
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
File: qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json)
Hash identifier: 4qm2wJZMclpKdxsbY87aYINI7RWLI0OZrEhYry4+MA4=
Subject key identifier: 76:52:7D:EB:82:8F:CB:20:77:6B:03:05:76:99:7C:47:19:28:0D:37
Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0
Certificate issuer: /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
Certificate serial: 08BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
Manifest number: 08B0
Signing time: Mon 02 Mar 2026 02:59:14 +0000
Manifest this update: Mon 02 Mar 2026 02:59:13 +0000
Manifest next update: Mon 09 Mar 2026 02:59:13 +0000
Files and hashes: 1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: rC8pXf3ZgN6wScHky9/aq8fhDVM7angURvzfrSM0s5k=)
2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: P9sNvR/Bcqt0bM7h111r4ZkTzU2KfMVGnEEXn/iTvs0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl
rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
Validity
Not Before: Mar 2 02:59:13 2026 GMT
Not After : Mar 9 02:59:13 2026 GMT
Subject: CN=69a4fd02-117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:02:8e:fc:59:3b:c6:0b:cf:8a:0b:f1:cf:
2b:e4:0e:9d:dc:ee:00:53:a1:bc:95:a0:46:2a:d5:
ba:08:35:f9:34:6d:eb:db:d7:3c:7b:90:0c:f5:e2:
8e:45:55:41:5e:6b:c9:c6:a2:d6:7d:9a:fe:c4:9d:
fe:76:86:a6:3e:55:f4:ad:d2:33:fc:88:05:b5:26:
9b:f1:33:59:e1:73:c4:a1:e2:0a:cd:c4:12:15:6d:
d8:8f:21:17:24:ee:3e:2a:01:33:6f:92:73:74:a7:
74:2b:c8:75:06:04:fc:83:a5:22:de:32:04:91:ba:
2d:b1:2d:17:ab:6a:03:f1:ee:29:97:1d:cd:57:3a:
60:63:90:7b:75:e7:57:11:37:e8:0f:80:2a:5e:f2:
82:04:e5:04:68:70:c1:8d:78:5e:1c:51:1d:12:2d:
31:cd:c0:2a:1b:94:72:47:a5:ac:e6:b1:86:db:6c:
cf:d9:ce:b9:9f:27:8c:dd:01:ef:b9:6a:0c:ed:bf:
3a:f5:55:00:63:02:32:eb:be:be:28:6d:9b:17:07:
eb:31:bb:cc:2a:89:5f:73:24:4f:8f:f6:30:a0:65:
f6:86:76:b3:42:5a:7a:bc:f2:76:fa:32:e9:b5:a6:
12:04:a7:9b:dd:6d:45:8e:d1:d7:4a:fc:65:b7:50:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:7D:EB:82:8F:CB:20:77:6B:03:05:76:99:7C:47:19:28:0D:37
X509v3 Authority Key Identifier:
keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:cc:fe:e4:17:e4:b1:3a:30:57:c7:1c:25:be:f2:a8:20:ba:
f3:16:0d:08:df:0b:77:a2:96:9d:65:e4:6a:cb:4c:61:ae:97:
b5:a5:e1:6a:c4:7b:bc:a0:4d:a0:d0:28:76:ce:d5:f1:31:7e:
2a:63:5a:66:7e:3c:ec:6e:75:6a:ec:c6:cf:19:f9:74:90:3b:
cf:19:29:74:f6:6a:83:be:1f:60:cd:da:c8:98:33:38:82:a2:
d4:12:6e:5b:e5:78:7e:29:2f:4d:34:1a:42:d3:0b:c6:73:7c:
48:54:bb:ac:a1:9f:7b:b8:e0:56:34:ec:8a:a0:2f:ba:2d:89:
92:de:4c:f0:16:e3:fc:d4:2d:c8:51:e7:56:c9:91:52:9b:83:
8f:92:07:ec:87:6e:78:9d:a8:af:e9:d8:9a:41:7e:59:b7:a1:
f4:8b:e5:60:ae:90:34:c5:45:c7:b9:91:b6:a9:eb:1a:80:13:
1a:8d:48:c6:03:3b:32:c6:0d:8e:1a:bc:a0:f3:ab:f6:57:9e:
9a:fc:b7:40:53:34:79:15:71:c3:dd:64:6c:db:38:75:d5:25:
58:82:58:00:ff:61:74:47:a3:1b:cb:32:7a:c3:8e:af:a1:54:
3d:3d:d9:99:43:28:1d:1d:3c:a1:cb:eb:e1:19:8f:8f:d6:18:
9f:ad:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:37 2026 by rpki-client