
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier: 0cNPTO4T+2KdbmZqzlzA7kRdxc+WNdDuROKQB9p6yLo=
Subject key identifier: 98:CC:A8:2F:C8:34:34:88:55:FE:9F:82:8F:45:8D:5F:CD:FF:D3:D3
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number: 025B
Signing time: Sun 05 Apr 2026 01:53:01 +0000
Manifest this update: Sun 05 Apr 2026 01:53:01 +0000
Manifest next update: Sun 12 Apr 2026 01:53:01 +0000
Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: 20FWmNb0kB6N3bfKbfEImIJWj36MC66yvwQuenD0knc=)
2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Validity
Not Before: Apr 5 01:53:01 2026 GMT
Not After : Apr 12 01:53:01 2026 GMT
Subject: CN=69d1c07d-2c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:c8:c8:d7:6c:40:e9:e7:24:6d:75:fe:1b:
38:5d:22:02:82:a4:57:e4:ad:a2:01:3d:b3:31:3f:
d4:9d:cf:9d:c0:7f:60:28:2e:42:a0:ff:df:61:cd:
5b:1d:66:0b:81:e8:d9:4c:20:23:57:d9:f2:17:cf:
5b:81:42:e5:5b:61:b2:e1:b6:15:01:d6:48:22:a1:
98:71:56:70:f5:e8:97:60:58:9b:29:19:c4:7a:a6:
f6:75:b4:00:fd:c7:43:b6:c6:35:9e:8d:ed:a4:d5:
7b:6b:16:a0:67:e8:a8:84:fe:74:94:ef:8b:e3:8a:
6f:1e:f5:89:99:16:82:6d:37:5a:49:21:3b:42:6e:
6c:ab:5a:b4:fc:69:cc:79:9d:4c:af:7c:45:b3:00:
a1:21:25:f1:24:4d:4f:ce:4d:66:18:25:54:95:71:
78:7a:2f:37:24:3a:f5:23:81:a8:61:ba:f1:b9:8c:
50:21:34:03:cf:b8:1b:f2:92:da:57:6c:0e:8a:78:
03:f2:1f:27:07:2e:12:86:ef:c4:63:63:64:50:14:
8f:4d:29:a8:1d:31:f7:01:63:3c:90:d6:61:09:ea:
b9:b1:da:33:bc:16:a8:73:09:ae:ee:ea:9b:b0:3a:
2c:05:38:a5:49:62:1f:61:5f:9b:4c:43:16:a7:e1:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:A8:2F:C8:34:34:88:55:FE:9F:82:8F:45:8D:5F:CD:FF:D3:D3
X509v3 Authority Key Identifier:
keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2e:db:7f:40:ab:4f:30:a6:a9:c0:cb:0e:6c:57:5d:ce:a4:
81:37:0e:80:a7:7d:ff:22:e9:48:67:ee:1f:61:ef:f4:d0:7b:
4f:f4:c9:7e:4b:7b:fd:82:b6:f6:1e:dd:dc:2c:1b:2f:cd:2a:
45:26:11:10:62:dc:72:75:4c:7c:a4:6b:b0:fd:ed:61:be:9c:
91:76:f9:50:91:f9:5c:0b:fa:e6:4f:19:ea:65:b1:88:eb:c3:
7d:e0:6c:95:b1:d8:c3:36:b7:1e:8a:0f:3f:43:f8:57:3b:23:
21:1f:73:f4:5c:60:27:f5:3a:56:ac:1b:c1:29:82:b0:8d:71:
1a:78:5b:c5:39:e4:c9:3a:32:b8:c5:f6:ba:db:cc:f9:09:16:
fe:38:45:d9:b3:7f:46:e8:39:90:df:8c:32:cb:dc:c1:12:7f:
81:ec:b0:ff:a8:33:43:c2:36:66:83:1a:9c:1a:95:47:9e:8d:
e8:27:99:b4:3c:db:b4:b2:ba:54:5a:c6:c2:c7:13:9d:12:9b:
c8:d3:6b:7b:20:15:bb:9e:52:a5:ea:c1:da:cf:d8:2b:d0:52:
d6:56:14:cb:25:db:4b:4d:bd:00:c5:fc:99:3c:53:66:82:35:
f0:49:7f:e9:df:9f:37:a8:d4:60:b5:23:bb:e2:7a:c5:61:ec:
d9:28:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:06 2026 by rpki-client