
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json)
Hash identifier: eMIX5JVpl2lvqXWZodzqw0BIUiX9j2aBQBp2hT+O39E=
Subject key identifier: BB:69:36:2C:10:9C:F4:A4:7F:C5:1C:F0:A0:CF:32:4B:94:5C:AA:FB
Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12
Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
Certificate serial: 0DA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
Manifest number: 0D9A
Signing time: Sun 04 Oct 2026 18:00:14 +0000
Manifest this update: Sun 04 Oct 2026 18:00:13 +0000
Manifest next update: Sun 11 Oct 2026 18:00:13 +0000
Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: fv1Jc4Zm70QHwAsKiF+c19bs3DBPV+FsGXrXcWLCqpE=)
2: 95693F483EFC11F19C051D00C6833773.roa (hash: FvcTIUqCk8IaKULOCCc+8nkYabbY0kOvHe1B0EDMOSI=)
3: CEFC9F4C3EFD11F18502D769C6833773.roa (hash: asADDRBilLEaXG8oF0ClMDpzkYwVXZNb9WKZ3OOCar0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl
rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3488 (0xda0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
Validity
Not Before: Oct 4 18:00:13 2026 GMT
Not After : Oct 11 18:00:13 2026 GMT
Subject: CN=6ac2942e-9580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:b5:93:7c:7b:29:10:6e:e8:cb:4d:09:02:
1c:fb:85:01:b0:8a:38:c6:fd:1b:16:f0:57:67:41:
28:df:ec:67:62:96:70:da:3a:6d:55:0f:ee:bf:6a:
b0:a6:95:f2:1d:16:8e:eb:0b:1e:d1:af:ec:eb:4d:
4a:64:0c:28:95:7c:ff:36:e3:1e:48:b5:a3:7b:ff:
52:a5:47:06:81:88:6c:41:ee:0e:8e:43:ed:06:da:
19:89:ea:72:f1:66:4a:26:b3:5e:26:e1:93:4c:49:
50:6d:b9:3b:8a:a9:e6:59:70:76:12:a7:82:36:6c:
53:fe:b9:be:e6:95:a4:eb:50:38:7f:6f:1b:a4:72:
66:4d:7d:ef:f7:1d:2f:8c:c1:71:1c:cf:35:23:be:
05:26:43:41:22:5b:bd:3a:b4:a4:40:b4:45:26:a6:
fe:94:db:d1:7d:c3:c9:28:e5:a8:92:3c:5b:a9:7d:
4e:55:c4:e9:53:21:57:7c:a4:41:c9:2b:ec:ea:5c:
74:d5:86:62:a1:b9:ae:14:5f:34:4f:42:00:5e:e7:
39:71:1f:a8:02:95:bc:b4:5c:4e:fe:4f:c0:6d:6f:
e0:d7:b2:d4:2f:30:96:ef:f9:1c:41:b2:50:ee:05:
ec:18:26:e0:a7:c7:f5:95:7a:25:2a:ef:b4:62:af:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:36:2C:10:9C:F4:A4:7F:C5:1C:F0:A0:CF:32:4B:94:5C:AA:FB
X509v3 Authority Key Identifier:
keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:06:32:34:2f:d5:e4:1c:c5:13:b1:aa:9f:2c:0f:2b:fb:7a:
d6:3d:d1:c3:a7:53:a8:b6:99:f7:d8:3e:e7:0c:90:a0:ed:95:
02:20:12:a3:e2:4a:66:bc:54:77:83:bf:95:22:b9:c2:77:af:
11:50:63:3a:fe:29:17:41:75:99:02:17:ca:01:84:62:b8:2e:
61:12:ae:0b:65:a5:68:da:42:62:a5:37:bd:98:2e:42:49:d4:
49:c8:da:1f:1d:24:92:cb:db:b4:a3:38:fe:1a:61:a4:00:18:
0a:41:aa:1d:c7:8a:9d:03:69:81:51:35:94:6b:dc:34:94:87:
e4:5c:55:8d:af:ab:83:1c:ae:9b:0c:be:e6:ee:b2:3f:88:3d:
3a:fb:00:d8:63:ad:5c:73:e8:ff:58:25:fb:25:4b:9e:e3:57:
e1:90:ec:f3:af:a9:c0:92:1e:f6:fd:44:df:3b:c7:d0:42:e1:
a2:57:95:bb:96:28:d1:92:dd:b1:39:88:eb:ee:12:05:1b:c4:
75:ec:e7:45:97:4c:1e:b1:c9:f2:d8:3c:f2:42:62:8c:e5:fe:
46:be:81:80:0f:31:38:79:f3:cf:ba:54:8f:08:dd:21:a2:00:
09:b0:aa:54:89:e6:55:12:76:f1:93:29:b7:88:e3:fb:36:04:
7f:9b:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:04 2026 by rpki-client