
$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File: QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier: A97Kdxur10rG9M1gInPCI6RdOMRMrI4d9QYG8XVPntw=
Subject key identifier: 56:67:07:A7:7D:4C:60:07:41:D7:6E:4F:2D:BE:65:F4:33:72:6E:69
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer: /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number: DA
Signing time: Tue 03 Mar 2026 06:12:33 +0000
Manifest this update: Tue 03 Mar 2026 06:12:32 +0000
Manifest next update: Tue 10 Mar 2026 06:12:32 +0000
Files and hashes: 1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: sR8rO1odtq4vTuKD1WVuDMPeFgIcunp4BCD9/6P7Xwg=)
2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: tykKMCNyhL8YIODSIbVTOG4k2NzgIkvRLrrP9k8uYXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Validity
Not Before: Mar 3 06:12:32 2026 GMT
Not After : Mar 10 06:12:32 2026 GMT
Subject: CN=69a67bd1-aaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:fb:2d:18:3a:59:05:42:6a:35:ed:3b:ce:
86:8f:62:6d:6c:74:18:e9:12:05:71:b8:d5:f5:cf:
ed:f6:62:f4:46:bc:a6:a6:82:20:94:28:33:27:d4:
73:3a:df:3e:fc:1e:61:35:3c:b7:4e:2a:b0:6d:11:
78:fc:65:1c:33:8c:40:30:cd:7f:04:9d:5e:6e:f6:
fe:04:3e:12:2e:0a:11:5d:c2:1f:f6:b9:08:e4:87:
1f:d9:35:f1:1e:76:e0:39:7a:4e:f1:3f:95:10:d1:
36:f6:f0:7c:be:5b:ad:de:b0:51:d1:89:ac:4b:53:
ac:8e:d9:6f:ff:ea:54:43:be:12:97:bf:65:a7:15:
da:61:49:ac:45:0c:a2:4d:f9:45:1e:ac:6b:df:95:
17:5d:df:b9:fd:04:6e:72:61:91:55:11:a1:45:af:
15:90:bc:c2:31:c6:7b:6c:a9:0b:78:88:de:dc:b5:
1d:1c:53:25:24:08:7a:46:f5:46:08:dd:b4:f1:53:
0b:14:54:b7:42:d4:2f:c0:e5:ce:fe:d9:67:7d:8e:
9f:22:6a:02:80:2e:5c:fb:a8:bd:31:0c:e5:79:9f:
5e:51:ea:fe:0b:98:fa:7a:bc:38:e2:d4:dc:3f:02:
85:45:73:a4:aa:12:33:ba:95:77:4e:5b:83:92:79:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:07:A7:7D:4C:60:07:41:D7:6E:4F:2D:BE:65:F4:33:72:6E:69
X509v3 Authority Key Identifier:
keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:94:73:95:07:8a:9b:9a:c1:18:34:6d:78:28:8c:cd:f6:80:
58:82:97:0f:35:6d:54:93:c4:4e:75:09:34:c4:69:0d:1f:73:
08:35:e7:65:07:89:dc:26:9f:1a:5a:4f:e4:d6:ca:fd:f4:f9:
16:ef:8e:44:9a:f3:38:86:1d:db:00:77:71:95:59:93:43:74:
b6:fd:62:eb:59:49:c9:1c:f4:b0:30:01:78:51:9f:0f:cf:93:
4f:b8:d2:1b:80:d0:c9:3d:21:1d:32:e3:d9:52:5e:9f:fa:3f:
b8:bd:53:92:89:01:c4:25:ff:58:c9:fa:5a:fc:ac:26:2d:28:
07:d5:3f:4d:5a:db:01:4a:28:2c:9d:cd:b2:99:13:41:cb:6a:
33:84:cf:59:cd:f5:79:c6:cf:c9:42:13:0e:b4:0c:58:74:d3:
9e:ef:c1:f4:65:6f:f1:84:a7:d9:fd:69:24:66:db:81:e3:2b:
05:84:a7:bb:bf:9c:22:ac:2b:20:44:a4:41:1d:e8:c9:5d:fb:
48:78:c3:cf:32:51:6d:51:30:e9:56:30:57:55:b6:e8:81:33:
bc:08:c3:4d:1d:00:80:7e:83:77:07:1a:19:94:39:aa:a4:9d:
ce:cd:ed:79:b2:35:5d:ac:56:f3:f8:f1:ca:eb:49:ba:7c:eb:
7d:99:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:05 2026 by rpki-client