
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json)
Hash identifier: dGZzarNAc05qCs/48atrKFDLl3YKMJ+WMQDGxWcQKnU=
Subject key identifier: 16:CB:5E:6E:1D:30:43:02:BE:9F:86:8D:BE:7A:6C:43:02:6F:F3:E4
Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF
Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF
Certificate serial: 3512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
Manifest number: 350E
Signing time: Fri 12 Jun 2026 15:17:54 +0000
Manifest this update: Fri 12 Jun 2026 15:17:53 +0000
Manifest next update: Fri 19 Jun 2026 15:17:53 +0000
Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: ILXmM9sL8TtF+SprsXW75rVrO80pSDi6Plb+k5pH9HE=)
2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: e8GSBttrBgtoI1SFNewE5+wtUTbMHlzUBUVAWSdm4M8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl
rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13586 (0x3512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF
Validity
Not Before: Jun 12 15:17:53 2026 GMT
Not After : Jun 19 15:17:53 2026 GMT
Subject: CN=6a2c2322-8f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:60:7b:3d:00:ef:60:ea:6a:de:45:9b:7a:
6e:15:93:0b:04:8c:12:00:4f:c1:96:50:f1:59:17:
43:9b:2d:1a:2e:cd:b8:62:0b:46:6e:1d:e1:d9:78:
34:25:e1:72:f5:93:36:d3:96:5d:01:55:ef:f8:03:
44:ad:67:c8:c3:7c:75:79:24:e0:dc:73:e8:7c:f4:
c9:a0:bb:40:6c:da:fc:9a:d4:c9:ba:08:2f:5c:1b:
e5:6d:01:79:17:ca:ff:57:2d:f4:f6:ef:27:29:e7:
b1:8c:5f:b0:e6:52:22:fe:1f:de:5e:0f:85:8d:5d:
f6:78:43:fa:9b:ce:06:00:23:6b:b8:f3:5e:59:a4:
51:ab:58:7d:55:4d:f6:30:b3:70:08:63:91:45:17:
37:13:95:f5:7d:69:d9:87:75:db:f8:8b:bd:bf:09:
59:9c:86:59:20:cb:28:5f:31:ae:0e:1d:7b:72:14:
41:11:13:eb:c1:aa:a8:23:9f:cd:e9:13:6c:42:fb:
e8:46:ac:31:9c:24:9e:81:cf:af:fe:49:5a:a5:d2:
a5:ab:a3:35:54:5d:7b:00:ed:a2:a7:a3:f4:88:0a:
fb:54:fb:07:46:db:9c:f7:da:5e:9d:e1:f7:ff:c1:
a8:ab:15:a4:69:d5:60:a0:9a:6b:28:cf:dc:4b:2c:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:5E:6E:1D:30:43:02:BE:9F:86:8D:BE:7A:6C:43:02:6F:F3:E4
X509v3 Authority Key Identifier:
keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e8:91:79:f7:b1:36:0b:3c:cc:c3:d3:5c:6c:9d:16:69:35:
94:fe:f7:e6:5c:ed:96:c8:0d:a6:02:74:25:45:e9:94:93:4a:
ce:85:ef:21:0e:36:ff:56:61:2c:e6:10:5c:fc:c1:07:27:10:
b9:ac:e2:58:65:c5:f1:36:09:b0:39:36:e0:9c:c8:4c:bd:d5:
99:3c:4b:6f:d7:1a:70:3c:29:b5:ba:05:99:3d:4f:e7:0d:4e:
05:81:f8:ad:b7:61:3a:c9:b4:25:46:0d:b1:e8:11:c0:05:22:
91:d2:d3:30:a3:c2:c4:fc:4c:5d:a5:27:ef:2c:9c:69:01:bc:
c0:ed:7a:72:d8:15:10:14:5f:b9:3e:b4:3b:ac:f1:9a:c4:23:
d8:f8:1d:2a:fd:7a:65:f2:33:11:83:d8:9a:fe:0d:87:c0:3d:
fb:66:7c:ba:ac:76:b6:7e:04:99:bd:c2:ba:d1:7d:1d:26:a9:
b3:c8:23:25:5b:c8:e5:21:52:97:8d:bf:34:a2:b4:65:98:ed:
f5:6d:29:c9:12:d9:d6:bc:48:5c:b3:8e:9f:ea:f6:1f:14:31:
22:91:0a:ce:a1:55:5d:8c:bc:cb:5e:60:bd:0e:d5:5e:38:59:
94:08:a0:6e:bc:2d:bc:0d:54:a0:f7:e4:7c:6c:00:bc:bb:cb:
af:9c:c7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:51:22 2026 by rpki-client