
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json)
Hash identifier: bVhfkugRNJOd5eOJjeJTA0CkUbWtJLpNzvnFYvgYxGA=
Subject key identifier: 91:F6:56:DE:41:A0:2B:A5:BE:00:A3:9B:43:95:26:05:10:98:A5:77
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
Manifest number: 013F
Signing time: Sun 01 Mar 2026 06:18:35 +0000
Manifest this update: Sun 01 Mar 2026 06:18:34 +0000
Manifest next update: Sun 08 Mar 2026 06:18:34 +0000
Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: MsrRRT+QvR1H3oCUqCuZDy0CupSoHG7cPMEerib1Oq8=)
2: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: wkNRLxYMTSQ9zGepk4yzqzlqbEMp0dmX1JQWykvEvPA=)
3: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: w+HKOaC0+jfhSxKVMJ9ShZE05MyOqwYCqtIs1clN5KI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Validity
Not Before: Mar 1 06:18:34 2026 GMT
Not After : Mar 8 06:18:34 2026 GMT
Subject: CN=69a3da3b-67c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:14:48:cc:0c:a7:ff:6c:21:e5:fa:e3:6c:
96:ab:10:12:b2:fd:01:a0:00:c2:7b:7c:a9:34:ff:
b0:38:9d:65:06:ab:d0:88:2c:4f:3d:a6:97:71:f7:
fa:06:ec:cf:e7:8e:67:28:c8:53:ea:06:ed:7d:1e:
79:5e:b4:43:a7:23:66:b6:70:d5:ff:22:a1:a0:97:
bc:31:b1:42:05:b2:be:b0:c0:51:2c:9a:6f:ac:eb:
c6:7d:dc:5a:67:e4:06:60:3d:dd:b8:56:06:6d:c7:
f4:ea:61:cb:f8:70:4d:d7:69:b1:51:38:1d:f2:71:
e2:32:cf:b7:e9:92:9a:d6:f0:53:94:61:5a:10:09:
77:43:6a:75:37:7b:b0:89:39:7b:72:df:d6:b3:54:
fe:36:dc:c2:e8:3d:30:0a:29:52:8a:32:2d:f4:31:
cd:5d:68:82:45:30:fa:f7:1a:3c:bf:6b:96:16:de:
06:a7:23:28:72:d0:1e:3c:bb:62:a8:d8:58:ab:57:
a0:4a:53:17:77:18:89:a2:25:68:23:56:7a:4c:b1:
ad:c8:62:57:b5:a3:75:d0:85:aa:df:90:44:39:4f:
58:5d:45:e9:b6:5b:db:77:75:8c:d6:49:c6:c2:83:
1a:dc:38:84:3b:d2:b4:9b:99:77:ec:71:ce:65:17:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F6:56:DE:41:A0:2B:A5:BE:00:A3:9B:43:95:26:05:10:98:A5:77
X509v3 Authority Key Identifier:
keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:61:4f:53:2d:61:c0:ef:fc:61:a1:86:72:4b:99:99:59:01:
db:e2:ab:15:47:aa:e1:dd:58:52:fe:39:af:78:37:6f:69:92:
f8:34:54:6f:9a:55:b0:59:d1:ff:cd:c7:20:85:17:4d:45:ae:
fd:5b:48:67:8d:1b:8b:02:a0:69:e9:38:72:82:97:ab:c6:1a:
8a:1c:46:e5:d6:c7:a9:ed:c3:9d:79:13:76:ca:cd:2e:89:b9:
f8:70:da:13:a5:b7:bc:b9:2b:9f:10:a5:02:66:1c:15:5e:15:
ed:d7:c7:68:29:de:67:6b:64:89:5d:f4:cb:e0:e7:3b:d3:81:
fb:c6:35:08:34:0a:d5:08:dd:0f:63:ec:3a:e0:3b:f0:5d:11:
1e:1d:24:54:20:e8:79:f5:d2:92:38:10:cf:a2:95:a2:f1:ae:
52:f1:73:9f:98:3f:9c:f0:30:97:e6:fd:bc:f1:d4:a9:b1:f4:
89:8b:56:48:18:0f:ce:23:f8:77:cd:8f:ad:89:0a:f3:cf:56:
75:0d:80:ff:4f:8a:82:32:0c:e7:88:3a:ea:dc:84:11:4c:c2:
90:cf:9c:4b:c1:be:3a:0d:bd:fa:19:a8:48:24:16:47:41:d9:
40:3d:bd:ce:91:dc:5f:6c:ee:ca:85:64:e0:8c:22:fd:58:09:
e9:b7:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:45 2026 by rpki-client