
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier: b9+0im/UbF/YQR9/DGjcylU01PhPgZCKmAqEwxQrmYQ=
Subject key identifier: B3:53:8A:54:A9:40:9C:BF:57:7A:74:D8:34:CB:1E:0D:36:C2:E2:2D
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number: 024B
Signing time: Sun 05 Apr 2026 02:04:00 +0000
Manifest this update: Sun 05 Apr 2026 02:04:00 +0000
Manifest next update: Sun 12 Apr 2026 02:04:00 +0000
Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: l86oFbx9UsNmayVXlqh7RRe4H66A2Ns/qcW2vVvWBdY=)
2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: Q3iqUPNxpMUTGIgTwjjfM3K9Qqme00bVcKDIrn27a8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Validity
Not Before: Apr 5 02:04:00 2026 GMT
Not After : Apr 12 02:04:00 2026 GMT
Subject: CN=69d1c310-ddee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:9e:84:59:33:52:4b:90:9e:ec:61:d8:35:
37:27:97:f4:db:b7:f1:19:c8:95:9f:f0:e0:d2:75:
6c:2d:cb:7d:ba:b5:fc:57:95:19:e3:f1:f2:a7:9a:
67:fb:bf:89:0d:f1:32:45:01:41:52:e3:da:d8:ee:
77:7f:6c:5a:46:7f:13:b1:a6:a0:9e:0f:e4:d4:47:
51:44:85:2c:36:e9:3e:c5:58:ae:62:59:eb:23:00:
7b:8e:3a:02:cc:94:b1:6e:67:a5:fb:0e:fa:ec:bd:
05:f9:1b:a1:e1:cc:bd:b2:df:a6:b7:6d:17:cb:f7:
68:3f:34:d6:f1:e5:38:11:59:f4:06:31:dc:b9:67:
64:dd:01:8c:36:78:49:08:a6:ff:2e:73:76:11:94:
b2:0b:56:f7:da:c5:0c:b7:38:be:57:57:34:14:64:
18:ab:bf:79:0f:57:22:0d:8c:c5:ee:6a:70:ea:6d:
60:b9:00:11:21:8e:af:18:dc:36:eb:38:26:48:e4:
75:f9:8d:ae:f9:48:9c:05:f7:d2:1b:81:a9:01:b3:
ff:f6:71:65:44:e7:6f:97:39:e2:5b:f5:55:17:e9:
11:e4:f3:e8:7d:aa:89:a2:d3:6f:56:95:94:4f:46:
f1:04:53:3b:7e:f4:90:f9:5b:5e:48:fa:8e:14:eb:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:8A:54:A9:40:9C:BF:57:7A:74:D8:34:CB:1E:0D:36:C2:E2:2D
X509v3 Authority Key Identifier:
keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5d:3e:be:64:18:d6:6c:44:0d:96:a0:49:73:0c:34:8f:59:
cc:fd:bc:4b:17:fe:4a:d9:bf:f0:1d:7b:45:e2:c2:a7:e0:13:
f9:53:21:74:32:59:b6:5f:9b:0f:73:4b:86:4f:f5:36:9b:40:
08:04:f8:41:9d:aa:53:7a:f7:d6:8c:ab:01:b5:f7:6b:76:36:
cf:40:1f:9d:9e:fe:9b:9b:ed:85:b2:32:bd:38:f6:56:67:b7:
a1:ee:dc:89:2d:16:b1:ad:d1:f7:51:ad:de:88:17:3a:32:59:
0a:0c:d3:5c:c8:03:a0:e7:ee:46:7c:df:fd:f8:d1:f4:32:aa:
dd:6d:40:05:50:28:40:62:f4:80:2e:09:41:ee:ec:cc:3d:33:
de:d5:28:84:0c:f8:ec:46:b2:0a:51:51:bf:ae:66:7d:69:90:
89:0b:23:de:be:1f:02:bd:a5:13:77:29:e6:c0:4a:c3:60:c1:
50:a7:ee:5f:c7:21:ff:80:47:f3:08:10:93:cc:d1:30:80:91:
8d:d5:5d:b4:36:2c:06:a4:50:7d:1f:64:6a:9d:3f:26:22:fb:
a5:e5:18:52:0d:22:8e:29:fa:1e:f4:e1:ec:ec:c1:5c:7b:34:
9f:67:6f:54:da:d3:58:e5:7d:7f:64:ee:1c:af:61:fb:c6:5f:
79:d2:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:04 2026 by rpki-client