
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json)
Hash identifier: LxUvf60zOeqV5JQfdGnplX/KYB+vZVfZJNfvoTK2mNM=
Subject key identifier: 04:6D:2E:63:7D:29:13:C4:BC:40:C2:27:4C:A1:AB:E3:A5:CD:2B:2C
Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Certificate serial: 05DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
Manifest number: 05D6
Signing time: Mon 02 Mar 2026 01:23:01 +0000
Manifest this update: Mon 02 Mar 2026 01:22:59 +0000
Manifest next update: Mon 09 Mar 2026 01:22:59 +0000
Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: 5l+O2e+BYRLFzSgrxL77tjdrvaRbQtAWvn1M8VYqvPw=)
2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: ma+DNS3MZoAgjxWhTTX9baQIdHEsD5fkm6hMo1qHO0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Validity
Not Before: Mar 2 01:22:59 2026 GMT
Not After : Mar 9 01:22:59 2026 GMT
Subject: CN=69a4e674-2f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:b5:d4:db:1f:67:d7:06:60:f2:60:dd:d0:
7a:aa:0b:c8:87:9a:a8:84:c9:2b:3f:00:19:4e:22:
47:a8:c8:35:9f:be:7b:13:98:44:93:60:61:44:25:
3b:33:4c:c4:e1:9b:f1:11:51:97:fb:64:7f:d5:1e:
74:d4:ea:a0:da:b7:43:c7:89:c8:b2:9a:26:e3:d7:
95:5d:cb:f1:fa:0e:87:97:3c:5b:2f:b3:51:1a:5e:
0f:5e:dd:fa:8e:65:c6:84:e3:20:07:d1:58:6a:32:
c1:15:42:82:d0:c9:61:2e:0d:dd:70:1d:91:93:49:
24:05:b5:91:f4:b4:4d:f8:44:7a:3d:d1:66:cc:b8:
00:88:31:06:1c:ea:80:b4:1e:7c:e6:57:71:03:5e:
1d:4f:27:ad:b0:66:24:e0:85:95:98:54:9c:14:5d:
2c:f0:fb:bf:2c:09:67:bc:14:fe:50:89:e6:8f:fb:
7f:70:f5:80:c0:d4:3d:1f:50:30:7b:fc:b0:e7:82:
eb:28:81:5d:e5:9d:6a:c7:47:04:cf:61:59:14:49:
87:91:9f:78:be:1c:a1:77:29:b7:44:53:60:7e:c8:
6c:e7:da:ef:af:98:57:95:0d:de:40:9c:ee:68:a3:
db:4f:fb:e7:9b:ba:09:7a:14:dc:94:c0:41:61:8e:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6D:2E:63:7D:29:13:C4:BC:40:C2:27:4C:A1:AB:E3:A5:CD:2B:2C
X509v3 Authority Key Identifier:
keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bf:e7:69:42:b1:ed:26:80:b5:ad:c0:be:b2:89:82:38:5b:
e2:c6:42:54:51:75:86:7f:63:ba:de:2e:28:4a:1c:0a:49:e4:
d2:08:4f:45:61:54:36:28:9f:df:80:19:05:38:5b:0f:59:20:
04:d2:d2:60:8d:45:88:e6:22:d0:63:3f:08:6c:cc:3d:a5:95:
14:99:cc:cb:d2:a1:58:35:d2:a5:b4:d7:ae:a1:cc:88:1a:b3:
fe:43:e1:8e:51:51:3c:d3:05:d1:a1:e8:73:ed:39:03:36:00:
44:40:8a:c6:33:e4:e8:cc:9d:f2:b5:40:c5:9c:55:7e:bb:48:
37:10:7d:c6:da:d7:02:2a:28:94:b6:3c:49:36:30:d1:97:d9:
c6:81:33:7a:83:c4:1e:a8:79:de:af:09:57:5e:20:a5:50:a2:
91:a2:16:f1:8a:7b:4e:50:e6:2c:80:a3:2e:c4:c0:6a:98:4d:
1c:57:5a:dd:79:44:9b:44:8d:f2:e7:e7:1f:0d:f5:80:af:83:
07:2c:6c:65:2e:68:ea:2f:93:9b:84:31:39:64:f3:39:b6:ff:
76:3d:58:4b:b6:48:81:5a:21:69:ba:c5:67:5a:3e:d2:68:ae:
04:52:dc:7e:a9:84:0f:94:00:a7:e7:0c:4e:a7:06:69:3b:c3:
ac:44:16:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB
QTI4NEJENzEwHhcNMjYwMzAyMDEyMjU5WhcNMjYwMzA5MDEyMjU5WjAYMRYwFAYD
VQQDEw02OWE0ZTY3NC0yZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlDW11NsfZ9cGYPJg3dB6qgvIh5qohMkrPwAZTiJHqMg1n757E5hEk2BhRCU7
M0zE4ZvxEVGX+2R/1R501Oqg2rdDx4nIspom49eVXcvx+g6HlzxbL7NRGl4PXt36
jmXGhOMgB9FYajLBFUKC0MlhLg3dcB2Rk0kkBbWR9LRN+ER6PdFmzLgAiDEGHOqA
tB585ldxA14dTyetsGYk4IWVmFScFF0s8Pu/LAlnvBT+UInmj/t/cPWAwNQ9H1Aw
e/yw54LrKIFd5Z1qx0cEz2FZFEmHkZ94vhyhdym3RFNgfshs59rvr5hXlQ3eQJzu
aKPbT/vnm7oJehTclMBBYY5UXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARtLmN9
KRPEvEDCJ0yhq+OlzSssMB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw
M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI
SV9Oc2VzSUllRlNxS0V2WEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG7/naUKx7SaAta3AvrKJgjhb4sZCVFF1hn9jut4uKEocCknk0ghPRWFUNiif
34AZBThbD1kgBNLSYI1FiOYi0GM/CGzMPaWVFJnMy9KhWDXSpbTXrqHMiBqz/kPh
jlFRPNMF0aHoc+05AzYARECKxjPk6Myd8rVAxZxVfrtINxB9xtrXAioolLY8STYw
0ZfZxoEzeoPEHqh53q8JV14gpVCikaIW8Yp7TlDmLICjLsTAaphNHFda3XlEm0SN
8ufnHw31gK+DByxsZS5o6i+Tm4QxOWTzObb/dj1YS7ZIgVohabrFZ1o+0miuBFLc
fqmED5QAp+cMTqcGaTvDrEQWxA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:12 2026 by rpki-client