
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json)
Hash identifier: cJtcU+MxVLdy/NmVpKb64LxfG72dcYUKK0cCiX8iEHo=
Subject key identifier: 43:42:F0:E5:B8:96:88:56:80:9A:5D:BA:7D:37:49:9C:AE:5D:F9:F3
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial: 0254
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
Manifest number: 0243
Signing time: Mon 02 Mar 2026 03:09:11 +0000
Manifest this update: Mon 02 Mar 2026 03:09:10 +0000
Manifest next update: Mon 09 Mar 2026 03:09:10 +0000
Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: Ix+XQqYxGgePCh5iHR7S+2oqM7c5Vi0F+snqyUk1cAs=)
2: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: WJ2lYDlF034OhzHlcqaIohBGtXuBKh0QtyazKPqZd64=)
3: B24758AE772311EFA5510A63C4F9AE02.roa (hash: PCIW0fEME2KOfnq/TRE2cq6zzHOhVe+Ww8ZwI33T/9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Validity
Not Before: Mar 2 03:09:10 2026 GMT
Not After : Mar 9 03:09:10 2026 GMT
Subject: CN=69a4ff57-38fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:43:db:71:43:c0:39:d4:12:91:aa:12:18:
92:60:86:b4:8e:5b:40:d4:39:1e:48:9c:aa:d3:80:
b3:87:d8:da:b9:f5:89:de:5f:4f:2b:d3:79:db:72:
f1:02:5e:89:ad:f6:0a:d7:d6:11:8a:a8:06:94:2b:
02:95:cc:e1:7b:7c:ed:50:d6:dc:3b:e9:a4:11:36:
c5:e6:eb:fc:68:38:69:a2:20:b8:75:61:ef:f2:42:
64:25:24:d2:29:bb:f8:cd:a4:3d:7e:04:29:2e:ea:
32:5e:73:c0:75:07:91:c6:35:a5:3d:46:5a:2f:19:
71:f0:01:21:b9:53:5e:50:8f:28:ac:00:88:ae:97:
c8:de:f3:f1:3f:c1:8a:76:04:e4:fd:b5:09:23:50:
eb:38:41:04:c6:11:2e:2f:26:b3:ec:4f:a7:f0:a4:
af:f6:ed:c8:8f:3b:92:6b:ca:77:88:f2:da:22:08:
00:c0:4e:83:cb:cd:d2:eb:32:47:f7:bf:42:37:8d:
50:c8:48:a6:5f:99:52:dd:a7:77:c7:af:cb:72:b1:
fa:f9:f1:4d:a8:c6:bd:4f:ca:28:bb:4f:20:77:66:
fc:69:0b:6f:9b:fe:ca:c4:b1:7e:ad:a8:b9:06:12:
ab:87:82:a4:d4:ed:41:07:87:5e:a3:4d:c1:a6:08:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:F0:E5:B8:96:88:56:80:9A:5D:BA:7D:37:49:9C:AE:5D:F9:F3
X509v3 Authority Key Identifier:
keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:52:1d:e3:d6:43:79:f8:64:b8:a4:05:1d:b1:21:94:25:f9:
e1:c4:33:f1:68:b6:eb:77:e3:af:b8:d0:c4:4b:8c:d9:ea:27:
a2:0e:89:13:48:d5:ae:f8:f6:a1:6f:7b:42:41:f2:f8:11:a6:
0d:7f:b5:bf:0b:27:a4:3a:5a:af:92:93:b5:b1:84:27:6a:aa:
1d:b8:67:c2:1d:7b:13:12:68:0a:49:db:db:24:3c:94:3e:79:
03:45:c6:0d:5c:96:24:02:36:cc:36:41:6b:56:f3:f2:3e:cb:
12:e8:68:6f:76:a2:a7:49:a1:c8:c2:cf:55:0c:3b:2c:f7:06:
e1:5c:5a:64:16:dd:38:e6:00:78:7a:5f:a8:59:92:fb:66:33:
3d:93:74:29:11:7e:82:45:63:eb:6b:4e:bc:d8:4d:3e:94:91:
cc:20:70:c1:52:75:ae:c4:c2:8e:fb:ee:ec:d1:f0:ec:92:06:
c7:a7:4a:73:70:81:c9:83:71:3a:c3:41:80:9d:eb:63:55:5b:
88:85:d0:3c:fb:80:0f:ed:f2:4b:fa:f0:47:d0:c4:89:04:16:
0d:f2:cd:8e:4a:34:d3:d8:20:3c:46:91:95:f9:01:b8:bc:c9:
4b:86:2d:6a:04:a2:64:73:ab:8d:c3:5d:43:b4:93:e6:89:17:
c2:56:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:44 2026 by rpki-client