
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json)
Hash identifier: FxhP8DRlQYdV8lB3BVtB+eNRU3ZQvAm7ysZ0oXizR0U=
Subject key identifier: 0F:99:F6:3C:61:A0:B3:6E:C2:FD:DE:51:2F:4D:37:F6:27:48:A5:71
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial: 07EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
Manifest number: 07D7
Signing time: Mon 02 Mar 2026 15:03:26 +0000
Manifest this update: Mon 02 Mar 2026 15:03:25 +0000
Manifest next update: Mon 09 Mar 2026 15:03:25 +0000
Files and hashes: 1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: S9IBpZxnzoodbdEv7PyXxV1bIfXHhqfm6c8Puf+N318=)
2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: 2gCt/x7KidgUUiic8KeZ4+Ldk+O6Z1R5WNeHf6m8yn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Validity
Not Before: Mar 2 15:03:25 2026 GMT
Not After : Mar 9 15:03:25 2026 GMT
Subject: CN=69a5a6be-f7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:19:5c:98:37:fe:7a:cc:e9:7b:0e:c1:36:
ad:d8:f4:83:b0:9b:38:42:a8:d0:db:66:db:f0:fe:
30:fc:21:a1:7f:c1:32:71:3b:5e:a9:b5:79:e8:a4:
cd:c2:dc:ce:93:cb:e7:27:9c:b5:2e:f2:5d:be:08:
66:66:85:f4:98:bb:37:bf:b7:6f:11:45:ee:36:92:
43:13:f4:a8:87:cc:40:57:5b:dc:67:d7:81:4a:a8:
2a:f6:d6:c8:bf:74:0e:15:13:19:d8:3e:17:32:83:
a1:bc:42:f8:42:bd:c6:ab:9d:52:b6:15:68:e6:21:
f6:f0:a4:43:74:3b:fb:14:b2:e3:b9:d6:9c:80:73:
26:04:52:30:a3:3a:05:5c:9f:1c:ff:d2:9a:d2:34:
8a:20:bc:33:6d:67:84:4f:bd:48:83:89:72:0b:d0:
f9:f3:6c:e4:14:d1:fe:d1:e5:3c:6a:3f:36:7e:82:
52:28:c6:00:4d:2a:42:09:25:33:30:ea:a8:c7:95:
e9:12:5d:1c:87:ba:f9:e4:48:14:d9:07:e5:db:65:
03:e2:93:8a:35:80:34:a1:ab:48:7f:fd:4a:e1:b2:
d1:4c:00:f1:32:09:43:d2:4a:71:21:3e:ad:fa:56:
61:0b:ee:dd:08:51:af:fd:69:83:05:de:7f:d6:c3:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:99:F6:3C:61:A0:B3:6E:C2:FD:DE:51:2F:4D:37:F6:27:48:A5:71
X509v3 Authority Key Identifier:
keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:06:60:9c:1d:40:fe:31:d3:db:6e:42:20:3f:f4:1a:c5:32:
7f:51:c0:5c:55:c9:46:ab:c7:53:c8:f9:f1:d3:bb:a5:54:4d:
5d:ff:8e:44:e7:62:01:08:46:05:67:f5:03:e2:83:cf:66:8e:
a5:9f:00:91:c9:d5:53:7b:31:6e:04:32:07:eb:48:9a:96:7a:
ea:13:27:30:37:c3:6f:6e:33:2e:d9:8b:35:af:06:43:15:6b:
ae:e5:65:52:c4:71:b1:38:db:b6:d4:53:fc:df:37:52:e7:5c:
93:16:97:68:fd:a7:e1:ae:b2:41:99:b7:cd:f2:b2:bc:09:7d:
26:0e:e5:97:63:4d:c6:3c:34:e7:42:b6:a6:34:73:c9:8b:54:
83:81:59:45:58:45:41:92:5b:e8:f1:48:7d:54:93:94:7a:20:
23:0b:67:7f:12:d2:41:10:85:d2:fc:26:e2:8a:50:a3:4d:fd:
3d:18:25:fa:93:ed:77:8e:0e:f5:65:0e:8f:13:57:0b:38:d9:
61:61:37:e4:06:93:9a:0f:08:e1:d0:c9:5b:cb:5e:dd:e0:a6:
05:10:fc:98:05:99:66:33:b5:9f:d4:0b:e9:71:41:48:41:42:
95:7d:80:8b:2d:cf:bf:4b:6f:3e:ee:0a:fd:98:1b:a9:40:9b:
e3:dd:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:21 2026 by rpki-client