
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
File: -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json)
Hash identifier: +qdtOjuxFXZNPzDhTHLSD14ogS/tkUg+85cT1w5pwCQ=
Subject key identifier: D3:E7:48:F4:1F:DD:35:DC:F3:8C:54:06:B2:A6:4B:1C:91:6A:E0:C2
Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
Certificate issuer: /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Certificate serial: 0705
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
Manifest number: 06FB
Signing time: Mon 02 Mar 2026 00:09:28 +0000
Manifest this update: Mon 02 Mar 2026 00:09:25 +0000
Manifest next update: Mon 09 Mar 2026 00:09:25 +0000
Files and hashes: 1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: 7RtV0r9Se7mkoa8gvnw3Vc8ENCHF0nR3vsPdQ6CBPjs=)
2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: NGP8ke2DkEB3hYpbUVG6UTVU7Lf4hrBe8aQecdq/b3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Validity
Not Before: Mar 2 00:09:25 2026 GMT
Not After : Mar 9 00:09:25 2026 GMT
Subject: CN=69a4d537-dcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:8c:7e:89:40:59:13:7f:3b:8a:48:d0:c8:
df:65:7d:66:2e:5f:a6:b5:46:a9:93:cf:34:56:9b:
1b:09:0c:b1:1d:89:5a:58:d5:86:8d:e9:6d:29:ee:
ea:9b:57:85:8d:5c:c8:d8:d5:57:12:be:8e:65:26:
cd:51:8e:e3:8a:a9:89:25:be:07:f9:6c:09:2e:0d:
94:8a:64:b1:4b:b2:dd:74:d3:8a:5c:a7:4d:cb:bc:
8a:98:7e:0f:07:6d:fd:50:8c:bf:a8:ae:7a:64:d7:
5d:32:55:45:83:69:19:78:24:d4:66:11:b5:18:3b:
49:5c:6e:27:7c:56:2c:d1:95:02:49:62:bb:3a:53:
3a:d9:f2:f6:b9:f3:f0:21:3e:52:63:f9:44:a4:a6:
84:26:2c:cf:21:ca:66:b8:e4:5a:6a:fa:e2:eb:37:
ce:cd:71:1d:16:80:3f:07:dd:de:22:3f:36:7d:c4:
bb:0c:e4:3d:e8:20:7c:ee:f3:9f:2c:43:d3:5d:af:
ea:af:d0:dc:ce:d3:56:5c:a0:83:99:5b:d6:15:29:
f9:90:c2:15:9f:5c:b6:64:a7:8e:5c:81:4c:c2:88:
51:d2:9a:98:bd:c1:04:f2:96:c8:26:e2:7b:bb:ab:
dd:f4:76:97:9f:ed:91:10:20:30:67:a0:ff:00:0f:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E7:48:F4:1F:DD:35:DC:F3:8C:54:06:B2:A6:4B:1C:91:6A:E0:C2
X509v3 Authority Key Identifier:
keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:3d:92:ee:c9:23:7f:1b:1f:f5:b6:fb:e3:78:77:2e:cb:35:
57:98:cb:0e:49:66:a8:ab:c2:b3:32:89:75:77:b4:83:f1:1f:
79:5c:03:93:4c:5e:07:3b:78:f9:80:f1:a4:e4:ad:24:69:23:
a3:98:e9:13:97:29:63:64:e6:6a:58:96:79:bb:b7:b7:ad:9f:
df:35:e6:b5:df:75:37:db:36:d8:d9:ee:83:d2:8a:2d:0e:ac:
bc:cb:1a:d8:97:72:9f:7c:ba:b8:fe:43:59:4d:df:85:01:48:
c4:55:9a:6c:5b:8b:50:76:17:2a:66:be:6f:70:c2:00:66:d0:
86:7f:33:28:d5:90:cc:f7:0c:ca:d5:6a:ea:0c:55:44:82:47:
5e:0d:31:20:11:97:f4:35:95:38:b7:4b:e9:ad:b9:fd:b7:ff:
e6:7f:e9:c7:cb:8b:f7:23:1e:44:50:81:21:06:41:85:16:82:
e2:80:f7:ff:3d:35:21:1c:c9:92:3a:e3:82:83:a4:d0:ad:bc:
04:25:3d:ae:f4:db:9b:45:14:bf:9d:0a:fa:9a:00:cf:e3:7a:
26:cb:05:83:01:89:9f:48:b9:f8:3e:30:77:ea:9a:5d:12:df:
06:13:bf:33:d1:f9:18:e1:26:42:ea:7c:36:b7:a3:4b:99:17:
30:7f:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:42 2026 by rpki-client