
$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier: MdOs121bU+m1O2ZR3cK0lh8Fon0SGv/KX7wL0fxxtJY=
Subject key identifier: A1:B3:EF:11:D8:70:90:4B:32:96:43:19:A4:55:21:B6:CB:DB:48:49
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial: 17C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number: 17B9
Signing time: Sat 28 Feb 2026 16:37:28 +0000
Manifest this update: Sat 28 Feb 2026 16:37:27 +0000
Manifest next update: Sat 07 Mar 2026 16:37:27 +0000
Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: mzK/900zxhYvMtKTP4QOTwoiHBEESO+uxc5OLtaRYIk=)
2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: lHKNLWfYNI9WQcRtKzmUJBeHs5miXzhGVpBtJH3ux+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6083 (0x17c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Validity
Not Before: Feb 28 16:37:27 2026 GMT
Not After : Mar 7 16:37:27 2026 GMT
Subject: CN=69a319c8-4a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e9:e8:bb:09:21:d3:d8:bc:c7:2b:64:58:d7:
dd:a9:7a:1e:79:c2:a8:db:1c:8e:c3:f2:5f:33:0e:
5e:03:24:81:6f:0e:f5:d8:b9:f9:a2:88:98:57:cc:
8b:1d:ca:91:35:72:f9:67:e7:b7:e8:a5:99:0f:33:
b0:d0:6e:04:a7:f2:42:b8:9b:ef:b1:4d:14:58:21:
fa:a3:17:87:ba:61:74:9b:3f:6a:21:97:a5:9a:71:
8f:85:27:70:df:5d:73:62:87:ad:cb:d8:c1:ed:bb:
a9:85:e9:71:21:3b:ba:4a:5c:cb:97:df:5d:fc:0a:
d4:6e:d6:04:27:ea:0b:78:45:be:b4:c5:42:5a:23:
3c:4e:84:8d:8d:ba:f9:24:e1:91:c0:46:d3:9d:ea:
81:d3:89:65:8c:8b:b3:3a:1c:3c:f4:75:cc:95:3d:
95:37:76:2a:57:83:cb:89:d5:39:0d:15:f5:2a:58:
28:d6:ee:23:63:bc:b3:52:15:c0:65:09:62:d1:cb:
2c:79:32:07:4a:2e:cd:6f:fd:25:48:8e:fc:60:75:
c1:d6:05:61:8f:69:aa:ad:47:07:32:bf:16:12:55:
28:f6:2e:06:2b:85:86:52:c9:d4:cd:f1:90:ad:06:
09:cb:ef:17:33:f5:31:3e:d9:00:23:cc:97:06:51:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:EF:11:D8:70:90:4B:32:96:43:19:A4:55:21:B6:CB:DB:48:49
X509v3 Authority Key Identifier:
keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:54:38:8c:53:66:d8:34:01:44:a9:96:c7:8f:4f:d8:36:43:
9b:e3:5d:d8:a8:a9:37:e8:96:9b:90:5d:b2:5f:72:24:ee:ce:
bd:87:50:b3:48:09:ec:78:4e:54:88:19:8b:df:9d:e0:22:04:
25:d3:c9:0d:96:89:24:84:27:f6:c3:df:14:89:a1:db:93:02:
91:5d:64:f7:ad:17:91:39:45:00:fb:2e:eb:e6:2f:14:a9:f3:
bd:e5:05:67:5b:7c:39:cd:c6:3c:0a:c4:2f:29:04:0a:74:bc:
e4:70:93:f5:bc:9b:7c:08:a1:9a:c0:51:56:ef:3d:2d:ee:f5:
3f:99:bb:3c:c4:d5:70:5c:36:f8:49:bf:ea:1e:36:01:52:be:
9c:00:1e:d4:f7:a2:92:d3:4c:aa:16:82:3a:32:fa:f9:c1:53:
98:a2:5e:aa:55:92:7d:90:41:50:26:8b:3a:50:78:51:00:d2:
3d:3c:d7:1c:c8:3d:b9:ff:18:36:a0:a2:fc:f8:db:fb:93:78:
54:c2:17:b2:b3:bd:ed:77:e5:b5:ad:57:1c:b2:35:7f:0b:c1:
f8:f3:cc:f1:4c:ab:5d:7d:52:85:be:67:fe:6d:12:ba:1e:da:
19:5f:89:51:ed:c0:0c:11:8c:0e:12:f5:da:94:ed:d1:36:28:
c3:f0:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:38 2026 by rpki-client