6e:2a:83:9c:c5:47:5b:
e3:57:76:20:69:52:a4:88:b1:86:aa:b6:b0:09:fc:
e6:be:06:a3:fc:fe:30:75:ed:f5:9d:52:b4:53:73:
40:4f:7d:ba:c9:ec:a1:19:c6:c8:cf:1d:c5:94:ba:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A1:2A:D7:63:AA:47:73:71:BA:34:4E:86:79:AA:89:15:F1:7F:0D
X509v3 Authority Key Identifier:
keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:21:97:5e:af:ca:79:ee:97:cd:dd:3c:54:49:47:6f:6a:7a:
fb:03:80:7c:01:1b:75:ff:ef:ac:92:d3:dd:1b:bc:58:5e:f9:
7b:2a:64:01:27:0b:46:d2:40:bd:04:d2:f0:ed:b5:19:59:ec:
f2:98:19:c5:8a:f1:08:90:9c:6f:b4:41:fc:e4:72:ed:38:65:
42:12:e8:da:6e:2e:f7:20:8a:b9:3d:77:df:ba:ed:db:fb:ae:
51:7b:24:9a:0c:8c:a3:98:69:37:54:50:4e:5b:a6:a9:da:de:
d0:97:50:9f:7e:88:e0:26:bf:cd:72:94:47:4e:74:e8:a0:03:
8d:56:19:62:a4:57:a8:8c:8d:01:66:e9:5e:0c:ef:f1:17:5e:
30:33:45:38:e2:45:f3:7a:f6:d9:fb:94:48:51:f9:9c:75:20:
a1:97:97:79:86:f8:76:09:58:92:c3:1a:1f:c0:88:52:23:82:
f5:7b:29:0b:f3:52:c4:0e:ce:e3:f9:39:11:8d:7a:4b:d9:82:
79:cb:e6:69:01:eb:0f:80:f6:6e:b0:fc:5c:d4:2a:ad:c2:6d:
2f:98:47:e7:7f:34:7a:72:b5:56:24:67:12:3e:f2:e1:9b:54:
a2:86:ba:e7:a8:81:f8:17:2d:4e:ec:09:c8:86:f3:39:f2:51:
09:13:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:10 2026 by rpki-client