
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json)
Hash identifier: laaIk9FBgKYcGHCLKU0lnqSyT4DyK54A/fMSyidH3EM=
Subject key identifier: A0:8B:A3:64:CF:DC:04:F6:7D:32:15:8B:5B:7A:78:81:CB:F6:44:FC
Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Certificate serial: 2865
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
Manifest number: 2852
Signing time: Thu 16 Apr 2026 15:35:03 +0000
Manifest this update: Thu 16 Apr 2026 15:35:02 +0000
Manifest next update: Thu 23 Apr 2026 15:35:02 +0000
Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: Tunh3NbEAaFY3GCXbgMUkyWf0eT50Ccm+1IgTFNtwsA=)
2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: LPyaDve5O9/4WQe5jKoSjlWttPY7ojSlNyw4xX1idoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10341 (0x2865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Validity
Not Before: Apr 16 15:35:02 2026 GMT
Not After : Apr 23 15:35:02 2026 GMT
Subject: CN=69e101a7-6c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:ce:d3:77:50:13:23:07:d9:2a:14:10:22:
39:84:59:f1:89:9c:67:7b:9f:a4:d3:8f:6c:a0:e5:
8d:80:bd:d3:d2:10:f8:f8:55:45:e7:f4:fb:84:96:
ed:ac:f6:35:a8:42:41:94:e8:cf:a4:57:c6:d5:59:
ef:ef:37:bc:6f:48:ce:ee:7b:68:0c:c9:9b:a2:52:
fd:9e:d4:6f:1b:8b:65:5b:e1:97:db:3c:29:f9:df:
42:24:76:cd:d1:bc:3d:8b:50:0a:a2:b7:f5:34:e3:
dd:9c:8f:3f:e4:03:82:6c:32:ea:20:f7:04:4e:e8:
67:63:25:5c:0e:e1:e1:ae:45:a6:f1:02:47:6e:cc:
b4:65:2e:39:0b:26:ba:9f:5c:de:12:19:21:c2:df:
b7:82:62:bd:38:e6:38:f2:67:25:ea:b5:0a:92:b5:
56:f6:b2:37:62:1e:0b:be:2e:ef:2c:d9:4b:2d:42:
17:54:6e:ef:42:55:b3:fc:08:a4:3d:f2:9e:ec:bc:
a7:ae:45:1f:2e:b2:93:0e:14:57:73:88:ab:9b:e6:
8b:b8:14:73:d7:12:05:fa:bb:30:3e:4a:c7:4f:4a:
f7:76:6e:c3:8e:b7:e5:89:14:d2:1b:98:f3:ee:72:
03:a9:fc:aa:5f:b6:9c:cf:fc:20:80:d4:70:ff:47:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8B:A3:64:CF:DC:04:F6:7D:32:15:8B:5B:7A:78:81:CB:F6:44:FC
X509v3 Authority Key Identifier:
keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9f:a5:ec:c5:ef:36:c5:64:6f:98:12:54:62:57:35:e2:82:
86:68:62:33:ba:84:69:19:68:d0:f0:f7:63:c0:5d:ff:3c:4e:
15:85:08:a6:d5:f9:e0:11:84:3d:9c:4c:bf:55:ec:8e:b7:10:
b0:d1:24:cd:24:e1:62:48:df:a3:48:fc:c6:0c:2f:68:d7:bb:
ed:cb:8f:fa:69:7d:09:65:ea:5f:b6:c8:1f:c1:da:2a:8f:f8:
72:63:9f:27:48:ac:20:ad:67:08:10:44:79:8e:36:7b:c0:bd:
fa:e9:54:4b:8b:f6:92:99:c5:6c:3d:4a:8a:3f:27:2f:23:91:
43:f8:a6:5a:36:8a:c6:1d:e6:4d:83:10:eb:d9:35:79:3f:c7:
e2:bb:50:90:c0:0e:90:0a:e6:d1:e7:39:74:2d:c9:95:f0:cf:
44:ef:22:7d:f3:9c:f5:0e:0c:39:13:0b:d1:2d:70:ff:71:83:
96:25:1d:0d:67:38:41:31:f1:d0:9b:bc:4c:84:30:05:34:6a:
74:4b:75:0c:c2:87:bd:53:ed:d0:22:6f:c0:86:06:8e:fe:0c:
77:4c:c7:91:91:66:28:8e:5e:50:58:bf:4b:2c:d6:8f:db:cf:
52:53:3d:85:98:e8:86:b7:c9:25:4b:d6:61:30:57:ed:ba:49:
eb:cb:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:13 2026 by rpki-client