
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json)
Hash identifier: mmHzbDIGqzfT4Dmn79tsKuymwHoxGJt/Atc+SLCR+/E=
Subject key identifier: A4:31:74:B6:40:79:BC:A4:45:64:5F:B1:29:FF:D7:5A:C1:50:49:ED
Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
Manifest number: 85
Signing time: Sun 01 Mar 2026 08:57:41 +0000
Manifest this update: Sun 01 Mar 2026 08:57:41 +0000
Manifest next update: Sun 08 Mar 2026 08:57:41 +0000
Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: udSruve2oS68/0w60TaN7n5rI2wv5gobK9aFfUnwAmg=)
2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: JJ6X8WzHM7ayepaDQXdtVvN+DdzYIkr1gqa3SSMInv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Validity
Not Before: Mar 1 08:57:41 2026 GMT
Not After : Mar 8 08:57:41 2026 GMT
Subject: CN=69a3ff85-8083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:1e:ca:ba:f9:53:f8:ca:0b:46:c2:ff:59:
b4:d8:fe:7a:21:59:21:67:1a:3a:fe:ff:41:75:83:
ce:65:50:c4:0e:75:28:c9:53:e9:8a:1b:99:7c:de:
f0:4d:b3:01:e6:ac:30:23:ef:c9:0e:81:29:68:08:
46:de:fe:d0:a6:fd:bf:09:05:f5:f6:e2:ea:39:e9:
05:13:c3:49:3c:eb:51:25:14:94:00:21:97:db:9f:
13:c1:2d:37:1f:d7:bb:88:6b:cb:48:e2:18:98:4a:
a1:2d:4b:83:e3:49:ca:21:4c:4d:c2:d2:59:7f:07:
1f:20:6c:d6:f1:7f:10:00:d7:9b:87:19:9d:5f:30:
e7:83:a0:f9:a9:2f:7a:74:d0:dd:e0:cf:63:6a:b0:
f6:10:94:af:c4:ea:65:03:ea:aa:45:7a:2d:75:28:
20:5b:55:d1:0a:13:fb:46:4d:d6:e4:18:c3:81:08:
b8:41:55:19:30:fe:0a:ac:4b:d2:d8:b7:93:99:8c:
88:ef:4b:b9:d2:45:13:d3:bd:46:4c:7a:10:05:cb:
b5:e3:b8:e1:65:39:6a:34:4c:d1:b8:5f:7f:b2:dd:
0b:f6:04:a0:e3:7f:86:51:4c:b6:cb:18:74:06:a5:
24:2a:24:0d:d1:0d:18:d1:e1:04:6f:d9:cc:68:a4:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:31:74:B6:40:79:BC:A4:45:64:5F:B1:29:FF:D7:5A:C1:50:49:ED
X509v3 Authority Key Identifier:
keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:1a:5f:34:4c:60:74:67:cb:68:78:01:bf:7f:89:67:16:6d:
71:11:14:22:6e:3a:1c:e9:84:2c:fd:17:09:21:f1:14:51:69:
4e:95:78:13:1c:02:95:98:af:09:6f:3a:c3:aa:a0:9c:44:62:
98:ee:5a:b6:84:3f:1b:be:89:fb:a9:ec:be:bb:41:f6:c7:31:
8e:ed:e1:24:5f:cd:cf:e3:6b:34:81:bd:6d:6a:7d:9e:d6:f7:
b3:8a:09:83:47:82:82:c6:f8:e9:01:c7:78:0b:0a:a9:e1:d1:
48:d8:09:a2:5a:24:10:ab:95:35:5e:85:2c:03:ce:d8:22:84:
62:89:38:f4:7d:5c:8f:d9:43:d0:97:b4:40:35:88:14:ba:e2:
fd:c7:fc:a0:44:72:50:bc:5f:23:7c:60:a6:7b:e4:40:18:4d:
a2:9a:1f:b2:91:01:c5:0b:2d:52:6e:d5:a6:70:9b:ff:b1:4e:
66:26:f8:46:f8:64:0f:8f:bf:ea:b5:9b:a7:9d:76:1f:0b:f1:
f3:ef:53:47:60:61:25:ec:ef:5e:0d:8c:f7:fa:f9:6a:7f:f0:
27:92:7b:40:99:67:b5:25:27:88:ec:18:71:e1:16:39:3c:11:
20:9d:b5:2d:82:cc:fc:1a:ce:71:52:7b:78:28:a8:04:de:85:
b9:ea:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:19 2026 by rpki-client