
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json)
Hash identifier: KfGd1vp8CPfC/bFDgoqhMaMfqwDtHLx7nauEGZuHj/Q=
Subject key identifier: 45:EA:2B:21:35:D6:AF:91:86:05:FA:7F:1E:E5:C3:F9:BF:3E:F1:B6
Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
Manifest number: 79
Signing time: Sun 01 Mar 2026 09:09:28 +0000
Manifest this update: Sun 01 Mar 2026 09:09:28 +0000
Manifest next update: Sun 08 Mar 2026 09:09:28 +0000
Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: htADeKLg+kAf9v6d/Ak6GyUw9VqChPmBaY5fXJSkJ5Q=)
2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: 7qxBjFWfjtxDzJZ+ee8N6Gvag8T/oRihev17oCbY5DY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Validity
Not Before: Mar 1 09:09:28 2026 GMT
Not After : Mar 8 09:09:28 2026 GMT
Subject: CN=69a40248-6d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:ab:12:2f:61:c5:e5:58:e5:d2:21:fb:b5:
72:81:5f:4d:f7:d6:c7:5c:d0:bf:a2:37:3b:19:1d:
47:f1:01:cb:19:11:90:48:26:99:22:bb:19:da:0a:
a9:dd:ce:52:0e:a6:53:9a:57:99:d8:3a:5a:63:b8:
03:12:01:f2:76:96:a0:39:7a:ab:18:c3:b0:d5:d3:
14:a1:34:6e:72:ee:e8:0d:81:71:fa:66:1b:b7:bf:
59:d1:61:94:13:ef:49:58:62:d4:0f:16:59:13:7c:
b5:d7:39:98:e6:fa:c3:53:65:a3:4b:f8:78:dc:9e:
35:a2:d8:39:e7:2f:3f:d3:a5:65:c3:2d:8d:bf:e0:
51:04:b0:cd:26:81:9e:19:95:b5:01:79:12:99:a1:
83:96:05:d4:e9:b8:92:64:cc:69:8f:27:27:d5:b0:
5e:2b:b2:23:d5:18:dc:32:8a:a8:53:46:35:79:f2:
ec:3c:66:83:c0:9d:f3:27:2a:45:15:74:56:23:42:
33:5c:dd:bc:09:bd:11:57:65:d6:32:60:d4:13:20:
76:eb:3d:14:4f:79:dc:66:4c:f8:52:ce:2d:81:07:
bf:40:74:85:33:dd:93:52:53:d6:71:5b:ed:97:81:
89:eb:e5:b8:24:44:e4:61:e4:e8:cc:03:10:ca:dd:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:2B:21:35:D6:AF:91:86:05:FA:7F:1E:E5:C3:F9:BF:3E:F1:B6
X509v3 Authority Key Identifier:
keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:fb:c0:bd:18:ca:54:e2:f9:25:d7:ca:db:52:56:03:5d:ed:
ed:2e:dd:2a:7b:54:84:cd:aa:cb:82:ad:54:d0:95:1d:b3:e5:
48:61:ae:af:ed:29:f9:6f:7a:9d:d6:3e:57:0c:f0:9c:ff:1b:
fe:16:7e:b0:ee:3e:b6:51:b9:50:bf:3e:0f:18:e9:01:b3:22:
96:4f:70:ff:8a:77:99:78:eb:b3:f2:02:c0:8c:05:bc:81:26:
83:72:7d:f3:08:e3:42:47:e4:82:08:d0:f1:71:1e:d1:76:57:
6f:6e:96:30:88:18:cf:9d:55:f9:73:3d:7e:7e:4c:7b:67:d0:
2a:1c:34:6a:db:5b:7d:3d:f6:8e:f6:9b:7e:80:cf:c7:fd:79:
98:e2:2e:8a:ef:4e:55:70:07:fa:05:8b:db:b7:7e:35:70:96:
89:c6:f6:89:1a:ae:ef:72:e1:2e:df:f8:1c:c4:e3:7d:89:f8:
cc:e1:ac:b0:27:85:85:b1:21:ac:31:d7:58:f3:ae:33:b4:87:
ab:8f:1b:0e:af:79:b0:a0:cc:bc:60:0d:fd:80:0e:55:40:50:
1a:aa:e2:f0:0f:4e:ed:6e:7c:e9:f6:ce:1f:e9:89:48:a2:00:
1a:e3:ad:62:26:ad:9f:2d:7a:70:84:9b:c3:44:d9:e2:d9:88:
cc:25:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:57 2026 by rpki-client