
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier: uE3+DKOok0hgT8T2kb6/p6OnP3Ug7L5UTj1Kf0VsnT8=
Subject key identifier: 00:B3:DB:E2:11:6F:02:E8:C1:00:0C:0A:02:D9:B2:DC:3D:B2:8E:D0
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1C89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number: 1C67
Signing time: Sat 28 Feb 2026 16:14:59 +0000
Manifest this update: Sat 28 Feb 2026 16:14:58 +0000
Manifest next update: Sat 07 Mar 2026 16:14:58 +0000
Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: tOcArIC6/v0sxfD419ToWEqRip20rUVKO7P1ddbWDv8=)
2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: BbGcUbwtP+aZHPYce4149SbFzjL1B5hYLShi68qQcek=)
3: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: HlwCeu7nRQrhAHteeDH8/AzpstkCTMTYbzNnFUCPtI8=)
4: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: Q0+hX7TsyFyWEUhoyFXxRcuYnmI5ezzOdvEkCo3BkCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7305 (0x1c89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Validity
Not Before: Feb 28 16:14:58 2026 GMT
Not After : Mar 7 16:14:58 2026 GMT
Subject: CN=69a31483-cd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:bd:1c:3b:45:1b:71:ab:30:07:64:d5:2f:
be:d8:94:18:68:22:9e:25:ec:50:23:c0:fe:43:68:
0d:2f:8e:15:f4:dd:bc:d7:a0:91:a4:2d:2d:7a:a8:
60:a8:20:9d:ee:0b:81:0f:0e:13:c7:a5:95:0a:6a:
81:30:19:1b:ea:9a:ad:28:0d:93:26:18:1e:18:e2:
98:89:fe:04:a4:f9:b3:ef:8f:a6:98:aa:f4:5c:c3:
b7:d8:9f:58:ee:f7:af:a4:86:37:6d:44:a4:ba:61:
26:e3:ba:61:6a:50:29:71:53:30:75:d5:f5:70:16:
06:2b:3f:b3:18:6f:3b:7d:db:81:f9:b9:dd:67:d5:
79:af:91:47:73:00:63:8b:b9:b8:fe:ea:19:60:75:
84:d2:31:04:15:f8:68:7e:ad:54:2e:b2:e9:05:18:
48:5f:e7:92:54:dd:de:ec:2c:a4:bd:4a:2e:d8:e2:
9d:6d:16:d3:49:9f:4e:cc:ad:c1:b6:61:9c:39:50:
d2:33:8e:a0:39:7a:46:1f:de:5a:61:04:ad:42:e1:
4e:23:8a:ea:18:92:81:b9:60:87:51:b5:6a:7e:9a:
a8:93:36:e3:a6:75:cb:06:39:7a:44:68:18:84:73:
5d:af:e4:39:49:f6:ff:f2:8d:5f:dc:82:72:5a:6f:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:DB:E2:11:6F:02:E8:C1:00:0C:0A:02:D9:B2:DC:3D:B2:8E:D0
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ff:6b:af:40:6f:c1:c2:f7:82:04:89:91:bf:fa:24:b0:45:
11:d6:42:ee:6a:0e:da:b1:68:06:09:23:49:e1:03:b7:a0:d8:
44:f3:27:c4:86:35:5c:8a:74:cc:52:c5:98:63:42:f6:27:86:
2b:e0:5b:bb:d4:1a:b1:f1:0d:28:8a:40:26:4c:5b:cc:4c:97:
e8:0f:97:a8:51:fa:d8:f7:af:03:ab:f7:58:a4:f5:df:60:68:
6a:6c:05:1e:f6:0a:0f:40:05:15:43:ab:5c:b1:17:08:c3:ec:
34:8f:03:18:a5:18:97:b7:3e:94:2f:1d:fb:79:18:a9:b8:76:
e2:c6:54:b7:65:62:eb:a6:11:93:f3:bb:f5:ad:62:93:7f:c8:
db:0e:5e:6b:b4:66:81:f0:66:b2:03:70:00:30:8c:ec:e8:b9:
92:ee:11:a0:1c:3c:f7:dd:c3:50:4a:42:ea:44:bd:86:a1:03:
a1:7e:b7:e2:43:db:a7:d6:fe:3c:6f:05:ad:4d:98:3b:11:3d:
d8:6d:6d:ee:c9:67:d2:ba:03:c7:81:3b:04:41:3c:1d:71:a0:
43:2d:9d:64:49:5a:e5:c1:ef:2c:87:fc:e4:7a:c9:1a:e3:78:
ff:85:58:51:ed:17:e1:76:2f:b7:03:3f:fb:31:34:38:38:a9:
11:3f:27:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB
OEE0QjdERUEwHhcNMjYwMjI4MTYxNDU4WhcNMjYwMzA3MTYxNDU4WjAYMRYwFAYD
VQQDDA02OWEzMTQ4My1jZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJ+9HDtFG3GrMAdk1S++2JQYaCKeJexQI8D+Q2gNL44V9N2816CRpC0teqhg
qCCd7guBDw4Tx6WVCmqBMBkb6pqtKA2TJhgeGOKYif4EpPmz74+mmKr0XMO32J9Y
7vevpIY3bUSkumEm47phalApcVMwddX1cBYGKz+zGG87fduB+bndZ9V5r5FHcwBj
i7m4/uoZYHWE0jEEFfhofq1ULrLpBRhIX+eSVN3e7CykvUou2OKdbRbTSZ9OzK3B
tmGcOVDSM46gOXpGH95aYQStQuFOI4rqGJKBuWCHUbVqfpqokzbjpnXLBjl6RGgY
hHNdr+Q5Sfb/8o1f3IJyWm+76QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACz2+IR
bwLowQAMCgLZstw9so7QMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD
QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1
eFVJNnZfZEhncmlvcExmZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACf9rr0BvwcL3ggSJkb/6JLBFEdZC7moO2rFoBgkjSeEDt6DYRPMnxIY1XIp0
zFLFmGNC9ieGK+Bbu9QasfENKIpAJkxbzEyX6A+XqFH62PevA6v3WKT132BoamwF
HvYKD0AFFUOrXLEXCMPsNI8DGKUYl7c+lC8d+3kYqbh24sZUt2Vi66YRk/O79a1i
k3/I2w5ea7RmgfBmsgNwADCM7Oi5ku4RoBw8993DUEpC6kS9hqEDoX634kPbp9b+
PG8FrU2YOxE92G1t7sln0roDx4E7BEE8HXGgQy2dZEla5cHvLIf85HrJGuN4/4VY
Ue0X4XYvtwM/+zE0ODipET8nLA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:07 2026 by rpki-client