
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json)
Hash identifier: tkwSrAT9xxpZDSsnUxJWsIveT9gBP3RQ+pxe0jaTLhM=
Subject key identifier: C1:73:19:C1:C9:C0:FF:AE:FA:E1:4B:69:91:24:46:AD:41:FF:C9:8D
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial: 0B4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
Manifest number: 0B3C
Signing time: Mon 02 Mar 2026 01:19:45 +0000
Manifest this update: Mon 02 Mar 2026 01:19:44 +0000
Manifest next update: Mon 09 Mar 2026 01:19:44 +0000
Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: yOkhYtyS3xq3DS2P51hKk248begZOnc6JLyukNJx5Ls=)
2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: o6fRayD/nqN2dEBUcuypm1nutFG8wp7LbMA0ZmrlfaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2894 (0xb4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Validity
Not Before: Mar 2 01:19:44 2026 GMT
Not After : Mar 9 01:19:44 2026 GMT
Subject: CN=69a4e5b1-49cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:89:6b:34:68:af:cb:36:bb:11:e7:98:4d:
e3:54:22:13:11:c7:1d:92:f5:c4:0f:10:05:ad:3b:
0b:b3:ae:bc:8d:70:f2:6c:04:a8:20:67:32:2c:41:
04:b1:00:6f:dd:23:57:bc:f2:76:a5:46:f8:ea:0e:
b8:b1:d1:51:5b:cd:77:0b:a5:93:16:53:78:78:10:
ef:d6:7d:5a:5e:dd:ef:9b:8e:ee:93:47:44:31:40:
2a:39:a3:6a:9e:86:56:23:68:42:b9:d0:bd:10:8a:
bb:96:da:ff:6a:80:ae:f0:bc:c2:2a:fb:f7:e5:30:
d1:d1:15:ac:33:97:ff:a1:4a:f7:68:40:8f:62:6e:
9a:7b:43:1a:10:21:32:11:ff:ad:28:18:95:c6:43:
70:86:37:ab:30:3c:02:33:86:b6:cd:95:72:a4:50:
87:8c:d7:e0:db:c1:0a:40:40:30:3f:3e:b3:fe:b2:
c2:b5:43:37:b7:96:f3:16:22:50:60:89:30:41:56:
ae:2c:a9:2b:48:6e:6c:ab:20:be:1a:a7:d9:cb:60:
26:08:21:15:38:cd:76:a4:6c:50:3e:97:fe:f4:f6:
73:b5:c9:b6:02:6b:cc:ac:21:a1:81:90:15:13:f8:
47:78:73:b0:89:77:c4:ef:5d:c6:db:13:81:a5:e0:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:19:C1:C9:C0:FF:AE:FA:E1:4B:69:91:24:46:AD:41:FF:C9:8D
X509v3 Authority Key Identifier:
keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:de:8c:88:9a:95:ee:55:77:ed:93:31:6d:90:8c:8f:f9:72:
6a:9a:28:5d:13:2e:d2:d8:1e:3c:c9:98:0f:6d:5e:3b:4f:37:
58:3f:d2:dd:97:61:5d:dc:4d:ab:fb:c3:96:2e:1c:de:34:0f:
ea:55:3d:ed:17:ad:fb:f2:99:96:c9:a0:55:72:cc:1a:4f:8d:
90:7b:52:3b:d2:2a:d5:99:81:6e:a9:79:14:cc:2c:41:49:b3:
5e:8e:11:6b:d0:27:4c:26:49:2f:52:57:21:a0:a5:86:b1:a7:
09:4e:3a:3d:c8:21:cc:1b:fd:bf:88:ea:ab:14:13:f4:9e:58:
2e:2e:fd:7f:d4:e1:91:b1:48:9f:2e:06:64:f9:ed:f4:6e:f5:
86:8b:1d:e5:2f:50:c8:0c:b9:94:e8:56:6c:27:37:ba:65:c8:
aa:12:bf:60:af:f1:68:8a:35:e4:95:68:f7:7b:d9:8b:09:35:
eb:82:43:9f:d3:ae:88:6c:3f:7d:79:a1:c6:88:a3:c7:98:37:
16:e9:d5:50:c6:05:d1:cf:e7:81:5a:2a:69:8f:33:c9:54:9f:
1e:d1:eb:6e:db:06:b6:e3:2e:54:f9:37:4b:1c:e3:05:b1:7a:
5c:31:2d:6d:e1:b6:4a:30:2d:c5:07:30:e9:6d:65:41:5f:75:
96:ed:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:59 2026 by rpki-client