
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json)
Hash identifier: 1pmyWNJ7vjSF+UwuTPG9zhLfXSkgFSezEawqT9wPOJc=
Subject key identifier: C0:51:26:B7:30:76:9C:05:38:C9:BC:FD:C7:D7:88:9E:EB:0D:36:A0
Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
Manifest number: 89
Signing time: Sun 29 Mar 2026 07:19:02 +0000
Manifest this update: Sun 29 Mar 2026 07:19:01 +0000
Manifest next update: Sun 05 Apr 2026 07:19:01 +0000
Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: I8HSp/craCbLer83Uc/+d9RO1qxkCU2qzgpPbhHewtU=)
2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: ho1DZ3ql7FH8KEvSw9jHcuNGeNUnpqTSi1kUFzWjPnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Validity
Not Before: Mar 29 07:19:01 2026 GMT
Not After : Apr 5 07:19:01 2026 GMT
Subject: CN=69c8d266-6326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:90:9d:c7:e0:92:39:9a:0c:5c:ef:d4:d5:
d6:33:ec:aa:ce:79:41:c8:45:cb:ea:92:ba:ac:c9:
fd:33:84:57:ad:61:2e:6f:a8:3a:d7:3a:72:ce:c4:
c2:47:f4:26:c7:b8:65:ac:6a:41:8e:69:42:31:c6:
67:01:ce:c9:ff:c5:b7:68:7a:f6:1d:b5:38:35:be:
fa:18:d5:39:df:8c:e3:38:6c:e3:8c:3d:94:21:ba:
da:46:32:cf:9c:a7:35:e4:9e:4d:4b:a1:ae:98:61:
d3:d4:88:55:07:9f:ec:8b:11:bf:7d:b4:37:c0:7e:
39:02:9d:84:2f:7b:6b:0c:2f:d6:44:b2:e2:96:13:
4f:6d:02:86:0a:9d:25:d5:85:32:40:62:89:61:4c:
f2:f4:12:e0:78:b7:95:6a:20:8e:d5:99:72:32:a5:
7c:10:2b:62:d6:c8:3d:91:ce:d2:f2:4b:c0:eb:74:
63:5d:1a:f1:0c:47:f2:ea:7a:e5:43:d3:5e:f5:01:
ef:e5:3a:2f:e7:45:ac:26:a8:b1:fe:30:40:e5:7a:
02:5a:5e:e0:69:e5:5d:90:f7:24:78:8f:f6:66:ff:
e2:b3:7e:0e:59:63:9a:a7:38:09:56:de:ca:49:8c:
24:67:3e:98:18:1b:d0:0d:28:2c:a8:cb:4b:6b:0d:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:51:26:B7:30:76:9C:05:38:C9:BC:FD:C7:D7:88:9E:EB:0D:36:A0
X509v3 Authority Key Identifier:
keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:43:0e:5f:73:76:a4:29:3f:8f:dc:78:30:7e:03:e7:36:aa:
2c:c4:0a:0b:e3:25:65:74:5d:84:1b:8c:0c:d5:d8:53:55:1b:
43:67:07:0c:43:00:e9:8b:32:d4:5d:e0:b9:be:71:44:2b:9f:
1a:6e:13:20:44:8d:4b:c5:22:16:40:cd:72:d2:3f:8a:af:24:
5a:7e:f2:5e:e2:6f:d7:58:1f:3f:c8:87:8b:3a:c2:be:0a:0c:
d7:5b:37:ae:80:f6:5d:87:4a:2b:21:44:62:04:5a:11:e3:09:
cb:d0:91:00:d8:d3:6e:6a:70:16:9c:93:6d:ef:a7:e1:80:dc:
5f:19:10:3c:37:dd:11:62:0e:1f:9c:63:83:90:19:cf:99:2b:
da:aa:80:a9:29:15:8c:b1:93:1a:dd:07:7b:90:b2:7b:e0:e3:
41:44:cd:37:7b:6c:1c:d5:b8:e6:56:5b:ee:c5:c2:8c:01:0e:
58:2f:82:a7:6e:24:2d:82:ff:46:3d:13:3c:e7:a9:e4:57:53:
c8:78:84:dd:2d:3b:79:60:2c:3e:4e:3f:c0:b9:26:8f:ed:a5:
87:4e:7c:5c:be:a8:9f:6f:df:94:f8:b9:5c:ff:96:f9:ce:2e:
0f:89:9a:37:4f:02:af:31:38:8e:40:a2:c1:78:5b:2d:91:be:
70:3a:d0:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0REMDkxMTAvBgNVBAUTKEFCRkRBOUVFNEI0RjRFMUJEOUVBNDdCQkZGODVBRTkz
NTQ5MTAzRTcwHhcNMjYwMzI5MDcxOTAxWhcNMjYwNDA1MDcxOTAxWjAYMRYwFAYD
VQQDEw02OWM4ZDI2Ni02MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArmCQncfgkjmaDFzv1NXWM+yqznlByEXL6pK6rMn9M4RXrWEub6g61zpyzsTC
R/Qmx7hlrGpBjmlCMcZnAc7J/8W3aHr2HbU4Nb76GNU534zjOGzjjD2UIbraRjLP
nKc15J5NS6GumGHT1IhVB5/sixG/fbQ3wH45Ap2EL3trDC/WRLLilhNPbQKGCp0l
1YUyQGKJYUzy9BLgeLeVaiCO1ZlyMqV8ECti1sg9kc7S8kvA63RjXRrxDEfy6nrl
Q9Ne9QHv5Tov50WsJqix/jBA5XoCWl7gaeVdkPckeI/2Zv/is34OWWOapzgJVt7K
SYwkZz6YGBvQDSgsqMtLaw2ssQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBRJrcw
dpwFOMm8/cfXiJ7rDTagMB8GA1UdIwQYMBaAFKv9qe5LT04b2epHu/+FrpNUkQPn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQwOS82N0IwOTQwNjYy
MkIxMUYwQkU1MjhCMUZDNEY5QUUwMi9xXzJwN2t0UFRodlo2a2U3XzRXdWsxU1JB
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FfMnA3a3RQVGh2WjZrZTdfNFd1azFTUkEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REQwOS82N0IwOTQwNjYyMkIxMUYwQkU1MjhCMUZDNEY5QUUwMi9xXzJwN2t0UFRo
dlo2a2U3XzRXdWsxU1JBLWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdEMOX3N2pCk/j9x4MH4D5zaqLMQKC+MlZXRdhBuMDNXYU1UbQ2cHDEMA6Ysy
1F3gub5xRCufGm4TIESNS8UiFkDNctI/iq8kWn7yXuJv11gfP8iHizrCvgoM11s3
roD2XYdKKyFEYgRaEeMJy9CRANjTbmpwFpyTbe+n4YDcXxkQPDfdEWIOH5xjg5AZ
z5kr2qqAqSkVjLGTGt0He5Cye+DjQUTNN3tsHNW45lZb7sXCjAEOWC+Cp24kLYL/
Rj0TPOep5FdTyHiE3S07eWAsPk4/wLkmj+2lh058XL6on2/flPi5XP+W+c4uD4ma
N08CrzE4jkCiwXhbLZG+cDrQ5w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:03 2026 by rpki-client