
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
File: qtrfI2_7nO0qpky3zl2Z1R066RM.mft (raw, json)
Hash identifier: YuLEuc4i4I4Sox3swjwzepLwbp5CcFoT5c3TCLC79K8=
Subject key identifier: 69:B0:FA:5C:AF:54:62:53:AE:53:66:B0:57:C1:61:59:EA:99:BE:31
Authority key identifier: AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13
Certificate issuer: /CN=A9167671/serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
Manifest number: 49
Signing time: Sun 01 Mar 2026 09:45:25 +0000
Manifest this update: Sun 01 Mar 2026 09:45:24 +0000
Manifest next update: Sun 08 Mar 2026 09:45:24 +0000
Files and hashes: 1: qtrfI2_7nO0qpky3zl2Z1R066RM.crl (hash: e/LYnjwcgrG5iZU/defEEz2NNvxFXLEypt78TMuSZ3g=)
2: E1CBE78EADFA11F08ED60C0DC4F9AE02.roa (hash: vIYtmstFR8g2+vQnV7MsR8fjsNj0Vs2+JEeA9zk+p4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl
rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167671, serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913
Validity
Not Before: Mar 1 09:45:24 2026 GMT
Not After : Mar 8 09:45:24 2026 GMT
Subject: CN=69a40ab5-ebfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:dc:55:87:98:26:af:00:78:56:f9:82:8f:
30:e6:89:95:05:9b:0a:e6:f8:e4:a2:ae:5b:db:15:
6b:78:df:43:6c:52:38:76:94:e7:92:e7:c1:9c:cd:
ca:49:da:d3:bb:f3:bd:1f:77:a2:ad:be:ff:a0:e9:
16:3a:87:e9:65:2b:dc:9c:85:2c:3f:d0:17:97:9e:
9b:04:e7:e4:db:fa:8c:09:98:d7:74:80:91:0b:fc:
65:10:cf:a9:52:77:64:dd:bd:a0:42:62:3a:a7:14:
a7:cc:e1:72:b3:d9:e9:d3:f7:a9:e9:62:a0:a0:c8:
c7:9a:57:f5:d5:a8:8f:b6:23:02:c1:8e:04:73:8f:
ad:21:6b:62:a9:74:4b:9c:6d:39:52:1f:ac:d8:53:
52:0a:a1:48:88:5e:67:a9:5e:f0:5d:60:b1:db:f1:
90:a7:57:94:90:5c:a9:97:bb:40:33:d0:49:44:59:
84:35:ca:57:40:74:dd:c2:7b:a2:a0:91:46:09:4b:
fe:60:9c:13:59:3a:42:89:77:0b:89:11:a8:d2:89:
8f:b4:9d:cd:00:df:19:60:c4:89:c6:3d:17:1f:a7:
93:ec:84:e0:91:42:31:20:0e:82:1d:6e:76:d2:28:
6d:91:d2:66:c5:9a:dd:e6:a2:01:e0:49:f5:2e:7c:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:FA:5C:AF:54:62:53:AE:53:66:B0:57:C1:61:59:EA:99:BE:31
X509v3 Authority Key Identifier:
keyid:AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:f6:3a:fa:31:0b:8e:9d:ad:39:27:34:2d:05:0a:ed:49:
fa:a1:db:94:67:15:fc:8c:43:48:da:3f:78:09:db:51:c2:ec:
a4:fd:5a:87:2e:bb:7d:d5:b2:f5:27:80:55:fc:0e:84:fa:21:
2f:f8:3b:b3:4a:43:95:07:0d:55:d5:5c:2a:05:18:99:33:e3:
6a:44:38:92:0d:bc:a1:19:70:00:a2:29:e7:51:35:e0:0e:ae:
f7:fc:9c:c8:25:65:77:ab:bd:dc:34:52:dc:e8:81:f0:35:4f:
5e:74:4f:2d:6f:22:56:ab:24:9c:b9:03:1b:e4:c3:5a:4a:6d:
b3:f5:44:99:09:de:4f:51:cb:9d:dd:f5:13:1f:ab:48:06:4b:
23:03:86:cb:15:37:4d:c1:13:11:4e:db:85:57:0c:5b:55:ae:
5b:a8:3f:e5:96:b1:53:c5:d0:5b:61:bd:f1:85:a7:43:52:df:
58:1c:55:61:c2:25:5e:61:7a:7d:88:98:c8:2b:3e:bd:9a:d4:
37:ea:31:86:97:a2:0e:8e:14:d3:9e:89:c9:e7:91:9a:00:d9:
65:15:da:6a:41:de:14:44:93:1a:fb:d7:fa:4e:7f:f3:af:1b:
c5:f5:47:51:e7:0a:f5:bb:b5:ac:65:87:18:75:fa:ab:46:27:
2c:eb:9c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:06 2026 by rpki-client