
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json)
Hash identifier: +OWml/BRZPZbRg8R1WttZ6214ESKrJ9ZOXSb9hnSDKQ=
Subject key identifier: DF:B7:33:99:7A:8F:EB:D1:20:CC:00:B8:22:62:D1:E7:8F:C1:14:A2
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
Manifest number: CF
Signing time: Fri 17 Apr 2026 06:37:52 +0000
Manifest this update: Fri 17 Apr 2026 06:37:52 +0000
Manifest next update: Fri 24 Apr 2026 06:37:52 +0000
Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: nV084MvPbAcWZOJYb/DRFXS34sfEkt92Kop42Gd4p0w=)
2: FA9003D2D76B11F095EF502678D3641D.roa (hash: o3QxQZu5zodurwcTs5Rk1UZplrBOuwGoI1ym+ksUZ3E=)
3: 73667C2ED76B11F09495728677D3641D.roa (hash: 2Tj5hzFvoJCRrQMRxhtl/1QUyJ76MVlUsJwInbigzME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Validity
Not Before: Apr 17 06:37:52 2026 GMT
Not After : Apr 24 06:37:52 2026 GMT
Subject: CN=69e1d540-8fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:52:cc:23:e0:0e:73:72:4a:ab:03:df:96:
35:58:d1:c2:d9:e7:a9:e4:1a:b4:9f:21:b1:71:a6:
3e:ab:77:0c:e6:0f:d6:04:66:6f:27:85:fb:d8:8b:
7a:14:e3:9e:76:54:f6:e3:15:e7:5d:f5:35:b1:d2:
8e:99:a0:65:f9:ba:ca:f1:9e:84:07:75:96:94:3e:
47:2e:24:2d:71:51:17:ac:90:3d:89:51:98:a1:10:
24:1d:ab:17:12:9a:39:a8:bb:5b:83:e4:f6:67:c8:
cb:1b:03:f6:4b:24:55:33:38:01:7e:b4:53:72:81:
4c:23:c8:6c:92:08:9d:09:b2:90:fa:2e:cf:c0:1a:
e2:2c:a6:6b:f4:df:44:f6:02:1d:7f:67:fb:f2:6f:
91:5e:42:c2:18:16:5a:25:77:b3:43:70:7f:6a:55:
56:06:f1:b7:79:db:d1:db:a5:d1:bd:0f:4b:38:a5:
3e:d8:9d:8b:ed:e0:e0:52:8c:3a:cb:a7:39:d5:81:
82:b3:41:39:56:54:19:56:8e:dc:91:10:1f:71:f9:
8e:47:d3:19:6d:76:a9:82:33:e7:3a:cf:f2:ec:69:
7f:38:e9:58:56:8f:13:9d:58:96:72:60:a2:9d:8f:
26:b9:fa:3a:e7:26:11:11:97:e6:a3:d9:3a:5a:5c:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B7:33:99:7A:8F:EB:D1:20:CC:00:B8:22:62:D1:E7:8F:C1:14:A2
X509v3 Authority Key Identifier:
keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:b0:7c:a1:1e:9d:51:a0:4d:0e:aa:3c:71:55:19:27:76:10:
ad:13:e3:10:00:6b:09:4c:ff:45:c0:c8:6d:66:31:ea:c7:76:
00:ae:df:7e:a3:61:f0:e6:72:26:47:85:62:cb:3c:16:77:47:
98:35:3a:89:df:4a:7f:71:05:96:d4:f7:b7:ef:26:a6:01:98:
9d:f7:2a:00:26:b4:11:fd:01:f9:33:e1:d6:49:fb:0c:fd:ac:
80:6e:83:cb:18:b4:78:46:4e:5b:be:2b:cc:20:5e:07:a6:7f:
c5:ea:0d:59:4b:4c:0a:d2:db:c2:9c:f4:96:4c:fd:96:ce:7b:
92:69:d7:1f:2d:1f:9e:10:f8:43:be:b0:b0:75:a7:72:73:2c:
71:33:3a:19:0c:bd:57:91:1c:ed:93:6d:1a:22:76:09:38:88:
b2:a5:d7:36:89:e7:94:7a:64:c0:3d:90:58:93:d7:2b:cd:3a:
74:42:9e:f9:56:25:fc:db:75:c4:23:57:12:e5:eb:9c:3c:1a:
ee:68:be:6b:2d:2e:ea:d9:96:58:a4:42:8c:ef:04:aa:c6:92:
f0:e0:e3:3f:4f:79:01:3d:39:9b:f1:33:2f:3f:4a:ab:8d:37:
a0:7a:cb:04:9e:19:48:9f:39:fe:3e:4d:e3:f7:97:f6:79:a3:
fa:bc:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:44 2026 by rpki-client