
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json)
Hash identifier: O1JXMyCgy5gM80zoGw/EgwrvXcHYFFpQjlQai9NTGG4=
Subject key identifier: B7:93:F3:52:C3:12:3C:7E:C2:42:9B:8E:44:D6:56:2F:0E:85:19:A3
Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Certificate serial: 2844
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
Manifest number: 2834
Signing time: Sat 28 Feb 2026 15:38:27 +0000
Manifest this update: Sat 28 Feb 2026 15:38:27 +0000
Manifest next update: Sat 07 Mar 2026 15:38:27 +0000
Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: zX58zZg00FvIWb5FJxij9VaLRySWwFNBHh/nqCLjRXU=)
2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10308 (0x2844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Validity
Not Before: Feb 28 15:38:27 2026 GMT
Not After : Mar 7 15:38:27 2026 GMT
Subject: CN=69a30bf3-b47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7d:f7:32:8e:96:f1:7c:44:f4:26:93:fd:4d:
61:d4:5b:d8:ae:f6:a9:13:66:13:9a:1f:59:92:ed:
52:25:a0:c6:7e:dc:a0:13:78:bb:63:dd:34:11:d2:
5c:0b:d1:eb:8a:41:a5:42:3f:c2:f7:23:67:d1:82:
ed:23:19:6d:e6:4c:1c:97:64:65:69:c5:9c:ed:e7:
6e:3a:0b:2a:d6:87:7c:ce:40:f5:18:1c:1d:80:53:
1e:a9:25:d5:4f:5f:c1:e5:aa:8d:81:ba:e6:9d:4a:
d6:96:e5:60:f7:f0:f7:f2:6f:c8:ab:a7:d9:3c:f7:
9c:ad:bc:dd:29:c9:6f:50:79:f9:44:91:d8:c1:4c:
f1:2a:8a:07:32:40:e9:0a:42:12:c3:64:71:47:9c:
4d:eb:dc:e2:6c:ab:71:3b:27:c1:f3:90:0b:10:bd:
e2:60:d9:5b:1b:c4:1b:2d:2b:5c:59:d8:a8:75:16:
fa:dc:cb:27:71:fc:95:ea:f9:f0:86:83:62:d4:6a:
b8:e2:74:72:50:6e:d0:ec:ff:55:d1:e2:e3:e1:52:
d7:cc:08:9c:5c:44:70:ae:52:e6:be:fd:b0:12:77:
2a:6e:bf:76:be:93:fd:34:96:96:6a:fa:b1:16:72:
bb:bb:4d:b6:0b:de:03:51:e2:ee:12:07:f9:bf:1f:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:F3:52:C3:12:3C:7E:C2:42:9B:8E:44:D6:56:2F:0E:85:19:A3
X509v3 Authority Key Identifier:
keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:bc:7d:29:9a:cd:71:54:2e:8d:2f:58:1a:b3:1b:9e:ea:
0b:bb:08:43:6d:fc:85:e0:65:41:bf:ce:51:ba:2c:8c:78:f1:
76:7e:d4:09:40:d0:52:79:ad:7b:a8:54:58:90:10:ea:c6:db:
d4:cd:9e:87:54:83:a5:fa:77:53:71:ec:ec:61:e2:7e:88:22:
e5:ab:3c:0f:88:0f:c9:61:f0:00:13:bc:57:84:ad:de:80:a7:
62:8a:4d:f3:af:29:1a:77:cc:7d:11:2a:b1:12:78:d8:23:75:
97:d0:98:5c:81:45:59:3f:a9:d5:61:69:41:ae:6c:2d:f9:b8:
7e:4b:c4:3e:57:8c:25:56:2b:a3:9c:e5:04:0a:cc:fc:05:4b:
d2:ae:c8:ff:8d:36:f1:98:63:de:5e:ee:f3:53:6f:6e:4e:e0:
30:fa:03:30:3d:91:ce:01:a5:82:ac:72:91:4f:83:e3:ca:57:
37:4a:f8:16:3b:55:50:d9:cb:87:b2:0c:cb:26:50:d4:86:e1:
6a:22:0b:92:cd:9a:25:e8:76:db:89:84:58:0e:7c:bd:c1:f9:
97:55:02:2a:9b:23:d8:f4:00:6e:ce:e6:4b:83:3d:e4:a6:8a:
16:c4:69:a8:b1:ff:67:82:8d:f6:fb:ed:b7:80:03:90:df:80:
97:15:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:02 2026 by rpki-client