
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json)
Hash identifier: Z+qyllxJz9y2YnAPO6aSQ4QpWgAOPtYFFQcp8bAgbOo=
Subject key identifier: 8B:90:93:5B:16:D7:15:23:CD:C2:6B:54:52:D8:4E:59:BF:AE:C1:47
Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
Manifest number: 0113
Signing time: Sun 01 Mar 2026 07:00:29 +0000
Manifest this update: Sun 01 Mar 2026 07:00:28 +0000
Manifest next update: Sun 08 Mar 2026 07:00:28 +0000
Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: QeghhtYi9ab1Qogqod8Fg5+qq86MPiOd4mLc/EaAz8g=)
2: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: gFT3tE7cOKt1wG5K3C0Vr6g5ehw7Cbh9wHU/cKgl+po=)
3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: RfcMIG1IXwx6pF5vk+cVTv0c/fwzJvqDiir11C+zzpI=)
4: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: OJAV4WkM6x0VNa00vf9C4w5wbjHBK75s7rqnrmFq6U0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Validity
Not Before: Mar 1 07:00:28 2026 GMT
Not After : Mar 8 07:00:28 2026 GMT
Subject: CN=69a3e40c-b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:48:fd:da:3c:92:9d:61:46:31:7b:f3:95:50:
c5:6b:d5:08:61:08:b3:70:2c:2b:bd:cf:bb:85:fa:
57:df:fa:22:1d:a9:e5:e0:84:71:ee:28:41:bb:a1:
3f:01:14:03:75:58:7a:9f:03:5c:49:59:d6:9c:19:
ea:32:8d:ed:cc:83:1b:ac:ff:c7:8d:46:99:e0:1a:
f2:ff:33:e5:36:13:6c:5d:52:df:60:2d:f4:63:5c:
67:05:8d:5c:7d:ac:2b:c8:75:73:fa:14:d3:f1:39:
36:8b:6d:cc:a7:38:cb:b7:a7:cd:95:d2:81:a9:1e:
43:27:a4:85:44:de:43:f9:b2:77:27:65:9d:77:c5:
1b:bf:1c:63:4d:ea:c5:a6:90:15:75:86:2d:be:97:
b6:2b:41:5b:2b:c2:b3:a9:5f:9d:56:19:03:50:3f:
c8:83:41:c3:52:09:42:65:33:d9:7a:dc:fd:31:97:
0e:de:8e:c7:53:e2:28:4b:b4:e2:de:c6:00:11:fb:
62:ae:94:7b:e5:89:e3:8d:e6:98:e5:01:5a:a0:ee:
72:b0:0c:ac:b3:da:9b:4a:59:a1:dc:52:7d:5d:e8:
77:15:fc:28:21:b4:0d:be:57:6e:0e:6f:6b:91:8d:
ad:88:6c:d5:13:85:1e:72:c6:a3:a3:70:3a:09:ac:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:93:5B:16:D7:15:23:CD:C2:6B:54:52:D8:4E:59:BF:AE:C1:47
X509v3 Authority Key Identifier:
keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:bb:26:30:84:01:9c:dd:56:27:98:f1:46:48:16:fb:48:61:
0f:d3:a1:9a:30:0b:76:d1:d6:24:20:65:b5:ea:54:9f:4e:a6:
62:a7:1d:44:29:99:ae:0d:13:d1:a8:5e:72:f8:c7:2d:29:21:
45:e9:09:3b:d4:ac:32:2c:06:08:79:cb:9e:0c:2f:39:a4:85:
8f:2a:ed:08:63:68:c0:38:1c:37:2b:08:5b:61:e8:69:0c:f7:
2c:db:0b:db:b3:de:00:61:f4:b9:d1:12:87:69:e1:bb:63:81:
d6:e6:71:00:46:73:58:9f:7d:9b:59:79:f5:f4:a9:1d:cb:f9:
86:52:04:45:4f:42:2f:18:a1:15:03:e1:3c:ee:48:b6:63:cf:
c2:92:65:f5:64:9b:48:70:32:4d:2a:15:5f:31:57:44:10:2c:
8f:69:e4:75:23:33:09:28:95:65:34:21:f9:61:3a:c3:64:26:
cf:7d:ad:7c:ea:52:ee:36:f6:87:c4:b7:b5:4d:a0:6a:6d:b6:
6e:77:dd:26:af:42:50:d5:63:f3:af:18:37:ba:d5:7c:65:98:
23:8c:b3:ad:11:7e:df:78:27:dd:2c:1f:b3:ca:bd:cd:3e:c5:
db:cb:8a:d7:bd:b3:a3:3d:b9:04:7e:3f:0b:bf:84:c4:d8:e5:
63:d9:0a:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw
QjE4OTcwRjgwHhcNMjYwMzAxMDcwMDI4WhcNMjYwMzA4MDcwMDI4WjAYMRYwFAYD
VQQDEw02OWEzZTQwYy1iODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/Ej92jySnWFGMXvzlVDFa9UIYQizcCwrvc+7hfpX3/oiHanl4IRx7ihBu6E/
ARQDdVh6nwNcSVnWnBnqMo3tzIMbrP/HjUaZ4Bry/zPlNhNsXVLfYC30Y1xnBY1c
fawryHVz+hTT8Tk2i23MpzjLt6fNldKBqR5DJ6SFRN5D+bJ3J2Wdd8UbvxxjTerF
ppAVdYYtvpe2K0FbK8KzqV+dVhkDUD/Ig0HDUglCZTPZetz9MZcO3o7HU+IoS7Ti
3sYAEftirpR75YnjjeaY5QFaoO5ysAyss9qbSlmh3FJ9Xeh3FfwoIbQNvlduDm9r
kY2tiGzVE4Uecsajo3A6Caw5QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuQk1sW
1xUjzcJrVFLYTlm/rsFHMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC
MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw
aFhoUXhQTHRPSzRMR0pjUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARbsmMIQBnN1WJ5jxRkgW+0hhD9OhmjALdtHWJCBltepUn06mYqcdRCmZrg0T
0ahecvjHLSkhRekJO9SsMiwGCHnLngwvOaSFjyrtCGNowDgcNysIW2HoaQz3LNsL
27PeAGH0udESh2nhu2OB1uZxAEZzWJ99m1l59fSpHcv5hlIERU9CLxihFQPhPO5I
tmPPwpJl9WSbSHAyTSoVXzFXRBAsj2nkdSMzCSiVZTQh+WE6w2Qmz32tfOpS7jb2
h8S3tU2gam22bnfdJq9CUNVj868YN7rVfGWYI4yzrRF+33gn3Swfs8q9zT7F28uK
172zoz25BH4/C7+ExNjlY9kKzw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:41 2026 by rpki-client