
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json)
Hash identifier: hYFCbAtm0QryXvNesqQPyurveK9p72lFDcCOv687nDY=
Subject key identifier: F2:90:BF:6A:7F:FB:1F:E2:50:77:64:DB:89:D8:AA:C2:60:D9:E3:B7
Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA
Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
Certificate serial: 0642
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
Manifest number: 0636
Signing time: Thu 16 Apr 2026 22:41:07 +0000
Manifest this update: Thu 16 Apr 2026 22:41:07 +0000
Manifest next update: Thu 23 Apr 2026 22:41:07 +0000
Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: aEuUmD17dmj8z4ZNj6tMlrLdmZ8z8lUhhA7zxrlVnRc=)
2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: WcftFva1gcea7hmA7H8a9I1dKGWiCBj9X3AHkNvPmMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl
rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
Validity
Not Before: Apr 16 22:41:07 2026 GMT
Not After : Apr 23 22:41:07 2026 GMT
Subject: CN=69e16583-6e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:c9:5f:9e:c9:77:44:c9:9a:a5:a3:84:bc:
98:74:c9:51:38:fd:47:43:2d:bc:1a:87:d8:ef:56:
45:52:7e:70:0b:a2:4a:f8:96:6f:45:cf:b6:0d:68:
66:52:60:d0:7c:fd:9e:a9:54:44:16:1f:85:88:1e:
b4:3e:b2:91:45:9d:f4:71:cc:95:9d:8e:15:a6:4d:
46:04:68:18:0b:62:8d:70:e5:77:dc:9a:99:a6:dd:
44:57:df:cf:89:20:90:3b:0c:3e:de:93:92:bf:8c:
cf:c8:49:81:25:45:11:26:e9:a0:fc:ce:8c:17:09:
4a:3b:d3:21:1c:6d:ef:76:24:d5:5d:ba:ea:c2:a0:
5c:f5:c3:e3:b2:c0:c6:b4:bc:d1:43:6b:60:9e:87:
28:47:22:e2:84:60:44:d4:cd:1f:94:78:ac:c0:44:
f2:b1:c5:16:3d:06:0a:4c:8f:71:8b:90:f2:5a:c9:
8d:4d:12:e7:5f:81:9d:c6:71:48:dd:15:86:4c:68:
d2:50:e9:cd:f8:b1:9e:5c:b0:99:d8:69:1c:2e:c6:
14:2c:f1:7f:29:71:37:d7:67:e7:33:24:6c:86:6a:
aa:cc:7a:8d:8e:08:84:8d:a7:35:70:7a:90:ca:db:
18:07:97:a7:fa:2a:9e:d4:c3:61:48:a3:5a:4a:16:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:BF:6A:7F:FB:1F:E2:50:77:64:DB:89:D8:AA:C2:60:D9:E3:B7
X509v3 Authority Key Identifier:
keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d4:c5:eb:5f:93:02:54:9e:cd:25:af:24:a4:bd:84:18:41:
84:d5:94:68:a0:4f:2c:c6:0a:14:37:d1:2b:2f:4e:b8:a2:c9:
5f:9e:7c:5b:19:45:7c:ef:f4:e4:23:7d:e4:41:92:71:23:b1:
b7:07:c0:55:22:82:02:df:96:1e:a5:ee:34:8c:63:8d:89:83:
1d:00:5e:e2:1b:57:4b:9e:28:58:46:3a:32:d5:12:e5:49:4d:
59:ac:6a:95:40:44:d0:d1:cc:ca:97:83:b6:5a:7b:0e:6e:93:
6c:40:61:92:b0:81:bf:c7:85:6d:e4:9f:2c:21:40:25:e3:06:
5f:7a:64:23:bd:3e:69:44:d7:8d:09:47:18:b7:3f:5f:8f:b3:
63:f2:5a:0e:c8:6c:91:73:b6:51:67:c6:ea:ba:e5:a4:ec:a7:
da:9d:d8:42:11:e9:71:a4:ac:3a:9f:00:f6:ff:83:9c:6e:30:
bc:fa:4a:9d:00:31:43:c2:7a:1e:af:94:22:76:ef:ba:94:84:
6d:78:d2:f3:74:56:cf:92:3c:ab:cc:8a:fe:d6:7a:97:b4:fe:
1f:b1:26:ad:ec:93:e9:61:37:b0:99:5c:3e:d6:d7:21:0e:64:
93:fc:d1:3f:60:21:a3:56:a8:a4:14:51:5b:c9:1c:5a:80:7e:
ff:a2:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:45 2026 by rpki-client