
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json)
Hash identifier: falwcD4r+r++SXevi41QmMUp0SarCms82XXxaM1Gcjc=
Subject key identifier: DF:4A:CA:9D:F2:10:CE:97:CF:EC:AF:DE:DE:DD:C5:88:45:E8:07:72
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
Manifest number: 0257
Signing time: Sun 05 Apr 2026 01:57:40 +0000
Manifest this update: Sun 05 Apr 2026 01:57:40 +0000
Manifest next update: Sun 12 Apr 2026 01:57:40 +0000
Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: BazeuKraGa0NC6QMK50DsIM3A1KPXM11ZZOzXmv8maM=)
2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: knFwvMjPgbAwZWQ4tl74NJH9Eoq0c8p4Rxp+Mu8Ms4k=)
3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: rF7SOFEvy817x7nCvoQTwE931VplbOd/lPkpG4O4yR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Validity
Not Before: Apr 5 01:57:40 2026 GMT
Not After : Apr 12 01:57:40 2026 GMT
Subject: CN=69d1c194-c975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:bb:10:0d:7f:07:3a:e1:db:25:0b:e5:c4:
b3:e6:82:90:e3:14:e3:59:ea:bb:b0:38:6f:fd:9d:
8b:f9:37:e0:70:78:4f:a8:25:9d:54:a0:70:7f:7d:
8c:da:dc:47:b8:eb:a4:6d:ea:4f:b1:6e:aa:bf:f2:
ce:9a:d7:28:a8:2b:1b:7a:9d:ec:06:d0:0e:9b:1a:
eb:86:12:f3:e3:7a:7c:a3:41:a2:60:ce:e4:30:cf:
e6:1d:bd:34:ac:f5:f0:d9:ac:2c:9a:4c:8f:ca:1e:
82:63:61:d2:60:2c:bc:95:8d:03:f7:bf:d7:4d:f0:
b7:19:dc:9b:73:e2:7d:f0:ca:85:76:8a:d9:cc:52:
ec:83:4b:e5:f2:d5:2c:0e:d0:80:58:9b:2a:95:be:
c6:e8:e3:54:13:ad:f0:d5:00:c6:81:a6:f9:a0:8d:
df:91:46:4d:04:76:df:47:bb:37:4e:e1:64:0a:92:
7c:4a:38:8c:81:f4:53:81:dc:4e:fc:79:37:ea:1b:
1b:8c:90:37:80:dd:fa:a9:1b:85:79:2f:4a:8d:73:
a5:c9:b6:47:8a:71:a8:cb:fd:53:d0:b7:1b:3c:94:
8e:78:9e:72:d8:4c:38:62:95:7e:42:e6:bd:12:10:
b4:fa:41:2f:d6:04:5c:fe:4b:a4:40:85:d9:84:59:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4A:CA:9D:F2:10:CE:97:CF:EC:AF:DE:DE:DD:C5:88:45:E8:07:72
X509v3 Authority Key Identifier:
keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:98:62:48:2e:ef:d0:d1:72:e6:c5:c8:37:92:06:2a:a7:59:
02:86:ea:5e:28:18:d1:96:1f:4b:2e:45:f5:6e:3d:1d:8a:1a:
0e:c5:b1:04:9d:a3:68:db:ff:27:95:d7:c3:c0:a3:e1:d0:de:
55:1a:e8:2e:40:4e:d5:c4:f0:d5:77:aa:cb:03:44:0c:30:c5:
02:2d:01:09:39:83:5b:67:41:12:4f:06:9a:6e:b1:10:65:9f:
97:2f:4b:b4:c9:7c:b6:c8:08:81:85:95:2a:03:6a:84:78:d4:
da:28:96:cc:98:74:a6:a6:bd:01:46:7f:15:25:53:d5:b4:82:
9d:b0:3d:09:ad:0b:f9:1a:ec:fb:75:99:bb:a1:0b:cc:b0:4a:
58:3b:6c:32:1d:06:42:18:f7:92:67:ae:4e:4a:45:a0:83:bd:
fc:0e:3a:2b:7c:c3:cd:70:8a:7e:34:7d:db:fe:e0:f4:a1:07:
a3:55:75:b6:34:d7:48:8b:dd:26:bc:24:db:27:03:1d:92:14:
e0:72:06:5a:80:a6:31:ca:97:5a:50:8d:1a:93:84:30:a0:25:
09:ec:0b:6c:7c:01:42:ff:e3:e8:96:8f:b2:7d:f1:e1:7e:42:
4d:16:54:1b:ea:bc:dd:d2:20:c9:af:25:2e:81:5d:c1:68:47:
08:4b:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:22 2026 by rpki-client