
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json)
Hash identifier: J06fRz168icb7co7iM0ALWgfWrcf6JzIF3yWmP2VDBI=
Subject key identifier: BE:E8:4B:93:74:D3:80:48:22:2D:73:50:51:25:66:4B:97:3D:76:8C
Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Certificate serial: 0652
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
Manifest number: 0647
Signing time: Mon 02 Mar 2026 01:06:12 +0000
Manifest this update: Mon 02 Mar 2026 01:06:09 +0000
Manifest next update: Mon 09 Mar 2026 01:06:09 +0000
Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: K5GhVrTJLOO6Sn163M6tQT0wQufaKEtR3z2Sks4hYHU=)
2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: RpPhdY8+tXmNKm2CO6PsrLMjG0gZZmTjNB6euQu9tho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Validity
Not Before: Mar 2 01:06:09 2026 GMT
Not After : Mar 9 01:06:09 2026 GMT
Subject: CN=69a4e284-2f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:9f:ae:66:f9:3d:70:db:10:f7:f8:e1:a3:
30:6c:22:cb:cf:0d:b9:12:da:92:7f:64:30:28:99:
05:bb:4e:dc:86:49:95:59:c2:16:f8:8d:4f:18:68:
2f:8a:e7:0c:90:82:50:9b:a8:7b:ee:ec:96:b5:42:
7d:8c:54:52:0a:65:5b:3f:2b:27:cf:b5:94:74:cd:
87:cf:cd:0f:f5:9f:0e:63:b3:c1:7e:27:ce:01:56:
39:2c:a4:75:6c:25:de:6f:08:c2:a9:4a:19:9a:a5:
3b:6c:84:84:09:bf:b4:a1:ee:fb:57:7d:6d:a5:65:
65:7b:2c:6c:8b:19:57:62:87:be:a9:9d:10:ff:7b:
c5:88:5d:2c:d8:e9:c0:ab:64:bf:a1:7d:ba:8b:25:
53:a7:83:b2:11:34:da:c6:08:6b:19:5d:c1:d8:17:
02:f8:40:86:fc:9f:7a:2a:92:30:03:66:be:ee:92:
93:41:e3:47:5a:f5:4a:0b:30:0e:7e:d7:1c:21:09:
53:53:61:73:4f:ab:f3:e4:d2:cf:a1:ee:ef:9a:fa:
3d:fe:f9:dc:62:e5:61:2f:f2:98:fc:d5:92:bf:97:
1a:26:79:d8:25:a4:8c:12:04:22:f0:9c:5d:f4:41:
c1:6f:68:04:7a:23:7f:0e:8c:a3:50:89:6e:cb:4a:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:4B:93:74:D3:80:48:22:2D:73:50:51:25:66:4B:97:3D:76:8C
X509v3 Authority Key Identifier:
keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4b:69:4c:8f:35:af:df:96:e5:f3:8e:bc:37:84:07:36:2a:
3a:f1:6d:a9:ca:5a:58:35:54:8c:ee:3d:19:43:4a:7d:4a:e1:
75:a4:fe:a7:fd:51:74:4b:15:ba:c4:39:07:12:2f:86:ab:5d:
c3:ed:82:ed:00:45:9d:8b:4f:bb:b4:fa:78:4c:4d:4d:c3:22:
84:ce:38:0e:40:05:05:8c:e7:cf:5c:36:75:f4:3b:a2:c7:e8:
fe:65:b1:2d:00:1c:94:9e:35:27:14:1b:3a:0e:ee:32:a5:8d:
13:cf:2e:be:7c:bc:b7:d6:1d:37:10:07:93:88:c7:f6:e5:e2:
4e:33:14:dc:d8:b3:52:b3:d3:fa:c8:8b:c0:fa:8c:db:31:48:
ce:02:c5:2e:93:9d:d6:08:94:dc:59:15:f8:87:33:30:57:2c:
ee:1b:5e:2d:54:08:ae:04:69:01:03:a8:46:d8:7c:ac:18:73:
20:27:54:f8:bc:09:13:6f:6b:2a:19:46:b2:97:7b:c9:d4:f5:
f7:64:bf:bf:55:64:42:c7:53:f8:37:69:b9:88:8c:43:43:f2:
7a:19:f8:24:48:02:75:7a:b4:cb:da:8c:a0:07:82:06:d8:d8:
6b:19:98:bc:86:a6:29:56:6f:00:e5:47:13:af:f7:72:c3:75:
ba:b0:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:41 2026 by rpki-client