
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json)
Hash identifier: dEqIzkD5VkiZiX5j/MjnzLU9MqXQKBFHfhdXP7TvhhY=
Subject key identifier: CB:22:59:C4:13:83:E9:04:58:04:10:8C:0D:75:DE:99:E9:44:D9:8A
Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
Manifest number: B4
Signing time: Sun 05 Apr 2026 06:27:40 +0000
Manifest this update: Sun 05 Apr 2026 06:27:39 +0000
Manifest next update: Sun 12 Apr 2026 06:27:39 +0000
Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: 8kTM29RV8WHT+IO7mylzqDhdM8oZWrW8UsEIXns119o=)
2: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: +JT0f4RowYTHW2+9iIjJn3OKbrwqMZFChzHhfXtVmmk=)
3: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: zyN+NtWVyoecz7nyEZ/xUxrT08G/oh3AIX0lScmlkrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Validity
Not Before: Apr 5 06:27:39 2026 GMT
Not After : Apr 12 06:27:39 2026 GMT
Subject: CN=69d200db-4f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:0c:9b:7d:4f:8f:e9:67:02:58:cf:32:0f:
73:f5:01:1f:fc:27:c6:94:29:f1:00:10:6f:1c:e9:
a3:67:b7:9e:4e:55:b6:b8:a3:25:6a:74:2a:43:49:
58:56:46:18:be:4c:da:ae:14:42:73:fa:38:40:be:
3b:0f:09:0b:ff:c0:e3:e2:a3:8f:28:5a:84:04:8a:
54:c8:16:4b:f6:8a:f9:3c:0e:85:25:3e:9e:e0:66:
96:72:80:8a:09:9a:d9:10:a1:05:01:50:8d:cc:33:
15:36:9d:4f:f3:72:f4:91:3a:e2:bf:b8:71:2a:d2:
6a:c3:f9:63:c1:17:a3:4c:1f:9a:85:ef:0b:43:a7:
ec:6f:0a:fa:ce:1f:b0:10:5e:0c:73:a6:e9:10:d7:
f7:75:36:e1:7f:eb:2a:37:ed:b4:d7:8a:22:60:09:
b0:bd:c6:1d:cf:2f:2b:74:46:bb:46:6d:20:62:43:
0b:7f:d8:b1:bb:4a:89:2e:3d:38:04:29:a3:90:24:
f7:0d:11:6d:03:c7:10:1c:a0:98:29:0a:46:d7:88:
3a:90:38:ca:23:32:bb:b2:0e:c4:02:97:db:04:6b:
16:dc:1c:20:08:07:a8:bd:12:8b:55:62:f8:1c:f1:
1d:be:a6:6a:34:50:49:fa:d6:41:8a:74:57:98:fb:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:22:59:C4:13:83:E9:04:58:04:10:8C:0D:75:DE:99:E9:44:D9:8A
X509v3 Authority Key Identifier:
keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:50:02:73:bc:b8:a3:30:df:0d:75:7b:6b:76:90:08:12:fb:
a2:4c:4a:5d:66:63:93:68:57:b6:52:2d:f1:e4:04:4e:30:52:
68:7c:a9:c0:2a:0d:af:36:e5:8b:5e:87:05:36:ac:e0:ca:71:
1f:4c:db:e9:41:b0:cf:db:27:8b:c8:13:3f:78:8f:77:92:d3:
eb:7e:92:84:6c:63:58:2e:66:a2:fc:f3:9c:d6:76:5e:1a:29:
5b:31:c5:33:7f:cb:d0:ed:da:9b:2b:e4:9e:e2:f2:77:be:ac:
95:20:c4:5e:b0:27:3a:70:2c:3d:a3:c6:1e:db:f2:51:26:0a:
2e:66:3c:5b:d8:d3:31:d2:fc:3d:37:04:8d:8a:83:36:c3:ba:
f2:41:a7:53:46:2c:65:8e:a6:e5:ac:87:5d:b6:55:b3:03:57:
6d:e2:27:67:a5:44:c5:60:ef:aa:3a:f3:fd:38:78:67:bb:c3:
d8:23:c8:19:99:2b:4c:4a:8c:05:ba:e1:ec:1a:87:ab:f9:ad:
73:e4:3d:4c:62:af:5b:53:49:b0:56:95:6c:51:c4:4a:eb:3e:
66:ed:03:f6:15:f0:80:32:44:d6:55:c2:ff:6a:90:1e:3a:48:
65:b2:62:26:bc:2d:86:06:b0:5f:e0:0c:76:68:97:69:38:22:
ee:7c:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:15 2026 by rpki-client