
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File: jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier: z9EgNcvWLexxlGJsBvFrAZn6gkvMsZviHIXQ/t2WCUo=
Subject key identifier: 33:FE:D8:16:81:36:6F:37:88:C2:C7:6D:CB:F6:43:01:F5:1B:6A:7C
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number: 353A
Signing time: Sat 28 Feb 2026 15:16:41 +0000
Manifest this update: Sat 28 Feb 2026 15:16:41 +0000
Manifest next update: Sat 07 Mar 2026 15:16:41 +0000
Files and hashes: 1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: qjiEZLz/i6egoZQOvK4ba2klOMU5AklmY0ucRltCscQ=)
2: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: ROrgH6dvkdfTvaiUN57VKXg+gHRpE1PP9zD6RWjQqas=)
3: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: h+JpzRqxAAR255eru5VTaf01U3dZF/vvjbi6Ju6XK+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Validity
Not Before: Feb 28 15:16:41 2026 GMT
Not After : Mar 7 15:16:41 2026 GMT
Subject: CN=69a306d9-bbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:7b:6b:46:42:f9:99:cd:74:bc:39:3d:92:
6a:62:aa:96:23:15:7e:30:c8:52:f2:7c:11:ed:00:
61:ec:cb:fc:5d:3a:c2:ae:e6:51:f5:f1:fd:99:7f:
4b:b4:24:9c:b4:72:af:d9:bb:1a:3d:da:2e:07:40:
a5:bc:5c:ec:74:05:c3:10:1c:07:79:21:87:ff:7d:
42:b7:d2:5a:19:bd:bf:3e:16:82:a2:ef:d5:49:b7:
1c:99:e1:83:ba:1d:49:83:f4:40:ea:2c:30:8d:4d:
da:81:f2:71:7c:fd:ff:94:77:46:19:ba:f9:00:6b:
d9:ff:8d:0c:06:bc:b5:6b:64:fd:f7:c4:91:b5:92:
45:7c:c9:28:a3:e4:0e:fd:27:ad:2f:fc:bb:fd:9d:
ca:47:e7:b7:fb:1f:a6:bb:c7:73:98:4a:ee:0e:81:
8f:04:4d:64:01:1e:d0:48:01:60:7b:39:00:3d:03:
f5:8e:2d:d7:9c:84:9b:47:7e:cc:aa:2f:c4:39:79:
c4:75:7e:83:cc:4b:13:4d:e4:91:13:98:df:cc:c2:
e2:77:21:8b:49:12:34:5a:0a:d0:76:a0:99:af:cf:
35:10:55:e4:b2:e7:71:f0:17:57:c6:52:b4:69:92:
94:7f:de:f4:ce:fe:bf:ab:61:95:8a:d7:78:36:c0:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:D8:16:81:36:6F:37:88:C2:C7:6D:CB:F6:43:01:F5:1B:6A:7C
X509v3 Authority Key Identifier:
keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:27:6f:14:ec:53:a9:ab:e6:ce:98:d0:71:8a:ca:d6:87:3c:
21:ff:72:22:bf:53:89:fa:99:18:d4:f9:83:fb:68:05:33:3d:
a7:23:f6:cb:37:37:3d:61:b7:85:50:13:22:47:a1:89:27:9a:
4e:64:28:eb:05:65:87:9d:5b:cc:41:4a:b2:c6:3a:16:5a:60:
98:8a:c9:2c:56:01:d0:2c:5a:0a:7f:cf:1e:e0:b8:da:fb:e0:
c1:59:08:58:71:01:46:d2:5e:95:38:5b:a0:54:7f:4e:01:d4:
df:19:8b:23:32:d1:f5:bf:e3:15:78:dc:b8:9b:df:63:65:40:
37:54:24:6f:f7:de:2d:5d:4e:e7:bb:67:94:5d:fa:b6:f2:89:
78:49:96:f6:a6:e5:de:88:4d:48:9c:aa:64:52:8a:53:a6:37:
45:75:7f:30:16:6c:86:8e:ba:56:9d:81:bf:46:e8:53:aa:4d:
9c:33:36:1f:11:95:5b:8b:05:97:61:f5:79:9c:e9:ba:c5:35:
bc:99:f2:1b:bb:57:70:3b:d3:0b:61:10:f1:35:74:5e:51:5a:
c3:5d:13:8d:47:86:57:1e:dd:66:16:c2:2b:00:4d:f7:2a:96:
51:d5:54:1d:c7:60:b9:87:43:40:b3:b9:14:d1:63:bd:3d:a8:
03:7c:36:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG
NTVFNjAzNUYwHhcNMjYwMjI4MTUxNjQxWhcNMjYwMzA3MTUxNjQxWjAYMRYwFAYD
VQQDDA02OWEzMDZkOS1iYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoal7a0ZC+ZnNdLw5PZJqYqqWIxV+MMhS8nwR7QBh7Mv8XTrCruZR9fH9mX9L
tCSctHKv2bsaPdouB0ClvFzsdAXDEBwHeSGH/31Ct9JaGb2/PhaCou/VSbccmeGD
uh1Jg/RA6iwwjU3agfJxfP3/lHdGGbr5AGvZ/40MBry1a2T998SRtZJFfMkoo+QO
/SetL/y7/Z3KR+e3+x+mu8dzmEruDoGPBE1kAR7QSAFgezkAPQP1ji3XnISbR37M
qi/EOXnEdX6DzEsTTeSRE5jfzMLidyGLSRI0WgrQdqCZr881EFXksudx8BdXxlK0
aZKUf970zv6/q2GVitd4NsDWSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDP+2BaB
Nm83iMLHbcv2QwH1G2p8MB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE
QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUVGQS9DNEI1OTI2NjFEQTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRk
eTB1d2FGaDVlWm4xWG1BMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlSdvFOxTqavmzpjQcYrK1oc8If9yIr9TifqZGNT5g/toBTM9pyP2yzc3PWG3
hVATIkehiSeaTmQo6wVlh51bzEFKssY6FlpgmIrJLFYB0CxaCn/PHuC42vvgwVkI
WHEBRtJelThboFR/TgHU3xmLIzLR9b/jFXjcuJvfY2VAN1Qkb/feLV1O57tnlF36
tvKJeEmW9qbl3ohNSJyqZFKKU6Y3RXV/MBZsho66Vp2Bv0boU6pNnDM2HxGVW4sF
l2H1eZzpusU1vJnyG7tXcDvTC2EQ8TV0XlFaw10TjUeGVx7dZhbCKwBN9yqWUdVU
HcdguYdDQLO5FNFjvT2oA3w2dg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:30 2026 by rpki-client