
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier: 0N/AqI6/hiija94xpMq9a0LvpOz/Wn2i+b/YtJwhyP4=
Subject key identifier: 8D:9D:B9:63:69:06:25:B8:00:01:8C:46:76:82:4F:50:03:1A:3B:F9
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial: 0F39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number: 0F09
Signing time: Mon 02 Mar 2026 03:00:29 +0000
Manifest this update: Mon 02 Mar 2026 03:00:28 +0000
Manifest next update: Mon 09 Mar 2026 03:00:28 +0000
Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: jwEXPS998EUut6r4lAd7Rb2Oq+hIl6jF3gyr6zJbXPE=)
2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 0D1ihtmw0zUjEcqvbzWntGfgdBnXeUcvpV6autZiRvs=)
3: FA9D67D07C5711F0AD80C25CC4F9AE02.roa (hash: nOomFrQDp51icnjxEsvcC66JG9RPzFLKr8tMwMWAsjs=)
4: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: 4AUstDe415jmsGyV9Vyk/ukx9soWFgnLVBN/T3hf/gM=)
5: 3FCD146C97D911F080901462C4F9AE02.roa (hash: tLTt/XKqQFCQw7ND4tCYR36sZ8BEXqTlgiLC/nWCPIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3897 (0xf39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Validity
Not Before: Mar 2 03:00:28 2026 GMT
Not After : Mar 9 03:00:28 2026 GMT
Subject: CN=69a4fd4d-360a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:18:05:b7:97:84:87:37:87:53:fe:b2:d2:
5f:9b:2e:0c:7e:d9:07:48:10:35:92:07:9a:f4:ce:
71:bc:a8:08:8a:20:38:d8:4a:0c:4e:bd:4d:87:91:
17:06:74:0e:33:8c:5c:4a:d0:4e:a3:b2:d8:5c:43:
32:e1:4d:f7:1a:0e:00:21:03:e5:aa:e7:8c:64:01:
66:af:61:f7:c6:2a:92:2a:eb:a6:2e:b2:64:85:f5:
da:ee:c1:69:49:6d:6f:ff:2b:83:b7:cc:74:d2:83:
f5:f5:b4:fc:a7:25:a5:6e:b0:a9:3f:e4:ff:4a:83:
0a:52:02:c8:2e:12:a1:3a:19:8c:c3:74:5f:5f:a9:
cb:89:bb:3f:ac:c4:be:25:6b:67:c1:32:df:96:5d:
1d:b0:51:7b:5e:d1:21:d1:a4:1b:ce:53:cd:99:7c:
e3:5c:d8:5b:02:de:99:2a:36:d1:e8:33:0a:49:67:
b2:18:f4:a1:4f:8d:f1:91:4d:7c:24:f4:3e:3e:80:
d5:9c:96:ae:6c:e2:f0:6a:97:9a:3e:70:c1:bf:5a:
ac:9d:82:76:ea:c3:04:9a:96:2f:f8:84:d0:43:94:
c6:7d:f2:1e:ce:e4:58:d0:d8:e4:f6:9e:6e:60:36:
51:4d:87:65:64:ff:6b:12:c9:18:ef:43:e6:6f:78:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9D:B9:63:69:06:25:B8:00:01:8C:46:76:82:4F:50:03:1A:3B:F9
X509v3 Authority Key Identifier:
keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e5:2d:21:13:45:85:ea:65:e6:04:f2:6f:8a:99:1b:a5:79:
a3:08:32:4b:c5:16:e8:b9:f6:39:b6:f5:e2:44:b9:5d:09:ae:
07:4e:05:6f:50:49:82:2f:2d:c0:b9:5d:e7:92:05:94:78:6a:
82:ce:b0:3a:21:f0:05:c6:6b:a8:d1:7f:1a:68:2d:24:d4:91:
24:6e:cf:8f:f4:8a:65:8a:48:3d:6d:75:81:d7:00:f1:5c:6d:
36:1e:39:91:c9:8e:54:1d:b5:c4:90:5d:0b:dd:a7:54:47:e5:
92:d1:e7:f0:7e:ae:1c:a1:80:58:4e:1a:e6:9e:84:a9:87:d8:
bb:07:6f:f2:1a:2e:45:ae:19:3a:88:3e:bd:a6:9e:e4:a0:3b:
a2:b5:23:90:c2:00:e9:a3:2e:3a:72:e7:1a:44:21:1c:91:35:
a8:6e:c1:00:2f:bb:e1:25:e5:06:81:8d:20:70:37:3a:fa:d7:
ec:53:4c:5b:d6:e2:ef:f9:1a:50:f0:34:c3:15:f6:cc:57:0b:
7f:b4:fe:56:16:46:34:ff:fc:0d:e0:6e:66:82:9b:55:d5:84:
cc:f0:79:ca:06:44:11:0c:9f:b0:c3:78:dc:ce:02:aa:74:d4:
88:7e:84:d9:21:b6:d9:50:f7:65:9d:d5:6d:1c:93:6e:bb:3e:
da:72:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:28 2026 by rpki-client