
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier: H+4g0CZUhvceaC+k+chzz6kt9j+YVJbMvFTmjEs5k4U=
Subject key identifier: F5:47:1F:8F:B5:19:1A:AD:26:DB:78:01:88:E5:66:6C:C0:DC:65:09
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial: 0C52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number: 0C46
Signing time: Sat 28 Feb 2026 18:56:30 +0000
Manifest this update: Sat 28 Feb 2026 18:56:29 +0000
Manifest next update: Sat 07 Mar 2026 18:56:29 +0000
Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: v/cdI0FSHD9Ae0veyM4A9v/o3i1m4gaT6XyLRNTOCvM=)
2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: hA+WjNUTeG1AnXZuvAjzzld8pq8Hs2wTD6vIEKRFdS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3154 (0xc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Validity
Not Before: Feb 28 18:56:29 2026 GMT
Not After : Mar 7 18:56:29 2026 GMT
Subject: CN=69a33a5e-f0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:63:0d:2d:7e:d9:8d:9d:cc:d4:49:3e:ae:
c9:ff:b3:9e:93:d7:0e:f0:ff:06:18:26:a9:29:db:
c6:1e:4c:9a:ce:3d:ac:4f:26:51:00:66:da:54:c6:
59:3b:75:c5:7e:41:f2:12:c1:39:9c:73:de:07:7b:
8e:a4:f9:90:4a:2c:77:5c:cc:72:65:5c:db:1e:ab:
0c:c7:20:cb:e7:2e:f5:90:6e:0b:49:9d:1b:da:92:
4a:63:70:ea:80:d0:08:79:48:f6:94:7e:70:0b:6e:
32:e1:1a:05:56:09:57:41:11:48:f6:8c:ae:02:35:
62:dc:52:58:3d:14:2b:51:d3:0a:15:3a:1a:6b:2f:
5c:28:87:2e:49:33:c5:04:24:83:be:af:99:01:0e:
1c:44:33:bd:9a:12:5f:a0:c0:80:b6:a1:e2:d3:b3:
97:be:64:1e:50:0c:b1:32:24:d8:2f:04:87:c3:cc:
f8:ae:d3:f3:4a:f5:6f:31:6b:99:a9:02:9f:ae:46:
26:f1:e5:02:a8:c0:7a:02:6e:00:d7:6b:fe:2b:30:
67:11:0a:27:57:2f:dc:c6:a1:b4:78:a7:34:3d:92:
26:f6:e2:07:c9:9b:31:7b:02:c2:af:44:df:e2:4c:
81:22:94:91:8a:81:53:40:52:fe:b6:64:a1:d5:e4:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:47:1F:8F:B5:19:1A:AD:26:DB:78:01:88:E5:66:6C:C0:DC:65:09
X509v3 Authority Key Identifier:
keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:c3:27:45:c5:7a:a9:22:89:5b:80:80:6d:f6:09:d0:de:
09:58:43:a4:a6:4d:93:ba:0f:15:88:68:3d:1d:7b:29:4f:1c:
e3:90:47:3b:9d:b6:e4:81:90:cb:46:e3:90:70:28:e8:d0:3b:
bd:30:52:b0:45:58:cd:b2:16:65:3a:2c:b1:d2:7e:4d:4b:f9:
4d:bf:d2:4d:67:cf:55:4a:5a:1a:e0:a9:6e:32:30:52:e7:3f:
fe:e5:bd:5d:18:29:9c:c4:f7:37:77:33:d5:b9:52:ca:67:9d:
eb:cf:b4:ed:7a:40:82:0b:7d:ab:c0:d3:33:57:7b:74:9b:f0:
12:75:ef:8a:41:6c:07:a9:8a:67:f6:0d:0b:cb:a5:76:d7:ae:
78:82:fc:62:f6:d7:65:64:bd:90:2d:0c:d1:51:2f:6b:a5:cc:
96:57:9a:4b:59:ef:a7:37:fd:f1:38:a5:98:a3:d8:74:f0:37:
88:1c:ac:09:7c:59:ca:22:49:43:ce:5d:77:82:47:ed:12:03:
5b:2b:0c:1b:89:ee:be:1e:1e:7c:79:d3:c9:d5:45:c0:14:bc:
2e:5f:ad:da:11:2a:d5:3f:aa:ca:37:ba:0b:c5:c8:e6:a1:82:
a3:4e:7d:8f:db:0f:1d:40:08:bc:47:8c:4c:08:e1:d4:89:2a:
5c:a1:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:59 2026 by rpki-client