
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: mv0QsQvl9K6EUpegkjMPvboQVbkSPzuaRnVYewteTvM=
Subject key identifier: CE:8E:D7:EA:9D:26:24:84:71:77:02:A4:D6:AC:D8:01:A5:71:7D:F7
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 0820
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 0818
Signing time: Sat 28 Feb 2026 21:25:57 +0000
Manifest this update: Sat 28 Feb 2026 21:25:56 +0000
Manifest next update: Sat 07 Mar 2026 21:25:56 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: kbtfgaehZRfyTZtXGMRN2o609ccZ5E1afliwx15CMFw=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: GZbNr4hWJMQHmwZjxnOSE/qUptolcknoCfCUMmvTKYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080 (0x820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Feb 28 21:25:56 2026 GMT
Not After : Mar 7 21:25:56 2026 GMT
Subject: CN=69a35d65-85f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:da:02:bb:46:17:03:b3:9a:c1:5d:a9:00:
a2:7e:08:fd:f2:a5:35:ff:61:64:b1:00:13:45:a8:
a6:eb:95:8c:67:5c:bb:7a:47:9f:c5:36:3f:8b:fd:
23:33:40:ae:d7:c3:fa:3c:8b:18:20:5f:f7:05:10:
dc:bc:5d:a1:28:85:16:ab:c7:6f:81:d9:8e:0b:f1:
96:b5:68:64:1b:a8:0f:6d:7e:ac:1c:32:8e:4a:24:
a0:b6:af:9f:50:77:69:ab:9a:4a:d2:9d:fd:c3:bb:
89:c3:3a:52:9a:11:ed:17:0c:7d:f5:9b:f1:7d:71:
21:df:b8:f2:1d:e1:ca:32:cd:1a:c8:47:a0:df:d2:
6b:05:7d:3e:4f:c8:6d:3b:44:ac:4f:c5:e9:8e:58:
c7:1f:58:bb:8b:68:3c:16:ee:33:0e:ac:b6:56:01:
f2:94:de:e5:8e:69:53:a2:aa:44:c4:bc:1d:67:4b:
c1:27:04:84:a3:06:79:38:50:4d:f2:76:ed:22:ac:
41:e9:6a:62:12:1a:47:22:ce:19:16:d3:cb:08:06:
b5:97:c4:23:2c:17:47:9b:95:4f:70:fb:cf:c1:0a:
29:46:cb:2d:24:73:37:34:24:c1:e2:1a:84:1e:08:
42:f4:aa:07:55:50:f3:44:e8:dc:87:62:de:ac:da:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:D7:EA:9D:26:24:84:71:77:02:A4:D6:AC:D8:01:A5:71:7D:F7
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:46:bf:fd:20:1a:1e:37:53:ec:7f:55:58:e5:8f:b1:86:a0:
6f:29:2a:7f:77:d9:ce:38:b6:84:23:e6:f4:4a:9c:a1:88:0e:
87:c7:3d:b1:b7:2c:ce:b2:74:3e:af:dc:da:cd:c1:2b:5d:f4:
4a:3d:f5:95:18:5b:83:c0:5f:fe:6b:6c:c6:75:0b:b9:c9:ea:
0e:c1:67:05:ae:8d:51:26:8e:9e:79:c6:f8:3b:9a:71:9a:5e:
e7:ef:b7:37:3f:e7:37:12:85:de:c1:2f:26:22:1b:bd:57:c2:
79:3d:b3:16:0e:51:f0:10:3d:70:44:e9:b2:bb:af:75:98:9f:
09:a9:c2:42:2a:80:35:be:34:2e:a9:08:5d:3d:f4:0d:a1:e0:
53:b6:65:15:94:39:cf:53:05:b7:c5:0d:13:a8:76:34:63:21:
83:33:11:04:4d:c4:48:26:03:c7:b6:51:e3:64:14:b9:e4:30:
e6:55:b8:5f:61:76:0d:f6:44:bf:f3:3e:94:d7:32:53:53:c2:
2e:7c:50:16:a2:2e:9d:ed:32:e5:47:71:15:4c:0e:30:27:2e:
3d:55:95:0b:95:70:53:6e:5a:83:47:a5:f4:0a:89:3b:c4:f0:
62:ee:62:a7:db:a8:ce:2c:a6:5e:73:38:74:88:4b:e6:c9:c7:
3c:b6:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:10 2026 by rpki-client