
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File: qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier: GAODNRnwDb6bL4/Cy754DTXpqvzdruC72w34GMvLVMA=
Subject key identifier: A5:EA:CD:9C:A4:2D:C1:C1:2A:25:8C:8B:5C:3B:F5:4A:01:A7:5D:20
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial: 08C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number: 08AF
Signing time: Sat 28 Feb 2026 20:49:28 +0000
Manifest this update: Sat 28 Feb 2026 20:49:27 +0000
Manifest next update: Sat 07 Mar 2026 20:49:27 +0000
Files and hashes: 1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: F651lY2jfFNNUK8ryw91yY8ClC4ouYhMcZTOc7QXlDI=)
2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: juke8Toa5q/feC9M2hcHsovPbUehmduk9jtKUQzDn/s=)
3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: eFW0gG+kPOM7LbQ4AyMnK586iqxQ7pCVupwGfbBM8x0=)
4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: PJx0uKtdr9Wrl9QUK5pHbPeOPE77l24FSedg9Mnsde4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Validity
Not Before: Feb 28 20:49:27 2026 GMT
Not After : Mar 7 20:49:27 2026 GMT
Subject: CN=69a354d8-3e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:48:fc:d4:66:77:3c:e1:00:e8:ff:de:a2:
af:15:31:bd:61:24:3d:50:c3:fa:08:65:52:49:41:
a1:8a:b7:0a:bf:02:08:9a:e3:9d:1a:1d:c3:68:2b:
71:df:b7:ad:f6:2c:89:90:8c:44:56:66:62:97:bb:
8b:e7:e8:da:d9:bf:3d:00:d8:52:2a:27:18:7c:79:
96:e7:a0:9a:1f:2c:c7:ff:45:1e:ca:ed:0f:87:b4:
ed:2f:cd:24:37:a1:3c:a5:64:77:00:2a:8f:41:8b:
01:0c:0e:fe:0c:d7:a7:f8:47:c0:c1:f8:1e:b8:ec:
49:26:07:55:11:28:71:b6:6f:f0:97:3c:45:87:8b:
c3:18:23:d8:7d:84:d8:29:ef:94:b7:14:3a:42:5c:
99:0e:f7:d5:7f:23:9d:51:a6:f8:71:05:6c:1d:3b:
a1:23:6c:d6:c2:86:50:eb:9a:38:d6:2f:73:50:67:
6e:b5:a9:0d:85:50:a5:2a:30:00:02:5d:d6:96:f5:
20:44:20:a5:33:5a:f2:49:43:26:94:fb:ff:10:ea:
92:20:a4:a9:33:8b:85:3d:22:5f:d0:8d:26:54:df:
73:6c:6d:15:8a:dc:94:b4:9c:c1:30:6d:69:bc:e5:
67:b8:9a:9c:22:e9:a8:a3:1a:c5:bc:c7:70:29:3d:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EA:CD:9C:A4:2D:C1:C1:2A:25:8C:8B:5C:3B:F5:4A:01:A7:5D:20
X509v3 Authority Key Identifier:
keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7a:4b:15:ab:08:df:1f:ba:ae:7a:0b:d7:72:cc:70:b9:93:
58:4f:bb:e9:0d:9f:64:55:3d:bf:28:58:de:4f:b4:39:80:c6:
4d:fe:19:33:7a:7f:36:f2:21:73:1d:9d:0e:05:41:a0:61:5c:
4f:ac:a9:20:59:6a:aa:f5:d3:bd:0d:89:e8:86:ad:13:51:3a:
0b:7d:8d:ae:ce:0c:e2:ee:55:07:b7:33:21:59:73:6a:ca:db:
ef:34:e3:2c:17:60:e3:2c:ab:3f:ab:4b:68:9a:56:d3:73:45:
4f:53:6b:6b:51:ae:be:ca:e2:1a:92:cb:69:1c:19:9a:b6:08:
06:da:49:8b:26:0d:10:05:17:ad:b7:ab:5f:ed:6a:49:b6:3f:
a6:5c:d5:86:41:38:4e:b8:3b:5b:35:53:8a:63:10:0e:e4:3f:
96:4c:b1:16:ca:0d:ff:a5:8e:5e:38:3e:e3:58:c5:41:9e:f6:
32:0f:33:3d:c9:c4:0c:69:33:f7:94:84:07:24:7a:fe:b1:af:
ed:1b:c1:9f:68:1f:16:1c:cf:ab:f3:af:60:92:66:13:79:d5:
c8:82:4f:ed:6e:f2:b1:16:22:16:e0:34:87:16:d6:56:ef:2a:
71:14:19:f1:50:b9:1b:01:c3:de:07:3a:bb:24:a7:c8:80:64:
a1:8c:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:42 2026 by rpki-client