
$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
File: aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json)
Hash identifier: PvkCP/HV3JSmZJM1Kbt8oT4AW7yLEuFdKCRnwEUT1K8=
Subject key identifier: DB:97:3E:A0:81:77:35:38:E4:0E:43:12:06:00:39:F9:E5:D9:4F:49
Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
Manifest number: D2
Signing time: Sun 05 Apr 2026 06:10:11 +0000
Manifest this update: Sun 05 Apr 2026 06:10:10 +0000
Manifest next update: Sun 12 Apr 2026 06:10:10 +0000
Files and hashes: 1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: TY8VMZ28o0zOYSxz0yCeo5GbXdHHtLYnikGHdpu8JTU=)
2: 56AF0502E0F211F0800F01165C6F56BC.roa (hash: J2a7iM0fZLEZAccPI28TD717i8txm6lypswcT4NP6zA=)
3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: YrscevCTgMEXORacALOLXs7H2TVHpxUFXdVBTzVREG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Validity
Not Before: Apr 5 06:10:10 2026 GMT
Not After : Apr 12 06:10:10 2026 GMT
Subject: CN=69d1fcc3-e01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:ff:af:ce:b1:f1:f8:6d:b4:f6:3e:2d:ba:
2b:54:fa:4e:db:a1:02:b9:c8:da:e0:9b:00:f2:a9:
37:cb:bf:10:24:d2:31:76:38:55:ee:7a:df:a6:4b:
d9:92:03:d5:c6:01:dc:e2:5a:e8:34:2f:16:ad:f5:
a5:52:46:95:97:53:1d:2b:dc:b8:dd:06:59:1e:5a:
c2:fb:18:5e:7d:5c:a6:3d:97:e3:a8:fd:04:ee:38:
92:31:0c:15:10:1c:2e:7e:9c:3c:31:22:58:0c:7b:
d9:35:72:f5:2f:ff:6b:6d:a4:75:34:cc:26:6a:0a:
05:bb:70:89:76:3b:f8:fc:3c:bf:bb:53:17:9a:ec:
01:32:98:2f:1c:0c:bb:a5:de:b0:37:57:f5:10:16:
61:1e:93:7b:18:e7:45:8b:2c:47:16:3c:6d:41:e0:
9b:db:f6:c3:79:c3:30:b6:bb:1f:8d:0b:c6:21:04:
28:94:7e:9b:c8:fa:7a:32:59:92:71:6c:cc:80:8a:
27:09:93:29:7f:12:fb:22:89:21:65:4b:ab:79:e4:
01:f5:92:4d:70:9e:ae:a6:c3:16:8c:90:7e:0b:f8:
53:44:3e:37:0d:e1:fa:ba:d9:18:e1:40:57:fa:30:
45:79:3b:a0:9f:9e:c2:21:69:31:34:0f:5e:71:d1:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:97:3E:A0:81:77:35:38:E4:0E:43:12:06:00:39:F9:E5:D9:4F:49
X509v3 Authority Key Identifier:
keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b2:33:f1:39:22:a1:b4:27:64:13:9d:9e:3e:52:0a:8e:c2:
ae:b5:14:b3:0c:ce:bf:70:5e:ed:8d:8c:50:75:b5:b9:36:f0:
19:d9:08:8e:57:7c:08:6f:dd:48:2e:9b:da:5e:70:5c:a8:2e:
6b:45:cc:3b:94:60:36:ad:14:8a:de:a6:29:bb:4e:9d:f5:03:
6b:a5:9d:4e:f1:74:e1:85:39:fc:28:69:67:d3:50:8f:58:7a:
29:b5:33:24:5b:50:a9:bb:1e:b7:08:97:7b:2f:d6:03:ca:b6:
7d:b7:27:db:75:6b:e2:52:d0:d3:5b:9e:12:d5:07:f1:f8:58:
a2:38:80:fd:79:a3:07:57:b1:3f:a3:54:8d:09:4c:72:6f:93:
c4:01:98:d4:d8:cf:f0:fd:ef:31:09:0e:d6:21:a1:b4:8f:17:
84:74:e2:81:0f:3c:99:c4:aa:51:5c:e7:48:b1:1e:c4:9d:39:
d9:2b:b6:f7:4f:2c:c7:44:97:0c:42:a9:f4:86:be:b5:9b:06:
a3:7f:3d:20:8b:bb:c8:f3:7f:f1:2b:71:19:5c:d8:7c:9e:da:
ff:17:9b:8e:6c:c8:73:e2:40:3c:5f:b5:7e:d1:08:5b:56:97:
39:c7:26:99:62:00:53:79:56:3a:7e:ed:35:fd:5b:50:da:24:
cb:01:e9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:15 2026 by rpki-client