
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json)
Hash identifier: wC0qTubOTuPGEftDQ6XGc0sReWsS/WgsM63ksbtzFpQ=
Subject key identifier: C8:23:E8:75:C9:7F:37:34:95:1C:09:4B:E4:A3:A8:A6:40:4A:DB:60
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial: 370C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
Manifest number: 361B
Signing time: Mon 02 Mar 2026 14:29:08 +0000
Manifest this update: Mon 02 Mar 2026 14:29:07 +0000
Manifest next update: Mon 09 Mar 2026 14:29:07 +0000
Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: RpwTlvfE6kzPVXR9hLDbTlnoW3GvNAtv0mpbjZAqs84=)
2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: A4A0Lzf1YFbIi7DPupZezmrkRxhCjLzT9LzOggtcrag=)
3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: AoD1y/nYjPSOUSJHEbMuyBuaFVXXnCMYDMP9nMWhevk=)
4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: KeHN4yC8HCgWU7NC7+u9JXzLgmJ0RzLzePi7iCwVwGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14092 (0x370c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Validity
Not Before: Mar 2 14:29:07 2026 GMT
Not After : Mar 9 14:29:07 2026 GMT
Subject: CN=69a59eb4-c463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:68:42:4a:66:cf:06:b7:e6:0c:28:c6:24:
2f:41:74:c9:b9:75:fc:73:02:f9:8d:90:7b:05:78:
4b:1a:fd:6a:b6:50:0e:2e:28:df:c8:e7:24:91:b7:
6d:2f:02:2a:72:ed:25:49:08:e8:90:dc:39:ed:bd:
0d:7b:79:16:17:43:e6:7d:e2:f0:1b:1b:86:8b:f0:
f2:a4:1f:9a:d5:14:c2:e1:49:6f:46:77:4d:0a:15:
d6:79:7f:38:15:9d:0f:23:81:da:60:03:c2:db:b2:
dc:ec:f8:62:88:cb:00:a3:66:6c:d7:10:46:57:bb:
b1:c5:24:61:72:68:bd:87:7b:9b:20:48:33:80:0b:
75:15:b6:b3:ac:82:aa:b2:c5:33:ca:ee:07:a6:5d:
a1:61:89:5c:23:db:39:fe:d6:c1:ca:b7:36:85:95:
3d:22:19:87:88:6d:60:86:22:31:46:82:85:08:b1:
47:6b:30:b9:f6:3a:75:bc:43:4e:a0:d1:0d:ae:c4:
7d:5f:44:30:3d:5e:24:20:61:f7:64:95:b5:43:bd:
e0:c2:58:af:08:6d:b3:09:49:17:c2:71:6f:18:b4:
66:a4:38:15:39:57:04:08:eb:80:21:e7:e4:c0:f6:
3f:d4:ce:a9:91:8a:4f:5e:83:47:29:32:eb:51:7f:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:E8:75:C9:7F:37:34:95:1C:09:4B:E4:A3:A8:A6:40:4A:DB:60
X509v3 Authority Key Identifier:
keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:99:4c:34:c1:bd:5d:8b:a5:1e:56:98:9e:df:0d:b8:85:5b:
be:83:44:eb:ec:45:e6:88:95:b6:a4:68:e0:74:e4:c1:6d:66:
7a:cc:eb:d7:58:98:4a:1f:c2:41:df:b4:cb:78:5d:76:dc:9b:
6b:16:fd:f8:b9:7e:41:7e:15:23:55:f7:aa:ca:fc:21:a2:c0:
08:d1:4a:c1:26:f1:f2:bc:03:38:a6:fa:57:80:e0:09:22:d3:
8f:03:63:f0:b3:60:39:65:a1:ab:73:b6:a6:93:84:5d:79:c6:
8a:f4:9e:46:a3:1a:17:25:d3:28:e9:16:eb:cf:3e:c9:b6:de:
ec:59:9b:fd:d3:d9:3c:b8:95:4e:73:8f:44:27:41:8a:dc:70:
e1:2b:86:89:b8:9f:91:fc:54:79:35:75:b0:8e:76:3d:53:e1:
e2:62:28:34:6a:7b:78:42:a7:d3:73:f2:81:08:6f:b0:24:52:
44:e4:3b:3d:db:2e:94:f2:f4:6e:09:07:68:08:30:01:ab:29:
fd:74:41:4c:bf:60:3e:d7:f2:60:fb:bd:da:e8:1f:ae:34:7f:
99:3b:2f:e1:c9:bb:90:5b:7c:ac:44:e3:6d:1a:e7:1b:ec:bb:
d3:88:6b:99:5d:ba:7d:5c:6e:ed:d2:98:8a:0e:47:d3:d1:a7:
9e:7e:b7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:36 2026 by rpki-client