
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
File: qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft (raw, json)
Hash identifier: UNsLOP5f1h7TDL2zyayJObC9e97o0UyZk0FPJ6MNw2w=
Subject key identifier: F8:0B:9D:28:CB:FD:7F:9A:C9:D6:E5:47:DD:94:6D:9B:A5:0A:1F:FA
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
Manifest number: 021F
Signing time: Mon 02 Mar 2026 00:45:07 +0000
Manifest this update: Mon 02 Mar 2026 00:45:05 +0000
Manifest next update: Mon 09 Mar 2026 00:45:05 +0000
Files and hashes: 1: qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl (hash: y607iTj79OfnBoNq32lfJftR1Wg1UUp2ZFDhEyktJVk=)
2: EAF431DAEC3011F0A9E1B992416F56BC.roa (hash: pi5IdFH8BXBZqxet6PyncdKtsmtgqEe3vNhv2Ot0+1Q=)
3: 2F40B3CA8D5B11F0A0B1D010C4F9AE02.roa (hash: Xmd47SSJ8r1PNJ+biTEY3Fc1Fo382wK4VChB/7hTug4=)
4: C9DBA6A666A211EE8C285556C4F9AE02.roa (hash: 036SMhOSIDJiCYH/Aa49/ufrn1FEnv9HqMNnhWlvrLI=)
5: 8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (hash: 3B96UlkLTKNYWeeC54aVnV7PH9CyaSoRvKgcab08m08=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Mar 2 00:45:05 2026 GMT
Not After : Mar 9 00:45:05 2026 GMT
Subject: CN=69a4dd93-38d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:b1:d0:7a:2b:e0:26:eb:d6:79:69:54:4f:
74:5c:1f:36:e6:b6:89:35:53:ca:71:98:25:69:3e:
9c:4a:df:4d:34:ab:42:6b:ce:ad:b5:ec:ef:6f:50:
0f:e3:ee:dc:b1:af:86:d6:5f:e6:53:3e:ca:a3:30:
d4:d3:46:3c:c7:66:04:6c:21:bc:2e:2a:30:77:28:
4a:e9:a1:6c:02:60:4a:78:64:06:9f:14:a0:4b:e9:
16:ed:40:d5:85:ae:8f:41:53:3d:1a:06:e8:68:ab:
82:54:5d:1e:7f:ff:01:62:f6:1a:af:19:d3:10:5b:
a4:cf:02:a3:bf:ac:5f:be:c9:a3:a8:a2:54:ee:97:
eb:13:10:2a:69:7c:cc:9f:1e:95:90:cd:cc:d9:6d:
22:c1:75:a1:35:95:f8:ac:58:dc:76:fa:e5:b2:2c:
60:51:2b:db:db:9b:09:b8:a2:55:01:0f:6c:f6:a7:
bf:1e:62:45:1d:7d:39:65:f4:72:a5:04:f2:c3:b7:
c2:c1:6f:99:24:1b:63:ca:ee:49:ad:d6:3d:aa:b3:
54:6c:af:c2:d2:d7:83:6f:cd:87:33:fc:eb:a1:c4:
b8:9a:24:c8:de:83:b0:75:ba:40:fd:80:73:eb:c3:
f7:26:57:22:d0:9c:03:50:8e:ba:d5:58:ec:9f:f5:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0B:9D:28:CB:FD:7F:9A:C9:D6:E5:47:DD:94:6D:9B:A5:0A:1F:FA
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:56:12:a6:93:73:2b:50:6b:d7:b5:0d:ea:8d:84:4c:7e:9f:
1d:ff:b2:d1:92:3a:4b:00:7a:a0:47:d0:92:9d:4e:0e:42:f8:
93:6c:a8:30:1d:12:36:ca:3f:51:ba:8f:7e:6f:41:fa:cd:f1:
be:d6:29:46:30:95:3c:4e:b7:1d:e4:64:59:b9:42:2e:70:8f:
d0:00:de:69:6f:62:bd:ce:17:9a:1c:21:16:08:18:e4:40:04:
d6:f5:72:5e:ae:e4:d3:42:00:7b:59:60:ae:7b:99:a9:95:66:
5a:d3:3d:20:7f:e3:cb:4f:4f:96:45:1b:f6:7b:35:82:19:6e:
3c:62:bd:22:92:fb:26:8b:d7:55:d2:1c:b7:75:94:c9:2a:a6:
29:e4:0e:2b:83:c6:d9:61:67:ef:8a:f8:5d:45:db:7f:71:af:
7c:70:8e:c1:3c:c6:e4:4a:44:41:9d:50:c8:de:ea:5e:cf:a9:
a6:5f:c1:e4:31:1f:d3:59:b1:f7:7e:f8:ce:f8:78:c1:72:d3:
7b:41:fc:00:e3:0c:9f:bf:8b:99:b3:cd:b1:c6:c3:b6:51:ae:
8a:63:f9:1e:fb:bc:34:12:b7:fe:64:dc:a3:e7:48:dc:5b:80:
3f:36:58:bf:db:8d:2c:05:b8:75:39:0f:87:7d:70:7e:23:b6:
e3:52:ea:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkxMkYxMTAvBgNVBAUTKEE5OEI0RDc1M0E4NERGRDQ5REE3RTIzMDdFMzE5MkE4
QzRGRjk4OTUwHhcNMjYwMzAyMDA0NTA1WhcNMjYwMzA5MDA0NTA1WjAYMRYwFAYD
VQQDEw02OWE0ZGQ5My0zOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Syx0Hor4Cbr1nlpVE90XB825raJNVPKcZglaT6cSt9NNKtCa86ttezvb1AP
4+7csa+G1l/mUz7KozDU00Y8x2YEbCG8LiowdyhK6aFsAmBKeGQGnxSgS+kW7UDV
ha6PQVM9GgboaKuCVF0ef/8BYvYarxnTEFukzwKjv6xfvsmjqKJU7pfrExAqaXzM
nx6VkM3M2W0iwXWhNZX4rFjcdvrlsixgUSvb25sJuKJVAQ9s9qe/HmJFHX05ZfRy
pQTyw7fCwW+ZJBtjyu5JrdY9qrNUbK/C0teDb82HM/zrocS4miTI3oOwdbpA/YBz
68P3Jlci0JwDUI661Vjsn/VxtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgLnSjL
/X+aydblR92UbZulCh/6MB8GA1UdIwQYMBaAFKmLTXU6hN/UnafiMH4xkqjE/5iV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTEyRi8wQTA2NzkwODBB
NTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5U2RwLUl3ZmpHU3FNVF9t
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FZdE5kVHFFMzlTZHAtSXdmakdTcU1UX21KVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTEyRi8wQTA2NzkwODBBNTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5
U2RwLUl3ZmpHU3FNVF9tSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt1YSppNzK1Br17UN6o2ETH6fHf+y0ZI6SwB6oEfQkp1ODkL4k2yoMB0SNso/
UbqPfm9B+s3xvtYpRjCVPE63HeRkWblCLnCP0ADeaW9ivc4XmhwhFggY5EAE1vVy
Xq7k00IAe1lgrnuZqZVmWtM9IH/jy09PlkUb9ns1ghluPGK9IpL7JovXVdIct3WU
ySqmKeQOK4PG2WFn74r4XUXbf3GvfHCOwTzG5EpEQZ1QyN7qXs+ppl/B5DEf01mx
9374zvh4wXLTe0H8AOMMn7+LmbPNscbDtlGuimP5Hvu8NBK3/mTco+dI3FuAPzZY
v9uNLAW4dTkPh31wfiO241LqFg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:37:59 2026 by rpki-client