
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json)
Hash identifier: gg187GLkoEy1avDE5b/uYVswVlFaMeEIodSNVtq7jW8=
Subject key identifier: DD:E9:C6:64:EE:E7:62:F7:C5:8C:B3:7D:38:DC:BA:E4:E4:F0:6C:A2
Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA
Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
Certificate serial: 063C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
Manifest number: 0630
Signing time: Sat 04 Apr 2026 22:34:24 +0000
Manifest this update: Sat 04 Apr 2026 22:34:23 +0000
Manifest next update: Sat 11 Apr 2026 22:34:23 +0000
Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: 0MbtrctCGUNltzJh+gPbkvTV5czs802c/HfJzpNyaiE=)
2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: WcftFva1gcea7hmA7H8a9I1dKGWiCBj9X3AHkNvPmMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl
rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
Validity
Not Before: Apr 4 22:34:23 2026 GMT
Not After : Apr 11 22:34:23 2026 GMT
Subject: CN=69d191ef-7c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:e2:e5:a2:c3:f2:bb:da:73:d7:d2:2d:b7:
75:98:0d:8b:12:72:8e:ac:05:b3:7f:17:1a:98:37:
3f:ea:29:ae:6e:62:0f:b1:61:71:58:67:a3:e2:69:
56:4e:f9:21:44:f0:7a:3b:bc:e5:a6:4f:00:79:5e:
0e:93:3f:66:47:2d:e1:df:f8:38:ab:06:9b:a4:d5:
4d:00:dc:86:15:15:f5:cc:d2:54:6d:40:fa:58:f3:
a8:14:27:ba:b8:76:5d:e9:d9:05:ef:ad:f4:94:34:
ff:0b:12:68:53:00:82:43:e6:61:62:7a:24:94:c7:
6d:e3:bb:c2:b1:21:e7:e3:41:bf:1e:ed:7f:14:a5:
ab:f9:6f:8c:32:18:8c:06:c8:57:b6:b5:9e:2d:2f:
93:9e:fd:73:f8:23:f8:34:aa:ff:31:04:d6:64:b9:
1c:3c:c3:6d:70:29:4c:10:b5:4f:ee:88:66:e4:be:
f1:6e:0d:16:5d:c8:7b:5e:ee:1b:1b:2c:6e:31:41:
da:41:d9:c6:1e:18:8e:3f:08:8a:a0:30:e7:e9:87:
7d:76:ba:3c:a5:62:d8:33:ae:35:d5:99:ea:a1:ee:
91:c4:8b:c7:f0:62:32:56:4f:26:ed:7f:bc:3a:e2:
df:e7:1a:ae:3a:75:28:1d:a6:24:4f:82:63:7a:1c:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E9:C6:64:EE:E7:62:F7:C5:8C:B3:7D:38:DC:BA:E4:E4:F0:6C:A2
X509v3 Authority Key Identifier:
keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:86:c6:b4:e2:38:56:73:6c:50:0c:0e:b1:05:a3:24:ce:5f:
b4:34:83:25:03:a1:2c:59:50:e8:0d:12:c9:88:07:fc:a9:b0:
aa:29:e4:5e:f9:9a:5c:20:ad:ec:aa:ed:5c:bb:95:d1:77:43:
72:a1:48:7b:e4:16:f0:f0:31:13:7e:c8:56:a6:4a:42:ca:a0:
23:d9:3d:cd:4c:74:55:a2:97:41:56:b0:9d:77:b1:a1:b7:c4:
37:15:48:98:cc:a6:84:49:33:59:05:ee:8b:9f:a5:2d:66:cf:
e5:1b:60:0c:1a:cc:4c:e2:7c:fa:61:6f:f5:a7:07:fb:4f:79:
ff:64:9b:cb:da:96:65:b7:f1:a0:cc:16:be:76:0e:00:53:41:
47:ef:bd:b9:cb:fa:52:c3:36:24:36:4c:0c:6c:f5:da:bf:be:
43:5b:d1:c2:54:39:3c:c8:bf:60:a1:d6:35:72:d2:63:06:c0:
19:86:aa:cb:9c:1d:7d:e4:be:8c:6b:75:70:0c:a5:cf:c9:d1:
e0:43:ad:e6:d9:d3:70:6b:c2:7f:b3:20:9e:a2:ec:de:d7:ed:
15:cf:cc:b4:87:d9:76:53:00:46:4b:54:4d:18:ae:e7:0b:c7:
e6:16:49:9a:60:63:2c:b4:ff:f8:e6:67:f3:76:54:22:aa:e1:
6b:c2:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:06 2026 by rpki-client