
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier: DCa8uNLTJz6gFgJM//rTUB7ShquaFqeRKAmR0fKTrSE=
Subject key identifier: 9D:08:2B:75:EF:A4:58:4D:89:74:DC:93:34:72:67:43:B6:6B:E7:4A
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial: 0B63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number: 0B54
Signing time: Sat 28 Feb 2026 19:28:40 +0000
Manifest this update: Sat 28 Feb 2026 19:28:39 +0000
Manifest next update: Sat 07 Mar 2026 19:28:39 +0000
Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: SJ1lsay4gBMgpzxtpm8xrbhGsOArPn4r4aeGZk/4nGM=)
2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: CrylrybJXUyUqaeayMNhPjaFY6Npk3CjmQ0j2NnHemA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2915 (0xb63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Validity
Not Before: Feb 28 19:28:39 2026 GMT
Not After : Mar 7 19:28:39 2026 GMT
Subject: CN=69a341e8-7c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:65:12:75:53:4c:d7:47:dc:22:9d:fd:37:
18:95:6e:91:f0:cb:76:26:23:d4:9b:77:17:c0:b8:
78:cc:40:5d:56:26:03:e8:27:e9:a2:32:64:b8:10:
98:9b:14:e4:fa:e1:4d:a3:0e:36:c0:53:d3:9d:e8:
de:49:6f:44:2d:32:75:d9:6d:f9:e3:cc:ab:dc:69:
0c:24:5d:7d:07:5e:1d:58:d8:6c:e2:e4:26:ab:01:
66:5a:49:7d:99:df:a3:2b:f7:98:d4:92:24:f7:d5:
b5:11:e9:47:6a:b6:11:a6:51:48:8b:46:d5:d4:9f:
21:e0:1b:75:0c:94:de:95:33:ec:d0:70:ca:fc:0d:
f0:ad:28:f9:b5:6e:de:f5:fb:66:4f:3a:f2:2b:99:
c6:fe:35:f2:77:d8:4f:06:33:75:46:d3:32:4e:d3:
00:aa:b7:99:41:5b:51:39:68:a4:8a:85:f6:f5:bd:
98:db:56:8a:8a:2e:32:14:61:40:ea:40:49:65:5b:
ca:55:ba:b1:c8:7f:48:12:aa:42:d3:e9:03:a1:f5:
6f:cc:ed:a0:57:c6:b0:90:67:00:b3:bf:9a:71:28:
ba:6b:30:78:ca:f6:8e:43:91:78:13:c8:19:6a:9e:
3d:7a:b5:cb:1e:65:ab:45:8d:49:7b:0d:a4:20:70:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:2B:75:EF:A4:58:4D:89:74:DC:93:34:72:67:43:B6:6B:E7:4A
X509v3 Authority Key Identifier:
keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:58:52:3f:a8:5c:83:0c:f9:d3:e8:ce:61:c4:b3:e1:01:f6:
4f:3d:46:01:3f:a5:0e:9b:96:79:d3:a6:81:3b:ac:09:af:7a:
e8:5b:38:b6:98:af:06:64:83:d8:29:fb:26:ef:3e:3f:c9:c8:
72:0a:34:23:f1:09:a1:4b:f3:55:59:39:fa:ce:d5:2a:8d:81:
00:23:6d:eb:12:2f:3d:c4:08:41:dc:70:b5:ee:d9:35:9b:50:
da:11:0c:09:7c:f1:2d:66:ca:9b:99:b6:ed:f0:7d:c9:5f:87:
67:e0:1e:6b:41:79:1b:90:fc:b0:67:54:19:54:d8:4f:8e:f4:
c6:73:0c:d0:a1:95:ec:7a:d8:2d:ed:42:a2:02:ae:96:e3:22:
f1:66:5a:ad:4f:c0:c5:74:3c:be:68:76:d6:fa:7c:90:98:16:
cc:13:15:41:88:1d:65:f0:85:3a:bf:b6:74:af:07:4c:19:79:
08:39:e5:91:7b:2c:cd:71:11:de:ca:8a:e2:ac:8f:ad:8e:65:
ca:d8:4c:d9:6f:b1:0b:78:f5:d9:02:aa:51:68:42:81:83:22:
10:98:95:a1:12:32:1b:e4:16:61:5c:45:91:26:30:a1:4e:af:
9f:81:4f:7f:27:5d:31:dd:d5:4c:f8:ea:aa:84:16:ca:46:17:
05:1d:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:48 2026 by rpki-client