
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json)
Hash identifier: NZQSNCNgLMMBBjFvZ1NGOKQ1AhT8yHe0CbAToUW5Z8Y=
Subject key identifier: D2:FA:07:5A:F6:92:E4:D0:8E:EC:0E:DA:06:CC:75:F9:82:A4:4D:CB
Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
Manifest number: 0264
Signing time: Sun 01 Mar 2026 02:46:03 +0000
Manifest this update: Sun 01 Mar 2026 02:46:03 +0000
Manifest next update: Sun 08 Mar 2026 02:46:03 +0000
Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: cdv1Fas7afIqC355kt6ZqC2Jg52vwMbu2f0Tsryuhdo=)
2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: EhuHHxXuz9NZDDEH+Wm0MdYJbkis3Dr/HJw1fYaaEAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Validity
Not Before: Mar 1 02:46:03 2026 GMT
Not After : Mar 8 02:46:03 2026 GMT
Subject: CN=69a3a86b-603a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:be:8f:00:36:fc:2a:75:0f:a8:44:a3:49:52:
b0:1a:4a:9e:0a:1c:d5:93:a2:eb:ef:f8:a1:1d:f2:
c8:9f:b6:e3:a0:3a:70:1b:c8:b2:4c:23:ba:01:9f:
87:2b:c1:d2:48:65:d0:01:e9:cf:9d:fe:25:e7:a3:
d4:a2:b1:f8:b9:c5:cb:9a:c8:db:85:74:64:60:a1:
2a:8d:d0:80:56:a5:c3:0d:91:8a:6a:8c:a3:af:03:
55:15:7a:43:ee:bd:42:d7:da:74:f0:d5:eb:7d:00:
cd:47:a7:ae:44:26:56:eb:02:6b:39:c2:d0:20:51:
02:75:26:b5:be:2c:bc:b5:1c:c8:73:d8:59:17:2f:
b6:d1:b6:c8:0e:6d:e6:c4:c8:ad:c0:e5:5f:3d:c2:
e6:3c:10:64:75:56:92:6e:a7:06:e6:66:fb:5c:af:
d9:64:97:e4:25:8a:39:63:45:fa:47:b8:0a:c9:de:
b7:42:8e:be:1c:3a:5f:54:d2:49:34:39:05:72:3b:
54:9b:2f:e5:4b:d4:ad:57:ca:92:c1:5f:56:94:e2:
fe:7f:57:4e:14:97:c2:78:97:43:96:43:b2:70:22:
1c:ab:55:35:c9:1c:3c:e4:e7:ab:4d:90:d0:b0:87:
36:f3:e3:56:b6:5c:49:8d:8a:0e:e4:46:5e:66:27:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FA:07:5A:F6:92:E4:D0:8E:EC:0E:DA:06:CC:75:F9:82:A4:4D:CB
X509v3 Authority Key Identifier:
keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:49:89:eb:a9:18:2b:78:43:de:ef:8e:08:4a:37:44:42:71:
e4:dd:61:6f:c7:cd:6e:3a:d8:84:9b:a7:b2:be:23:a8:c9:c3:
fc:8d:44:76:52:71:68:0f:85:46:09:1f:0a:e7:fd:75:97:70:
be:27:eb:e9:26:cc:cd:96:80:7b:e4:2d:55:d6:d7:47:c2:04:
cc:13:78:e6:28:89:aa:56:c0:29:30:2d:22:a9:b5:02:03:ca:
6a:7e:32:85:96:18:7a:99:ab:fa:3b:d1:8d:7e:7a:55:9a:ba:
7a:80:bf:42:45:be:e8:61:e9:83:91:8e:95:f4:88:20:f3:84:
b3:4a:21:17:eb:5d:83:5a:e6:e6:bb:2a:b5:71:45:4a:76:55:
0c:fb:7c:9a:34:8c:84:ca:c4:4d:4a:e2:c4:7c:65:1d:27:6b:
06:c3:d5:bc:15:48:90:e6:b7:ad:06:9f:b6:25:df:5f:0e:93:
a2:b1:02:ae:91:ed:3b:d9:6b:0d:14:38:16:84:f0:be:cc:52:
10:c0:1c:68:97:14:cd:3b:6f:6c:4d:6a:a5:45:96:98:5c:4f:
f4:18:36:7d:19:af:6c:36:e6:7f:1b:1a:57:6a:3b:c0:84:56:
83:03:c3:a5:7c:94:c9:ef:2a:0c:70:88:ef:b2:4b:3b:29:50:
90:07:5b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:05 2026 by rpki-client