
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json)
Hash identifier: DgxBn8I0rrCZN942dKsZ3tOMeU/rOjKFaitU7Pvzyg8=
Subject key identifier: CB:71:06:74:7D:42:E9:97:64:B2:FA:D5:64:4D:80:47:42:30:20:27
Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
Manifest number: FB
Signing time: Sat 17 Oct 2026 06:57:22 +0000
Manifest this update: Sat 17 Oct 2026 06:57:22 +0000
Manifest next update: Sat 24 Oct 2026 06:57:22 +0000
Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: h87IYmTN3L/RdtpEbBtUtJLj76YHzLf7+V4LQW+2Z6k=)
2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: 9yyOlJOhdq5a9n8HjUs77Doecig0wOxCg0TdaMSwGMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 06:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Validity
Not Before: Oct 17 06:57:22 2026 GMT
Not After : Oct 24 06:57:22 2026 GMT
Subject: CN=6ad31c52-af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:e9:72:e9:da:a4:aa:08:69:2b:7c:c7:11:
0f:d0:45:51:96:10:a9:10:5c:72:52:2b:7a:6e:a3:
c2:b7:73:8b:44:6e:0a:f8:68:92:8d:3c:5c:ce:16:
55:2f:26:0d:52:b4:56:39:0c:2f:83:a6:b2:3e:a0:
f5:94:e2:f5:2b:80:96:28:0b:d5:07:8e:19:91:33:
0e:85:b9:a9:c9:c3:c5:30:6d:f6:30:59:17:0e:d3:
76:26:0f:b3:67:91:96:39:89:b8:13:b5:d4:61:35:
6b:f2:1c:1d:78:4e:02:b4:c5:af:b3:d5:1c:b8:88:
74:1e:d6:7a:e6:19:5f:7c:f7:fd:01:24:15:57:00:
07:8f:b1:70:40:f2:65:8c:5e:e6:85:55:f6:5e:44:
f8:bc:cc:0e:e8:ab:4a:e1:6a:8f:c3:1a:1a:44:6f:
4c:d7:1a:6a:bd:f9:cc:01:67:78:8e:00:0e:81:2a:
00:8b:8c:c4:57:bc:e4:36:2d:85:50:86:1c:9a:f5:
b8:bc:8c:86:85:a6:b6:36:0a:41:24:ac:56:de:3a:
15:7a:a5:41:d2:9b:dc:dc:83:e7:fb:f7:54:33:b4:
a6:77:59:0d:d6:d1:d1:87:26:ec:a4:b2:44:cd:38:
6f:42:38:4f:f7:0b:a6:fd:2b:1b:54:85:77:4e:28:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:06:74:7D:42:E9:97:64:B2:FA:D5:64:4D:80:47:42:30:20:27
X509v3 Authority Key Identifier:
keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:83:9c:75:a1:df:0e:b4:45:7f:cb:ea:9c:6d:19:b7:70:57:
ea:34:3f:9f:28:04:d7:cd:40:1a:82:d8:ff:02:b8:51:5e:e0:
c4:ae:2b:f2:2c:7e:6a:1c:21:fb:a6:0e:e4:0e:b7:0f:0a:ff:
21:2f:8e:63:f4:35:d3:c8:ee:26:29:2b:ae:59:98:d8:96:ea:
af:49:57:17:ea:71:6a:37:8e:8c:97:b2:33:aa:32:17:09:42:
5c:b7:3a:77:2e:9f:b6:38:93:ba:58:05:36:50:e4:70:70:d8:
1e:9e:e6:c2:44:bf:7f:a5:89:88:b5:c2:7d:72:26:8a:06:6e:
f0:61:37:c3:1b:d3:d5:de:48:11:87:28:be:2d:1b:2b:45:35:
9e:59:a2:3a:61:5f:78:01:5f:98:98:bf:b9:45:4f:f5:d7:a7:
25:1a:d3:b7:cc:9c:90:24:14:62:50:ac:4d:82:af:6c:30:6c:
41:f1:86:bc:20:9f:f8:14:e3:4f:ce:db:0c:aa:fb:f5:ec:e6:
34:cd:57:df:fb:55:0a:17:90:05:4c:b6:74:0e:b0:eb:20:88:
a0:f3:68:09:b8:c5:3c:ba:b1:48:fb:c4:a9:4f:58:4d:c8:81:
56:ab:47:f9:49:5a:83:c7:33:ef:9b:f9:5f:53:1f:9b:6a:18:
97:71:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:56:04 2026 by rpki-client