
$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
File: aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json)
Hash identifier: L788KeCCRA9qKGBN20k0jWaF+WRPWylYiNiWdpps3Ws=
Subject key identifier: A7:3B:B4:25:47:71:DC:34:B1:11:1B:59:B7:23:0F:A6:DE:10:1C:27
Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
Manifest number: BE
Signing time: Mon 02 Mar 2026 00:32:22 +0000
Manifest this update: Mon 02 Mar 2026 00:32:21 +0000
Manifest next update: Mon 09 Mar 2026 00:32:21 +0000
Files and hashes: 1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: rzZMIqrgVgW8v5cVdu3Ffm2JHBjXM7T0KNYO8BDIFJA=)
2: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: WNNdgOa5uNp5r/RGualxND4rs3LsvjdsPmDrTIMSRgg=)
3: 56AF0502E0F211F0800F01165C6F56BC.roa (hash: vQcaLA4nIYWWjg4a4BCyYh3EhrVOVINM1+lW1W2ysWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Validity
Not Before: Mar 2 00:32:21 2026 GMT
Not After : Mar 9 00:32:21 2026 GMT
Subject: CN=69a4da96-fcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:88:26:6f:96:96:01:6c:29:62:90:62:66:
d5:c5:5a:b5:64:7d:b9:62:5e:c6:41:9c:d8:8f:c0:
54:f5:5a:8a:03:e9:1d:85:69:87:61:22:ab:5f:6d:
f6:60:81:54:c7:ae:00:b7:24:ff:83:52:77:d0:c4:
bf:2a:a7:eb:5c:8c:f9:5a:9b:6b:68:d4:91:d0:31:
5a:3e:8d:1c:74:e5:7c:e3:9b:90:65:04:69:18:7b:
a4:8c:80:f5:99:23:be:8f:f4:e5:da:b7:be:ec:68:
47:fc:f4:29:75:ee:02:d5:04:47:26:01:7e:14:31:
98:b5:01:59:11:a3:22:32:bf:4d:4d:df:6f:03:60:
cf:e3:bd:47:c4:ac:a8:a9:a2:28:7c:49:fe:05:08:
f7:f9:47:2d:f8:0a:41:3a:69:f4:f5:6f:ac:04:11:
b0:ef:e9:09:29:e2:ee:d4:c7:46:2c:78:84:34:09:
11:ca:76:2f:3b:4e:68:76:0d:8a:ef:3a:51:85:5e:
03:27:d7:d6:5b:e8:af:ff:01:07:4f:30:a5:33:62:
cc:40:ed:20:e4:d9:ba:d1:de:e8:bf:92:a4:5d:32:
77:62:e7:e5:f6:a5:61:66:2f:67:e5:55:d8:1b:d4:
d1:a1:c3:cf:4b:a5:48:5d:27:81:f2:dd:2c:85:b0:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:B4:25:47:71:DC:34:B1:11:1B:59:B7:23:0F:A6:DE:10:1C:27
X509v3 Authority Key Identifier:
keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:b7:16:39:4b:e9:08:ed:ce:c8:43:1d:4d:8c:60:ad:2f:
b1:b9:9b:c4:c6:e9:56:ea:92:aa:d9:94:73:55:4f:f2:19:04:
8e:f7:be:2c:b9:99:87:2e:26:9d:cc:b8:a5:5f:ff:04:dc:e9:
e2:b9:5b:b0:b0:22:19:41:4a:76:44:09:b3:46:98:ca:92:9c:
d1:93:e8:ba:d2:94:ab:65:2c:e4:d8:f9:5a:26:7a:52:95:cf:
10:b7:b4:a4:57:13:7e:2b:3b:fd:3f:80:65:c7:20:cc:d8:c3:
4f:24:ec:61:b3:24:d5:e7:3d:28:de:85:2e:29:1a:eb:8a:f7:
ae:76:13:0b:f4:aa:a1:06:8b:46:89:8f:38:43:b6:e0:2d:cc:
b0:90:6f:72:b1:e4:b8:5d:cc:00:7a:2e:d1:3a:89:f4:a3:41:
a1:04:a8:56:46:55:ae:01:82:1a:dd:b2:e8:51:82:fc:53:c5:
8b:2d:39:90:b2:11:a4:27:b0:35:77:6d:d1:c5:73:fd:28:e4:
ef:96:ef:47:3f:af:f3:bd:3b:73:44:b8:81:78:7b:00:f9:52:
a4:1d:86:71:1b:8a:63:c8:5a:8e:85:69:5a:eb:e3:95:46:86:
e2:75:44:f3:2a:52:ae:15:65:cb:07:e6:9b:26:21:c3:c2:75:
dd:1a:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:14 2026 by rpki-client