
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json)
Hash identifier: M+GZyLVPU6RMMPzmETmu+HV0RREP94XG012gmsSTNWA=
Subject key identifier: 92:B3:D5:A7:3E:2D:95:76:2E:7B:BA:5F:DB:FF:04:18:CE:0E:C0:CC
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial: 07B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
Manifest number: 079C
Signing time: Mon 02 Mar 2026 02:20:20 +0000
Manifest this update: Mon 02 Mar 2026 02:20:18 +0000
Manifest next update: Mon 09 Mar 2026 02:20:18 +0000
Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: TOOWLnJLQVlQ0oUTACB9GVCrJVJdQPGOOsjqyH6WCi0=)
2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: 1duLitLlKe5JGX7eQUYs2Azf52gj3DJyaqa7K/tCUk4=)
3: 68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa (hash: w5VOo/6r3NeoiKj8fNZOZ/VJngKbDV07+QpgEuw1iFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977 (0x7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Validity
Not Before: Mar 2 02:20:18 2026 GMT
Not After : Mar 9 02:20:18 2026 GMT
Subject: CN=69a4f3e3-2087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:37:c5:09:3b:44:50:27:59:7f:83:cb:4b:
38:6e:98:6e:bc:5f:cc:2f:d3:74:a4:b6:eb:28:ab:
cb:24:8a:ba:94:35:a0:df:9f:94:48:6d:5a:e0:7d:
7e:3a:76:12:c6:d8:11:1a:8c:7a:97:a1:bb:59:9c:
e9:91:49:ce:f9:5c:ea:bb:db:1c:f2:4d:da:dc:93:
69:1b:61:06:33:c0:08:83:0a:05:a9:4e:64:46:18:
12:b3:94:ca:50:b9:9d:17:a9:7c:f4:7e:5d:3e:2d:
fd:d1:47:68:67:f5:31:94:64:fc:da:ab:ae:b7:5d:
0a:e4:a3:23:0e:2f:c8:35:91:89:d2:3a:f3:ed:d3:
27:8d:40:3d:e6:c3:cc:eb:16:71:fc:7f:de:b6:5d:
e5:29:1a:a1:bd:4a:2e:ce:c1:32:8d:ed:8b:0d:34:
8a:ca:14:b8:b9:70:6e:e4:f9:10:42:a2:57:10:d8:
36:44:c2:62:73:24:ee:71:ab:d3:4d:b3:38:a6:81:
04:25:71:c4:3c:cd:1a:f4:54:6f:5a:0f:0a:29:e1:
dc:cc:e6:96:c6:35:48:e3:a7:34:7d:7e:f3:f1:2c:
5a:b3:1a:2b:64:d2:ab:07:be:26:bf:0e:0b:7d:4c:
38:ed:0d:9e:a6:d4:f2:b1:1d:6b:37:12:08:93:bc:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:D5:A7:3E:2D:95:76:2E:7B:BA:5F:DB:FF:04:18:CE:0E:C0:CC
X509v3 Authority Key Identifier:
keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:b2:6c:68:28:57:08:f1:a8:17:d9:3d:af:8a:53:3a:51:77:
d6:23:a8:65:7a:84:ec:33:a3:d0:68:5f:85:f5:05:cf:a4:9e:
9e:93:38:9e:60:c4:12:4d:a2:10:b0:ea:4e:82:4a:cc:4c:dc:
53:30:09:56:b3:62:63:98:b4:fd:f5:8e:0b:4f:cd:1e:72:25:
71:ff:dd:ac:ee:ff:6a:67:f5:59:6e:8c:99:56:f6:77:cb:ea:
33:82:43:54:5a:4d:dd:96:b6:cf:0f:1c:61:5b:92:23:20:45:
02:1f:34:e3:a6:45:b9:33:e4:81:88:a9:00:f9:64:4a:f1:ad:
e2:82:93:dc:28:0b:2c:63:ff:d2:e9:20:ad:75:6f:84:27:cf:
db:cb:4d:6c:36:66:73:f5:c2:fa:d9:4c:5e:a1:42:cf:0e:eb:
b3:36:8d:10:a9:80:16:84:8a:c9:7a:ba:b6:22:1c:5b:f4:7d:
2b:b2:98:5f:c2:29:ea:fa:74:17:99:11:a6:57:36:0b:3a:42:
69:67:5a:de:54:96:ab:28:87:bb:e9:72:56:fb:61:57:4b:00:
dd:dc:9c:27:42:2b:58:39:12:61:ae:bc:09:cf:34:27:cd:72:
24:24:55:c9:7a:79:40:e0:bf:4c:f1:d0:7a:56:46:34:95:67:
25:a7:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:13 2026 by rpki-client