
$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json)
Hash identifier: JBu5RgrDMYwTqOZlvl7bxglQwgY1XLwamKLx9B2NoAc=
Subject key identifier: DE:66:98:85:89:83:3C:5A:60:A7:5F:BB:45:39:8C:F4:4A:16:EB:48
Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
Manifest number: 9D
Signing time: Fri 17 Apr 2026 07:06:35 +0000
Manifest this update: Fri 17 Apr 2026 07:06:35 +0000
Manifest next update: Fri 24 Apr 2026 07:06:35 +0000
Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: ccQF4YQLbaOcsBeYSBX80Lp2mpGagHAb8k02tW7/cfw=)
2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: keWoR6Hyq0x5/4XbMYXw5aujAnOEsemIs8ZNPQolFKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Validity
Not Before: Apr 17 07:06:35 2026 GMT
Not After : Apr 24 07:06:35 2026 GMT
Subject: CN=69e1dbfb-09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:29:5e:12:3f:13:83:a2:4f:28:73:85:a9:
5b:f5:9a:f0:ae:db:c4:d1:72:fa:a8:24:41:36:ab:
54:08:a5:9d:36:36:67:b2:f4:3b:fc:f3:0e:19:1d:
f7:49:ec:60:a4:5f:78:fb:03:d4:03:7b:a3:85:e9:
08:d2:0c:3d:c4:37:72:03:0a:76:f0:ff:f0:f1:c2:
0f:04:95:9c:bb:1c:33:4f:ea:c6:53:91:53:1d:ac:
7f:a5:ac:8b:c1:d1:a4:e6:8d:3d:1f:77:29:d8:2c:
2b:17:9c:ce:e9:2e:6b:41:cd:62:20:7e:68:b7:10:
64:f2:3b:55:9a:fc:e8:64:ce:34:78:ce:d8:1f:51:
1b:56:c3:42:05:15:ad:c8:1c:9c:da:c9:84:87:47:
b8:eb:37:c4:5a:b3:34:82:b7:dc:c6:90:2c:79:e3:
5c:6e:da:43:7e:a5:a4:52:0b:3a:f5:7f:15:54:5d:
90:72:66:69:2c:59:32:63:cb:5c:9a:f7:dd:b6:f7:
c0:b6:68:9c:1f:21:9c:49:46:4b:a2:8e:93:94:eb:
e4:67:9d:61:b3:50:fc:66:6f:6c:39:bf:c6:4a:ed:
34:0c:94:53:ad:3b:09:a3:e2:94:47:2e:a1:7c:e8:
20:91:98:d4:ff:90:31:94:e9:b9:74:cc:dd:bc:ae:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:66:98:85:89:83:3C:5A:60:A7:5F:BB:45:39:8C:F4:4A:16:EB:48
X509v3 Authority Key Identifier:
keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:a9:0c:ce:3f:ed:e6:14:7d:c0:aa:ea:d6:be:9f:cb:68:9e:
e7:6e:3b:c6:4d:33:a1:e6:09:0d:63:01:fb:63:c4:25:43:0c:
3f:66:3b:1f:74:8a:b0:78:5f:c4:b9:a2:5a:a7:75:78:13:99:
5d:54:8c:66:2a:b8:90:7a:f6:31:2a:f5:02:05:46:5f:84:86:
80:a9:36:97:46:40:4c:2f:a1:80:58:c0:e5:25:78:7b:44:54:
e2:ec:f5:83:d9:bc:4a:fe:fe:00:bc:7f:dd:af:a4:a3:32:23:
0e:ec:0e:66:fd:6d:94:a8:aa:14:4e:02:fe:db:35:ef:64:d9:
46:40:b6:de:da:5a:2a:8f:48:1c:6c:40:66:b2:e4:ee:4d:a0:
ac:cd:84:38:3b:9a:b8:ba:2d:42:d3:fd:93:e9:7e:9d:71:f7:
af:28:41:c5:21:fd:06:db:4c:28:5e:22:88:e6:22:56:b2:9d:
70:8f:b9:4f:74:c6:83:78:43:95:de:20:48:0e:71:d3:83:4b:
55:44:cc:c7:2e:a7:b7:36:3f:1e:0c:c4:bf:ca:b7:49:f9:1b:
c9:be:f2:bf:83:cd:79:e3:5f:1f:41:cd:a0:c3:89:a3:0b:58:
7a:d1:4f:bc:78:3f:f5:35:c8:42:47:d7:99:09:7c:3f:c9:fe:
8c:3f:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:40 2026 by rpki-client