
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json)
Hash identifier: 4LCKRnph2TpHsL8I0uMYVYugYvfRS58shrTdkExBFGA=
Subject key identifier: 40:68:63:C4:B9:2F:5C:6D:D4:3D:81:5F:8E:77:35:1A:89:BC:6C:DD
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial: 0B60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
Manifest number: 0B4E
Signing time: Sat 04 Apr 2026 19:04:21 +0000
Manifest this update: Sat 04 Apr 2026 19:04:20 +0000
Manifest next update: Sat 11 Apr 2026 19:04:20 +0000
Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: vTYdAAClF7MmGSYxADWORvLMPDYsK3AdGztbah9K0lE=)
2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: o6fRayD/nqN2dEBUcuypm1nutFG8wp7LbMA0ZmrlfaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2912 (0xb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Validity
Not Before: Apr 4 19:04:20 2026 GMT
Not After : Apr 11 19:04:20 2026 GMT
Subject: CN=69d160b4-5c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:ea:dc:a7:ec:c4:0d:2f:e1:9c:38:70:c8:
dc:62:2d:76:72:42:63:bc:e8:4f:3c:3d:80:5e:f4:
a6:85:21:33:63:de:fc:4a:f7:0e:ed:cf:5c:2c:64:
4c:c9:20:48:b1:96:3b:55:28:be:a2:da:75:bf:f6:
51:6e:11:eb:c9:2d:fd:28:d8:6b:14:1b:82:ad:a0:
bf:cf:61:eb:f0:3d:10:53:7b:06:38:51:dc:b8:2b:
d5:e5:6b:27:a9:c6:29:32:0e:5a:c4:f6:ab:5b:bc:
1f:5a:56:0c:ed:d4:8d:d2:13:7b:82:e2:a9:61:cb:
48:90:80:aa:24:e3:fc:41:df:ed:e8:f2:a7:aa:80:
a8:38:bd:2a:95:bd:a1:ea:f0:6b:e5:03:c3:9c:c1:
86:63:af:35:7f:e4:ee:5c:bc:9b:e4:2e:a2:21:05:
be:46:09:66:f5:30:b7:82:a6:c7:97:f1:9e:38:70:
00:93:95:39:9e:53:50:ad:38:70:8a:b7:c4:36:fe:
bb:72:eb:d8:5e:42:24:19:f1:82:7c:6d:50:60:93:
32:dc:67:c8:47:26:2d:4f:ea:c5:37:92:4b:82:b4:
98:a5:8a:fe:2e:75:4e:89:68:ae:7e:c9:40:78:7b:
d0:22:39:54:09:07:8b:de:8b:ae:d0:7e:fc:5e:31:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:63:C4:B9:2F:5C:6D:D4:3D:81:5F:8E:77:35:1A:89:BC:6C:DD
X509v3 Authority Key Identifier:
keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:1b:b0:e5:3c:d6:32:01:98:3a:89:5f:50:07:85:81:af:
f0:89:14:e0:7a:d3:64:02:9e:2b:e5:33:c3:7c:d8:28:ea:ef:
0b:e7:c3:c9:69:83:88:7c:fb:5d:c1:21:30:5d:a4:1a:69:22:
84:89:d3:40:c9:45:eb:4d:18:0c:84:d4:36:c4:ea:b4:92:ce:
56:e6:fb:cb:c0:83:ee:f0:51:c0:89:6c:9b:64:83:1a:42:43:
5b:b0:a9:40:73:da:52:0c:99:57:c7:7f:ce:63:14:b6:f2:55:
78:44:5e:e8:98:f4:bc:a6:90:83:e0:6e:57:59:89:8d:3b:11:
ed:b6:31:63:57:f6:db:1d:e8:3d:10:b1:3a:ba:41:f5:41:08:
67:91:11:f2:64:6f:db:57:7a:cd:27:67:76:6e:6f:14:2d:5d:
5f:6b:32:82:0a:47:85:b7:78:b9:9e:30:81:e6:c2:f8:21:26:
b5:93:be:e2:0a:5b:2b:c7:49:f1:84:ff:9d:69:a2:22:0e:10:
cb:eb:1f:2e:a4:40:9a:f5:77:10:36:08:39:9b:05:5f:9d:46:
2b:44:e3:4c:88:84:51:71:30:f4:93:10:3f:13:54:dc:4f:f2:
b6:da:cb:c0:89:1b:00:3f:dd:a7:23:95:ae:37:9b:e4:c0:41:
88:9d:58:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2
QTQyMjBGRDAwHhcNMjYwNDA0MTkwNDIwWhcNMjYwNDExMTkwNDIwWjAYMRYwFAYD
VQQDEw02OWQxNjBiNC01Yzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFjq3KfsxA0v4Zw4cMjcYi12ckJjvOhPPD2AXvSmhSEzY978SvcO7c9cLGRM
ySBIsZY7VSi+otp1v/ZRbhHryS39KNhrFBuCraC/z2Hr8D0QU3sGOFHcuCvV5Wsn
qcYpMg5axParW7wfWlYM7dSN0hN7guKpYctIkICqJOP8Qd/t6PKnqoCoOL0qlb2h
6vBr5QPDnMGGY681f+TuXLyb5C6iIQW+Rglm9TC3gqbHl/GeOHAAk5U5nlNQrThw
irfENv67cuvYXkIkGfGCfG1QYJMy3GfIRyYtT+rFN5JLgrSYpYr+LnVOiWiufslA
eHvQIjlUCQeL3ouu0H78XjENZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBoY8S5
L1xt1D2BX453NRqJvGzdMB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3
QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi
VzZOWXlrQnUyV0pxUWlEOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW5IbsOU81jIBmDqJX1AHhYGv8IkU4HrTZAKeK+Uzw3zYKOrvC+fDyWmDiHz7
XcEhMF2kGmkihInTQMlF600YDITUNsTqtJLOVub7y8CD7vBRwIlsm2SDGkJDW7Cp
QHPaUgyZV8d/zmMUtvJVeERe6Jj0vKaQg+BuV1mJjTsR7bYxY1f22x3oPRCxOrpB
9UEIZ5ER8mRv21d6zSdndm5vFC1dX2syggpHhbd4uZ4wgebC+CEmtZO+4gpbK8dJ
8YT/nWmiIg4Qy+sfLqRAmvV3EDYIOZsFX51GK0TjTIiEUXEw9JMQPxNU3E/yttrL
wIkbAD/dpyOVrjeb5MBBiJ1YdQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:04 2026 by rpki-client