
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json)
Hash identifier: 7096G88r8KaSbnDJFuLdZm9BI4H9j0/40pRZcWJrMAQ=
Subject key identifier: 08:B9:C9:12:53:AA:A9:73:42:27:84:86:A0:64:6A:1D:06:64:DB:BF
Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Certificate serial: 05F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
Manifest number: 05EE
Signing time: Thu 16 Apr 2026 22:50:43 +0000
Manifest this update: Thu 16 Apr 2026 22:50:42 +0000
Manifest next update: Thu 23 Apr 2026 22:50:42 +0000
Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: 7oX+FpVmOX/IK0RvsEqokJ+b9Ff41kh4qNrvPSRmwBQ=)
2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: ma+DNS3MZoAgjxWhTTX9baQIdHEsD5fkm6hMo1qHO0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Validity
Not Before: Apr 16 22:50:42 2026 GMT
Not After : Apr 23 22:50:42 2026 GMT
Subject: CN=69e167c3-df8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:ff:86:5c:76:45:f2:8a:28:ff:65:7f:10:
b5:6c:2f:79:c2:e5:34:74:4c:67:d5:79:bb:39:2a:
91:b2:a8:2a:88:31:17:9b:1d:14:6b:30:f7:91:cf:
a8:19:33:0e:4b:11:69:43:8e:fb:b5:34:28:5d:a6:
17:64:15:5f:43:f7:d7:ea:73:f5:69:9d:2e:bb:ea:
8c:fd:07:cd:37:52:fb:f1:3d:ca:1c:11:3c:bd:f5:
00:70:48:46:21:c5:8b:01:25:9b:ff:8c:26:06:ac:
98:8e:29:cc:d2:aa:bd:44:43:e2:f8:5d:ec:85:e0:
e2:24:ca:b1:ca:7d:9e:0d:3a:89:6b:fd:1f:71:dc:
2f:0f:cc:37:81:cb:13:e2:a9:03:55:bd:49:7a:64:
d9:d8:17:c6:4e:fe:ca:cb:39:a7:d7:0a:94:a3:31:
b1:42:84:21:ce:1b:4f:30:c8:23:f2:5e:a8:c6:b2:
0d:da:d9:79:55:9e:52:d1:8c:85:e2:f0:44:43:95:
e2:5b:82:aa:bc:d7:b3:fc:21:94:15:c5:80:6a:c5:
16:02:56:37:d3:08:c2:a3:42:42:ee:1b:41:bd:c6:
68:d4:0d:f5:a5:92:67:64:53:1d:2f:4b:c0:6e:07:
da:b7:b3:a1:f0:59:c6:49:42:7d:1b:28:99:ec:5a:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B9:C9:12:53:AA:A9:73:42:27:84:86:A0:64:6A:1D:06:64:DB:BF
X509v3 Authority Key Identifier:
keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:00:66:8a:6b:95:a2:f8:0b:3f:6c:c9:8b:48:dc:96:7e:fe:
55:3f:9b:ee:35:f6:9d:02:93:f9:27:50:a6:7d:e4:0b:2c:2d:
eb:d7:f0:b4:55:15:c6:c9:dc:03:26:fa:e7:cc:b2:55:f0:3b:
cb:6e:54:af:05:44:a3:e2:f1:fe:02:7e:76:cd:10:a8:44:cb:
b1:1e:b3:f8:d1:67:8f:09:61:b1:84:51:e7:a1:5f:f5:c8:72:
c0:a5:10:56:62:ce:d9:e3:e1:97:2d:d7:3c:8f:e6:db:7e:62:
b7:63:7a:f8:42:c5:33:21:27:0e:bb:6b:76:1d:af:70:77:06:
52:a2:21:8d:a5:c9:6e:ed:df:f2:aa:4d:0f:c5:51:55:e2:13:
16:4e:16:12:90:2c:a1:15:ae:29:28:8f:7b:44:29:86:d3:3d:
2b:2e:3b:6a:0e:49:2d:e2:fe:5f:17:ec:be:6e:2f:3a:e5:58:
4c:77:55:8b:4a:0b:7a:3f:ef:0e:e2:4b:29:2c:2d:3e:f6:39:
ef:43:06:22:54:d5:c7:5b:37:b6:22:55:38:39:05:56:bf:e6:
5f:4b:da:be:ef:e7:12:50:f8:73:7f:18:76:fc:13:ad:a6:01:
1e:36:6e:c1:ff:a7:7d:29:02:05:5c:cf:ad:bc:da:17:cc:40:
c9:42:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:53 2026 by rpki-client