
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: eqX/HugTkdO59b0rd0UuTet0Qir3lB+uRIU0qIU1ToY=
Subject key identifier: 7E:55:4E:CA:04:64:55:2B:49:88:62:DF:3B:52:5D:67:A1:7F:40:D8
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 083C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 0832
Signing time: Thu 16 Apr 2026 20:53:12 +0000
Manifest this update: Thu 16 Apr 2026 20:53:11 +0000
Manifest next update: Thu 23 Apr 2026 20:53:11 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: cFtWPDx/5+lg/4DzLtHdJix42yFc11MncsPA4cxqtC8=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108 (0x83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Apr 16 20:53:11 2026 GMT
Not After : Apr 23 20:53:11 2026 GMT
Subject: CN=69e14c38-96f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:b9:1b:01:19:63:0e:70:99:2f:2b:60:66:
bf:e5:ae:1c:ea:b5:c7:64:09:47:4e:4b:11:20:33:
b0:56:5c:4b:6a:fb:71:2b:d6:d1:8b:2a:fe:98:fa:
b9:16:84:18:74:7b:99:b0:74:bb:45:27:fc:fc:38:
d3:fe:94:1b:9a:aa:4f:91:d2:f5:ac:c4:74:df:95:
cf:78:a2:74:67:a7:e2:f6:cf:11:a9:75:b2:39:46:
bb:d5:ef:b1:09:c6:83:28:db:42:44:1b:ca:4d:5c:
ab:8c:73:46:b8:7d:ad:1a:48:e8:72:e8:80:fd:76:
32:76:6a:ca:99:fc:be:fe:fe:b2:5b:58:c1:18:24:
0f:aa:00:a6:83:8f:a3:8b:4b:4d:5b:c5:12:5f:99:
04:0c:1f:38:49:27:2e:19:68:01:e6:00:db:17:d6:
c6:22:c4:3b:09:89:3d:29:53:d7:2c:a0:8f:51:79:
3b:72:bb:59:8a:ae:a8:14:e5:8b:4a:e5:de:82:b7:
94:a0:30:ff:cb:f7:3e:e1:d3:68:32:49:c9:13:6c:
43:dd:70:66:02:74:dc:3b:c0:fa:25:6a:44:ec:25:
d6:41:dc:19:29:10:57:7d:2a:c4:94:31:0b:e9:70:
ca:34:11:16:af:81:05:70:5d:a0:5c:d1:9c:57:d4:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:55:4E:CA:04:64:55:2B:49:88:62:DF:3B:52:5D:67:A1:7F:40:D8
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:87:e1:5f:6c:d2:83:91:77:da:d3:5c:9b:f2:7b:dc:f5:3c:
f2:c1:65:79:5a:a2:d3:02:f5:46:e8:1f:1c:e2:b6:37:36:ee:
1e:86:20:9b:30:52:db:f4:6b:ef:1a:b5:6b:b1:d9:d9:29:e0:
be:28:ad:8d:46:15:47:08:3e:83:4a:06:d5:34:58:6d:05:f4:
d6:f6:37:0c:0e:a9:f1:9e:39:23:24:1b:cf:42:5d:9e:e3:e0:
82:3c:da:81:1e:2b:99:f1:64:ff:91:88:82:c4:c0:da:a9:49:
f6:8e:fe:38:63:fa:e4:bc:e8:4f:64:0d:6a:ba:e5:79:c9:e5:
79:36:67:47:21:28:1f:90:94:32:b8:60:48:69:33:4d:bb:e6:
21:16:1d:7c:20:4e:cd:3a:3b:e1:33:ac:8d:fe:6a:41:64:69:
49:62:29:9b:19:89:f5:53:b0:2a:60:6d:9a:d3:4c:7c:b9:6a:
97:7f:f0:28:c7:be:44:ca:da:53:10:57:79:4e:e2:bb:5d:b0:
ed:0d:06:c1:b2:ba:42:dd:c6:55:11:1d:55:59:a0:29:10:d2:
8b:a1:ce:1c:05:db:3f:82:70:74:20:9a:a1:40:94:cd:6e:a2:
63:58:a6:5e:95:0e:9d:3f:e4:6d:95:f4:b4:19:94:7c:94:ea:
c8:b5:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:48:58 2026 by rpki-client