
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json)
Hash identifier: 5Z4qe2istYEMtJG/LJK28rUHtN+L3FpRrFc+/m9lTMU=
Subject key identifier: CC:F7:BA:12:FF:CA:2D:63:EE:6E:B8:6C:9A:FA:97:3C:22:55:A0:E0
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
Manifest number: B5
Signing time: Mon 02 Mar 2026 03:01:55 +0000
Manifest this update: Mon 02 Mar 2026 03:01:55 +0000
Manifest next update: Mon 09 Mar 2026 03:01:55 +0000
Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: pWtWI92xHmLrhwX80+ObJRK6YW1oQ42VBAh/GaP0/kU=)
2: 73667C2ED76B11F09495728677D3641D.roa (hash: V5i08X4CK/ySQM8ao3lc9wXtGA+OEmNuAMXzfvbcaYs=)
3: FA9003D2D76B11F095EF502678D3641D.roa (hash: lTioF3NNwOrm4Tz3PBkQrTdyGh1gsMsIDRrDa6o4vMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Validity
Not Before: Mar 2 03:01:55 2026 GMT
Not After : Mar 9 03:01:55 2026 GMT
Subject: CN=69a4fda3-4c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:35:9c:bd:b0:c4:d3:05:06:d1:b2:9d:30:
2e:65:5b:92:53:55:28:71:49:0b:09:1e:df:12:20:
54:98:12:00:b8:c7:b9:e8:90:b1:c7:b4:44:45:79:
a9:e1:5d:f7:2f:64:16:a5:be:3f:50:b4:ff:36:94:
b0:b0:d5:fd:da:59:f2:48:fd:69:80:d1:22:14:a2:
04:8e:5e:0b:86:3b:8d:c4:4d:5b:ad:f9:06:be:af:
be:59:ec:1e:39:42:b5:a7:01:ef:dc:b9:dd:1b:66:
d8:00:ea:12:be:06:6c:fa:77:5c:51:5b:1a:ac:f3:
0e:79:10:da:b0:d5:78:39:e6:e3:c5:47:27:3f:8b:
de:c8:e2:5e:01:ec:9f:d1:57:93:59:e0:5b:b0:c3:
7a:79:e2:af:99:cf:be:37:71:cd:99:c3:9b:9f:5c:
1b:0c:d2:01:1c:33:2c:55:69:0e:17:45:0c:bf:5c:
f1:b6:1a:b4:9f:d8:3e:17:aa:87:74:f4:9b:11:83:
e7:2b:82:45:f9:e6:c0:e7:1e:f4:af:54:64:b8:86:
84:66:bd:56:93:54:6f:5b:a0:54:71:b9:59:e6:32:
31:6d:83:f9:5b:cb:d7:5f:6d:d3:3c:62:42:a4:53:
13:27:be:d5:da:22:b5:a9:90:2b:49:01:1c:41:b9:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F7:BA:12:FF:CA:2D:63:EE:6E:B8:6C:9A:FA:97:3C:22:55:A0:E0
X509v3 Authority Key Identifier:
keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:79:ce:4b:a7:90:25:eb:9b:66:45:06:d9:67:f2:05:56:e1:
70:c1:e3:c9:62:2e:d3:a6:d2:dc:3f:d3:80:83:9b:45:6d:20:
50:e0:f4:f3:38:59:25:e0:c4:fe:4f:59:17:3f:af:06:cc:fe:
10:86:7e:a3:c2:c0:ef:53:c0:39:1e:b2:cd:ed:cf:68:3d:88:
aa:c4:33:55:2c:99:71:f5:d1:72:05:db:01:05:40:70:ac:78:
ec:79:29:81:74:19:1f:0f:61:19:c0:65:0f:40:9f:12:ab:63:
03:4a:d2:29:80:a4:71:45:67:a8:c0:b7:0f:75:0d:10:08:67:
3d:92:ce:33:03:ff:1e:bf:d4:2b:8b:a7:c6:0c:30:cc:5a:a6:
93:f4:27:76:19:68:dc:92:3b:a8:09:9f:8c:8e:36:e0:5d:9e:
e5:31:02:f7:9a:73:59:65:8f:27:ca:ec:49:bd:cf:c5:9e:32:
c1:a2:51:e4:e9:32:92:34:d1:43:69:df:5e:c4:db:ae:eb:65:
c1:ad:d3:59:98:83:f9:fd:65:6f:1b:fc:f1:74:cf:e0:d2:2a:
85:7c:81:ed:e1:c1:e8:e4:54:08:be:81:7f:35:4b:38:fe:46:
7e:32:fc:73:4c:a1:c3:42:87:96:cb:01:7d:89:98:6d:96:9b:
3b:4a:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:02 2026 by rpki-client