
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json)
Hash identifier: ZqhQeCkzp5l2yDbpNBlK2+DTl4fxiDvJXtRuSa6Gq30=
Subject key identifier: 61:93:38:1A:45:54:62:DD:7C:91:C5:65:03:3E:D3:19:50:CF:5F:F8
Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
Manifest number: 0114
Signing time: Fri 09 Oct 2026 06:37:29 +0000
Manifest this update: Fri 09 Oct 2026 06:37:28 +0000
Manifest next update: Fri 16 Oct 2026 06:37:28 +0000
Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: nZzwyUR3ZWom4xgH5wByvUp6T1nsInkRLj4Hx+R2Ivc=)
2: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: N+2dubiMuqB/4gWD0ppVA6QZJO1Q/1zqaBt+voV0zVg=)
3: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: uj9BtH+Gx30PB+Rd8YZACkYl9VczoWS9fHCOeF8FuCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Validity
Not Before: Oct 9 06:37:28 2026 GMT
Not After : Oct 16 06:37:28 2026 GMT
Subject: CN=6ac88ba9-878b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:e0:65:6a:a9:50:fd:de:9f:d5:5f:2c:77:
17:4f:9c:fb:c4:7f:21:cf:e7:6b:d2:fb:bf:4c:f4:
19:2f:95:09:51:92:0a:f5:55:94:aa:28:9a:8e:57:
2f:89:61:c0:49:21:a9:2b:0b:05:4f:ff:7b:a0:25:
9e:30:4c:04:b1:20:2c:71:9d:6b:c3:cd:35:2f:1c:
22:12:5b:d9:0c:54:ae:87:b8:f1:08:5e:45:a8:e3:
16:fe:cc:bc:f6:a3:c3:5e:73:4c:0b:e7:ba:06:ee:
58:58:50:2f:ba:04:48:a2:1b:c9:6a:d4:36:b0:a9:
14:ef:62:59:42:35:2f:b4:05:e2:c0:08:c6:c3:e8:
b3:66:3d:ed:7b:a3:4f:db:b6:dd:df:e1:ae:81:51:
29:56:bf:39:ba:ed:03:6a:db:36:a7:c6:fc:de:ab:
90:b8:fd:fd:f3:0c:de:5d:72:02:7d:3a:91:75:86:
f4:d2:2a:35:c9:a8:66:08:8b:e4:fd:f6:ce:e9:32:
8b:42:57:a5:5e:82:f8:12:df:65:47:28:38:cc:75:
18:40:bc:6e:4e:60:c3:1e:cc:2a:21:20:93:2b:f7:
1c:59:97:46:01:52:c8:9a:b2:83:71:75:6f:f3:f2:
cb:1d:23:34:93:4b:37:cd:4b:75:b6:70:13:75:1a:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:93:38:1A:45:54:62:DD:7C:91:C5:65:03:3E:D3:19:50:CF:5F:F8
X509v3 Authority Key Identifier:
keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:b6:74:cf:fc:9e:53:b1:0e:a5:d2:88:44:82:3d:9e:fd:63:
65:ee:6a:c6:91:cc:f8:01:a1:64:90:50:4c:73:47:28:a0:2c:
17:f9:31:67:0f:20:86:62:5a:26:9e:9e:45:05:17:40:19:e9:
cc:68:8c:62:a4:4d:c0:ac:4e:e2:15:7b:11:08:df:cd:02:ce:
cc:7a:35:b9:fd:e9:bf:9a:b1:a3:6f:04:51:02:7a:94:b3:39:
be:89:10:0c:52:ad:7b:48:cc:9c:83:a5:8b:3c:74:b9:d4:ef:
1d:0b:f9:3f:62:c7:e0:07:49:c5:a1:46:27:5a:04:d3:31:b5:
d7:bb:b4:8b:94:81:b8:73:43:b3:66:11:57:9b:e2:73:fe:1b:
3e:f4:8b:96:cf:00:d3:25:4a:83:28:05:9f:71:d9:ab:87:3e:
8c:e4:99:42:e1:33:eb:76:b8:c6:ae:31:5c:4a:d1:17:60:52:
f0:6f:bf:0c:da:b5:96:eb:68:51:48:5d:f5:18:c3:94:56:db:
22:18:d6:06:30:15:81:f2:41:88:84:20:35:ca:fd:41:5b:6c:
f7:f7:6e:9b:ba:18:15:3a:fe:74:2b:be:69:53:ad:44:9a:ec:
54:3e:d4:01:69:6e:ef:2a:b1:77:50:cd:8a:de:9f:09:e7:21:
64:f6:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:26:54 2026 by rpki-client