
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
File: 0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json)
Hash identifier: UyNpETm6X8+UurWt22HEvk1euCg+kaKSogJJ6wkw+Qk=
Subject key identifier: 8A:93:00:ED:B0:D3:E8:75:6D:4E:C7:DA:9D:83:CB:A1:54:0E:0F:16
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial: 06CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
Manifest number: 06B0
Signing time: Sat 04 Apr 2026 22:22:41 +0000
Manifest this update: Sat 04 Apr 2026 22:22:40 +0000
Manifest next update: Sat 11 Apr 2026 22:22:40 +0000
Files and hashes: 1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: 3HT9MuxfajQQioF0/pxHGyYSxflGmGT6AU+C9ERuqiw=)
2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: ODIX3oDpfnNWOwtgKPini7l1bVtlb/9n+o+dXisnTbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Validity
Not Before: Apr 4 22:22:40 2026 GMT
Not After : Apr 11 22:22:40 2026 GMT
Subject: CN=69d18f31-8764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:e2:5d:37:80:4c:90:88:55:d7:b2:10:38:
3a:25:3c:1b:e2:bc:37:3f:c4:53:d9:b6:80:b5:d1:
85:b7:9a:ec:d1:e6:fe:82:bc:f3:5d:00:95:83:b4:
9d:42:22:e7:25:48:d4:d6:96:d2:93:86:74:10:ac:
55:18:a6:df:66:d8:58:8e:a6:af:bb:2c:d8:f3:8a:
59:8c:0e:ca:5d:e9:3b:a4:5a:03:69:03:a4:12:9d:
b2:5c:54:16:3a:63:bb:e1:6b:b3:ce:24:71:c9:ba:
c0:35:e9:26:e4:bf:1a:93:76:37:53:b8:a6:fb:b4:
40:2e:79:59:51:59:0a:16:66:03:28:13:57:90:9a:
ee:cd:d9:9b:96:00:fe:aa:c3:22:f3:4d:09:03:80:
35:e7:ad:b9:a0:c0:91:b2:03:fb:b6:89:e0:a7:21:
3f:ff:64:d6:93:7f:5c:11:29:6a:48:53:d4:a5:95:
dc:d9:80:f7:f3:b1:87:c4:9a:76:a4:3e:cd:4f:f6:
1b:7c:11:32:4f:c4:20:94:bd:f9:10:2f:52:73:c3:
29:fd:56:34:9b:ec:4b:2a:5b:e1:c6:5a:27:ed:85:
d5:58:8a:0d:c4:02:4b:14:7b:78:94:7e:2a:03:7c:
48:05:e7:5b:b6:fd:08:96:2c:f0:d0:52:44:eb:98:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:93:00:ED:B0:D3:E8:75:6D:4E:C7:DA:9D:83:CB:A1:54:0E:0F:16
X509v3 Authority Key Identifier:
keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:77:87:ae:d7:36:3a:7e:5f:79:ac:d0:67:73:15:8e:f8:a1:
b6:91:3f:6b:31:f5:48:35:1a:c5:3a:b0:b0:bb:12:3f:b5:74:
2d:92:ba:d1:a1:e5:71:3a:a2:d2:1b:00:e9:8a:ab:18:69:61:
94:54:19:5c:52:bc:3d:4a:12:a6:bd:0f:05:af:ab:75:2c:91:
26:a7:37:36:09:e7:ab:64:1c:1f:f1:04:7f:5c:e5:b3:80:c3:
ac:be:88:fd:1a:07:69:f8:26:01:36:c9:49:c3:07:2f:93:c1:
b8:3c:10:3f:16:c8:99:3a:98:ef:55:b0:16:47:d2:7f:d9:5a:
52:8a:c9:34:72:28:4f:f6:a6:c0:63:d5:3b:71:78:72:ad:f8:
c2:9d:e1:5e:72:f7:4f:34:d5:3b:6c:a0:cb:cb:76:b0:da:19:
c9:72:cf:b2:0c:3d:c2:2c:2c:a9:df:73:3f:82:e7:f4:9b:20:
ec:59:1b:6a:3f:23:4c:59:98:61:4a:5a:83:58:e1:62:f4:ef:
b3:57:f3:b3:29:2d:0d:40:99:ca:a5:97:49:a7:b7:c8:05:e3:
00:04:08:39:aa:5d:3e:11:d5:92:28:c5:77:f7:39:81:f3:73:
20:72:65:fb:d2:73:f0:5f:0b:06:44:ec:09:61:20:0f:eb:3d:
4f:97:b2:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBODIxMTAvBgNVBAUTKEQyQTA4NzFCQ0Q4Mzc2QzExQThGMDQ5QTM5ODU1QUZD
REIxODMwNjQwHhcNMjYwNDA0MjIyMjQwWhcNMjYwNDExMjIyMjQwWjAYMRYwFAYD
VQQDEw02OWQxOGYzMS04NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA42riXTeATJCIVdeyEDg6JTwb4rw3P8RT2baAtdGFt5rs0eb+grzzXQCVg7Sd
QiLnJUjU1pbSk4Z0EKxVGKbfZthYjqavuyzY84pZjA7KXek7pFoDaQOkEp2yXFQW
OmO74WuzziRxybrANekm5L8ak3Y3U7im+7RALnlZUVkKFmYDKBNXkJruzdmblgD+
qsMi800JA4A15625oMCRsgP7tongpyE//2TWk39cESlqSFPUpZXc2YD387GHxJp2
pD7NT/YbfBEyT8QglL35EC9Sc8Mp/VY0m+xLKlvhxlon7YXVWIoNxAJLFHt4lH4q
A3xIBedbtv0Ilizw0FJE65hvIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqTAO2w
0+h1bU7H2p2Dy6FUDg8WMB8GA1UdIwQYMBaAFNKghxvNg3bBGo8EmjmFWvzbGDBk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi8wQkVCMzc1QUJF
NDQxMUVCQUUzRDQzNDhDNEY5QUUwMi8wcUNIRzgyRGRzRWFqd1NhT1lWYV9Oc1lN
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBxQ0hHODJEZHNFYWp3U2FPWVZhX05zWU1HUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0E4Mi8wQkVCMzc1QUJFNDQxMUVCQUUzRDQzNDhDNEY5QUUwMi8wcUNIRzgyRGRz
RWFqd1NhT1lWYV9Oc1lNR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvHeHrtc2On5feazQZ3MVjvihtpE/azH1SDUaxTqwsLsSP7V0LZK60aHlcTqi
0hsA6YqrGGlhlFQZXFK8PUoSpr0PBa+rdSyRJqc3Ngnnq2QcH/EEf1zls4DDrL6I
/RoHafgmATbJScMHL5PBuDwQPxbImTqY71WwFkfSf9laUorJNHIoT/amwGPVO3F4
cq34wp3hXnL3TzTVO2ygy8t2sNoZyXLPsgw9wiwsqd9zP4Ln9Jsg7Fkbaj8jTFmY
YUpag1jhYvTvs1fzsyktDUCZyqWXSae3yAXjAAQIOapdPhHVkijFd/c5gfNzIHJl
+9Jz8F8LBkTsCWEgD+s9T5eyTQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:02 2026 by rpki-client