
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json)
Hash identifier: qumppSa3qck88uyTGTANTqaSdu0rucbwG+hBUHPTFi8=
Subject key identifier: F4:40:5A:E7:E1:05:98:EB:A2:43:C7:56:70:7C:5A:58:51:0C:F6:B5
Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
Manifest number: FC
Signing time: Mon 02 Mar 2026 11:16:11 +0000
Manifest this update: Mon 02 Mar 2026 11:16:10 +0000
Manifest next update: Mon 09 Mar 2026 11:16:10 +0000
Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: u2lSV7eJC1B3anwxsghfzWmeDl+CblN4SksjrHBnmYo=)
2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: UGlQ7ArlsMtnVStcMzbq3puKKEXptiKFpSrfkoZ8QJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl
rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Validity
Not Before: Mar 2 11:16:10 2026 GMT
Not After : Mar 9 11:16:10 2026 GMT
Subject: CN=69a5717b-a7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:96:46:a6:01:5c:d7:a9:d0:72:d8:8e:bb:
c3:b6:5c:31:68:de:b0:56:f4:1e:b5:ba:ba:4e:12:
e0:cb:77:86:af:06:52:c3:69:03:f5:a8:01:55:a5:
c7:91:71:8f:7b:f5:9a:ce:2a:00:54:47:ce:b3:79:
d2:bf:3b:f5:ee:ea:5f:5b:b9:eb:74:19:05:19:e7:
6f:10:9e:4b:fd:3f:c5:93:fb:43:44:c0:2a:3e:bb:
8d:4f:b8:9f:6e:98:4b:cb:bc:b6:df:96:26:3b:a5:
8c:2f:26:89:0b:2c:45:d4:be:7e:c7:06:71:04:91:
ba:59:b6:b0:6e:45:3c:d7:04:8e:af:35:aa:dd:e7:
27:f6:a4:d6:ce:c3:8a:0b:73:ec:6e:03:9e:a9:5e:
36:f5:7a:f6:e8:68:d3:95:be:be:b7:d1:75:ef:30:
3b:df:6d:e6:87:d1:f6:32:1e:3d:69:e5:f0:7e:31:
9b:6b:31:6c:d5:e2:42:f8:c4:50:e1:34:7b:90:b8:
d2:8f:59:bb:47:2a:c8:87:90:45:b5:bd:06:17:1e:
a3:eb:16:f4:ca:3c:3a:3a:fa:89:e0:c4:66:79:5a:
71:4f:5f:21:7b:bd:0b:11:d3:a6:23:9b:26:a1:ac:
2f:31:7d:3a:5f:91:b3:9b:f4:cd:bb:89:2d:f3:43:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:5A:E7:E1:05:98:EB:A2:43:C7:56:70:7C:5A:58:51:0C:F6:B5
X509v3 Authority Key Identifier:
keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:5e:d3:e9:3d:ac:e0:eb:f3:94:9c:4e:fc:a4:09:bc:fd:
95:d5:3d:51:d7:a5:eb:a5:f9:3d:c4:71:9f:c7:a0:87:cf:29:
8c:f8:0e:09:a2:3d:b1:b3:db:76:0f:17:f1:dd:9a:ed:40:e9:
1b:38:00:9a:ed:6f:44:65:77:62:06:e8:a0:05:52:55:55:52:
5a:36:ad:4a:48:79:ee:7d:8b:25:78:4e:89:77:74:58:c7:61:
fb:54:16:a0:bb:35:31:63:c1:d9:14:47:a5:16:11:0f:3a:e9:
37:80:55:2e:e3:bd:46:9f:20:1a:77:69:45:cf:37:55:0f:6e:
28:d0:0c:23:c1:0f:ea:9f:50:bb:3a:e4:6f:b7:bf:a1:81:ef:
2c:ef:83:01:40:97:80:66:8a:aa:8a:3f:80:a2:57:6a:87:67:
59:9e:9a:0c:39:aa:27:b9:db:f2:bc:88:36:3d:cf:85:b9:d0:
45:bf:56:23:a6:cf:cd:65:0b:29:22:7d:d0:49:95:e5:3f:23:
4f:3a:52:63:54:a8:63:ab:f2:4d:5f:75:dc:d5:39:fc:14:41:
a2:92:d4:2f:e9:91:9c:5b:68:de:37:71:2e:f7:a1:4c:e7:6b:
ab:cf:5d:4f:79:a6:c6:8b:de:8f:e3:87:39:21:56:7c:88:da:
55:ea:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:52 2026 by rpki-client