
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
File: QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft (raw, json)
Hash identifier: /uvPyKXSuMx+i9+zKx5f61txvKwLLIVnYgh2hvRGhr0=
Subject key identifier: DC:0F:E3:96:52:7F:C2:0D:64:2D:D9:91:0D:96:F9:B6:0B:8A:21:51
Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
Manifest number: 0103
Signing time: Fri 17 Apr 2026 05:52:10 +0000
Manifest this update: Fri 17 Apr 2026 05:52:09 +0000
Manifest next update: Fri 24 Apr 2026 05:52:09 +0000
Files and hashes: 1: QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl (hash: OY4Y0WDKVw3n7VRxk6DHuhzGZekTHnbv4gOOoBt+uZQ=)
2: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (hash: V9uLs/UPnwnmzkafwxkP85mnXAZceqiwbgfkXel2Nag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812
Validity
Not Before: Apr 17 05:52:09 2026 GMT
Not After : Apr 24 05:52:09 2026 GMT
Subject: CN=69e1ca8a-910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:29:31:f0:e3:c8:3f:14:d2:b2:d8:36:dc:
87:f6:bb:1e:e5:b1:b4:71:15:cf:a2:1c:d2:20:7d:
2e:c9:f4:9d:79:51:2f:5f:ba:7f:e3:a0:c3:e4:85:
fb:bd:be:f0:9c:0e:eb:db:69:b6:c8:4b:1e:12:98:
20:4c:a2:6f:be:77:40:95:dc:3a:66:aa:de:78:74:
8d:df:e2:09:96:ca:fe:60:69:09:5e:6b:11:0e:ce:
a1:93:ad:b3:fb:c8:52:12:8d:ac:49:3c:da:e3:3e:
de:c8:a5:79:15:15:93:fb:2c:f8:a8:15:85:71:f3:
b9:06:f0:04:f6:6a:d1:b9:52:16:de:a8:df:c2:0c:
01:6a:2b:03:15:70:d2:a1:c0:98:28:41:c2:db:76:
f1:8e:9f:20:d3:9d:4a:6d:bd:b1:e0:a5:2b:8d:fc:
fd:c1:a1:67:60:8b:d3:23:6c:18:cb:e8:3b:3c:c6:
9d:2c:98:27:10:ad:32:a2:8e:a5:21:69:e0:fa:b9:
c0:2a:35:25:2f:72:3e:dc:af:3f:56:75:a1:0b:23:
93:41:a3:d6:cf:04:73:38:40:4c:88:38:c9:11:e6:
c4:09:a5:28:fb:01:cd:11:f7:72:c8:3e:85:bf:80:
33:af:a9:73:28:b6:fe:8e:a7:ae:ce:c2:77:bb:ef:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0F:E3:96:52:7F:C2:0D:64:2D:D9:91:0D:96:F9:B6:0B:8A:21:51
X509v3 Authority Key Identifier:
keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:af:3b:30:33:e2:75:77:a2:9e:ec:6a:c7:cd:a2:59:5d:3f:
b3:50:df:bb:70:05:ef:a4:05:8e:37:1c:ca:b3:01:64:b0:ff:
af:08:86:59:cf:2f:dd:99:c5:c8:b2:f4:81:b4:0b:ce:47:ea:
2c:a1:ed:8e:d3:c8:da:23:7f:13:67:fa:1b:f6:ef:db:d8:ba:
8b:4d:ef:c1:51:14:bc:a4:03:04:5f:10:70:08:0d:76:3f:7e:
df:82:27:3f:ef:4b:32:ea:79:83:0e:59:a7:1a:cc:d9:34:5f:
0a:47:05:c0:16:44:63:a7:f7:58:8c:ba:f4:3e:b1:75:32:95:
01:46:01:ec:70:9d:15:86:ad:a0:0b:c3:4c:58:03:22:08:5a:
dd:d6:e1:24:84:a5:be:ca:97:f3:20:31:ae:10:d2:29:55:ff:
25:81:8e:f7:cb:9f:74:71:31:c6:bc:56:07:19:0e:40:b9:62:
7e:8a:b2:05:0f:7a:17:26:60:1b:71:73:0e:95:da:82:6c:65:
23:3f:9c:75:fe:ee:0e:3d:4b:df:8f:d1:46:6c:b1:f5:fa:2b:
d2:71:0f:61:17:64:af:44:f5:8e:c2:b4:bd:c3:8a:d3:4f:90:
a2:55:56:38:06:f0:9a:6b:4f:74:c8:6c:86:7c:af:4f:37:a5:
28:75:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:12 2026 by rpki-client