
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json)
Hash identifier: cYJSSCXFbgcIgoaB6jjaPQywKA5brqqGFiFG+JV5G7E=
Subject key identifier: A3:F9:A2:C3:AD:79:5E:70:00:A0:3A:38:14:9D:08:A5:E6:43:78:D1
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial: 0750
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
Manifest number: 0735
Signing time: Mon 02 Mar 2026 00:34:01 +0000
Manifest this update: Mon 02 Mar 2026 00:33:59 +0000
Manifest next update: Mon 09 Mar 2026 00:33:59 +0000
Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: PjoFNYoeOJg36dPfglrzaaVEh5DPxABXd/rr6kChst0=)
2: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: ja+InHtGIgo82Asz/+ZVF2gnztVHMmOvkEj/+OfWSAc=)
3: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: yll6EleWhluFREKT8NzETIGMZoAw4Is6iNKhftN9k0s=)
4: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: TW3Yzr4nVCh6fw/bwk2DNXvw9C9/OVS9zcojLveOPlk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872 (0x750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Validity
Not Before: Mar 2 00:33:59 2026 GMT
Not After : Mar 9 00:33:59 2026 GMT
Subject: CN=69a4daf8-b231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:08:e4:4a:b7:ed:78:99:d9:dd:ac:d9:0d:
83:bc:a2:cb:95:d6:5b:c7:f7:b3:9a:51:5f:3f:21:
67:1d:c4:0d:bb:87:d2:42:79:96:40:03:89:40:7c:
4b:e2:2e:e4:06:27:83:27:5f:98:6b:d0:7c:48:02:
40:62:8f:40:b1:39:36:40:0c:14:b0:9b:3d:83:f1:
a5:56:ff:ca:b7:5e:1c:29:65:62:db:12:91:77:c0:
3e:79:ea:76:2f:56:11:c4:8e:0c:ca:b0:83:7e:3b:
45:dd:a4:b2:03:a5:ff:19:7b:0d:2c:c1:25:d0:12:
79:9b:c4:bd:aa:16:97:b3:61:0e:0c:f5:4a:0c:97:
a3:f5:2c:d5:da:f2:20:2c:9d:ce:e8:09:d9:0a:5f:
86:1b:f1:28:ec:82:89:31:58:ae:2a:3e:c1:75:8b:
11:c8:07:ef:6f:ef:9a:74:88:b8:48:c0:b4:5d:34:
8b:39:4c:32:e9:da:c0:c1:ae:7b:82:10:5a:c4:d2:
f3:67:63:8e:8a:68:cf:2d:62:87:5c:91:fe:7c:ba:
8f:75:53:6c:9b:37:78:fe:db:19:65:f5:b0:bf:fd:
11:57:5c:2b:11:e2:d2:dd:ce:e0:4d:64:54:b0:2b:
8c:ee:67:93:78:52:9d:d3:69:85:11:60:ae:f3:a2:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:A2:C3:AD:79:5E:70:00:A0:3A:38:14:9D:08:A5:E6:43:78:D1
X509v3 Authority Key Identifier:
keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:59:39:aa:9b:d2:d2:44:83:a5:ab:9f:53:c9:ed:e6:c0:1d:
78:26:3f:57:2a:29:21:36:92:40:66:68:63:eb:8e:d7:d1:c5:
95:6a:ab:0d:30:df:18:97:d3:9d:0b:32:45:7c:7f:0e:3b:1f:
82:6a:82:bf:c8:97:ff:31:97:10:30:e8:5d:62:f7:e8:91:12:
0a:66:c8:52:ad:82:38:b1:b2:01:db:e1:12:3e:3c:18:23:a0:
10:e3:e0:09:c8:c8:4d:18:ee:72:ef:10:47:bb:eb:1f:18:ef:
13:7c:b9:aa:5d:aa:e4:e0:9c:9b:f5:5c:96:02:bb:48:af:4c:
ab:f6:c6:75:65:52:b4:a1:ec:9e:72:3b:75:f5:02:1e:8a:38:
45:02:60:e8:ee:19:a2:95:fd:1d:b0:37:da:fc:40:f2:81:ec:
a6:bc:e8:2e:c2:5a:ec:47:cf:14:6c:28:00:7f:78:39:d3:91:
32:b5:b9:89:b9:c0:68:4c:d5:74:1a:99:3b:2b:59:3d:0c:97:
46:fd:7f:c6:9f:ed:7b:dd:c0:bf:db:ba:62:94:2c:8a:7c:37:
c1:13:16:a6:e9:96:64:3e:1e:08:9f:a7:74:21:e2:a2:46:52:
6c:aa:fb:f8:cd:86:06:0f:a1:8c:c6:ff:ee:b8:72:4d:ef:52:
8b:d1:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:55 2026 by rpki-client