
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json)
Hash identifier: qGSTDBIJ67gfl5AxfB3NvlOJndaN98UGKpSqK+u89Qc=
Subject key identifier: 7C:EA:62:43:03:7B:AC:F7:F6:CF:38:86:43:76:F4:50:5E:70:E2:21
Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
Manifest number: 027F
Signing time: Fri 17 Apr 2026 01:42:23 +0000
Manifest this update: Fri 17 Apr 2026 01:42:22 +0000
Manifest next update: Fri 24 Apr 2026 01:42:22 +0000
Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: LvpAZ+bpZ8uvKhHUh6OPozCc+aAW5ywhDYGcWaRmyuQ=)
2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: 9EODo3VTRqYwzjAsn5kOJ1RRcS5qGi8SpwuOaYpySHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Validity
Not Before: Apr 17 01:42:22 2026 GMT
Not After : Apr 24 01:42:22 2026 GMT
Subject: CN=69e18fff-4004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:fc:2a:2f:41:d3:f0:dd:71:0a:24:0e:e6:
9c:75:d3:ed:b9:aa:c7:41:0d:e7:94:a4:e0:4c:21:
9e:b2:10:45:11:37:22:8e:f1:ea:79:cb:dd:d5:5e:
72:7a:c2:1f:95:23:7b:98:79:b5:2f:8a:81:9d:8d:
af:cf:84:f2:d8:d9:1e:ad:6e:aa:31:91:29:90:46:
3e:96:bb:fe:cf:e8:73:97:e8:c8:d0:d7:bd:15:13:
10:16:12:23:62:cc:2e:d1:42:7a:bc:3c:4f:16:bd:
1b:d8:28:cf:cb:dd:d9:df:9d:e1:a2:93:6d:42:94:
c2:89:28:66:b1:d0:af:3d:70:c2:94:63:c2:91:a4:
a2:7f:b4:bb:30:e7:a7:33:27:86:f5:8b:73:07:ec:
07:a5:bf:c5:c1:bf:86:ac:44:37:11:32:6d:70:87:
c3:a1:54:6a:85:bd:2c:b5:e9:1b:6c:b8:e8:61:af:
75:44:50:c7:be:b4:42:e4:f2:36:62:45:cc:6a:9a:
ac:f5:60:2a:8d:d5:56:df:fd:f1:b5:2f:88:dc:5b:
e3:fa:9c:5d:de:5b:94:1a:24:5e:27:9f:0b:8c:26:
2d:ad:4e:18:8b:ba:2c:c6:f9:01:9a:e1:57:88:0e:
3c:dd:18:17:44:83:c7:32:ce:07:eb:10:e2:13:d7:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EA:62:43:03:7B:AC:F7:F6:CF:38:86:43:76:F4:50:5E:70:E2:21
X509v3 Authority Key Identifier:
keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:52:2b:0c:85:17:ef:7b:ce:95:19:9f:98:e3:f8:10:47:1c:
48:70:da:31:25:70:da:48:3c:91:3f:d2:90:7f:f9:e4:c3:1b:
2e:ea:0f:e9:b4:d0:25:62:ab:45:4b:33:41:f9:14:4d:53:c3:
8b:ab:41:0c:1d:1a:bf:36:3e:e1:c2:29:ec:62:51:fd:60:0f:
4e:c8:18:7a:9a:84:11:62:18:78:b3:23:4d:0a:db:51:c9:f1:
8c:fd:10:ad:7a:8d:a6:5e:2d:08:f4:11:32:71:79:fb:03:6c:
7f:1d:3f:85:2d:25:c5:84:ff:3e:83:b1:58:67:31:42:8b:51:
9c:8e:3e:1a:b9:92:cf:15:e5:12:bd:3f:78:e1:fd:33:fe:96:
18:c6:49:e5:f1:52:05:5d:6d:bf:07:28:9d:36:ba:01:f4:ed:
44:bd:1a:2e:1f:77:1d:6d:12:e6:33:81:89:f5:50:60:b7:a8:
4a:89:99:f9:ab:cb:0e:f1:8c:79:39:fb:7f:d5:c6:35:a0:cf:
30:68:19:42:3d:1f:8d:5b:fa:fc:a1:43:62:83:9f:5a:31:a4:
ce:cb:7c:43:6b:5f:d5:b6:fe:c0:9b:96:9b:db:40:82:25:05:
f0:85:e8:a5:d2:75:13:41:f6:1c:a9:73:05:1a:46:cb:ab:3a:
3e:65:27:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:03 2026 by rpki-client