
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json)
Hash identifier: M6KVPquL8phT6TN2bcepX87avcbTzNuyg4WGN94E9MI=
Subject key identifier: 45:32:21:0D:8A:16:3C:81:B3:79:FE:18:A1:D8:54:26:08:DE:46:4F
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
Manifest number: C7
Signing time: Sun 05 Apr 2026 06:23:04 +0000
Manifest this update: Sun 05 Apr 2026 06:23:03 +0000
Manifest next update: Sun 12 Apr 2026 06:23:03 +0000
Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: h7PqEwuJ4tqjkeaSzB1FMDCFl2/xOAEJZhltUCzPUnU=)
2: 73667C2ED76B11F09495728677D3641D.roa (hash: V5i08X4CK/ySQM8ao3lc9wXtGA+OEmNuAMXzfvbcaYs=)
3: FA9003D2D76B11F095EF502678D3641D.roa (hash: lTioF3NNwOrm4Tz3PBkQrTdyGh1gsMsIDRrDa6o4vMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Validity
Not Before: Apr 5 06:23:03 2026 GMT
Not After : Apr 12 06:23:03 2026 GMT
Subject: CN=69d1ffc8-0d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:24:25:de:b3:55:3e:20:66:83:5b:98:41:
c9:c4:12:58:35:ef:b0:02:97:7a:ef:92:b3:06:2e:
b7:0d:50:b0:b8:de:01:7c:c2:5e:b4:8f:5d:78:b4:
43:2d:0f:85:01:26:ad:86:fe:d7:a3:fe:22:3b:6d:
3e:d6:2d:47:30:2f:f9:04:cb:66:b8:0a:e2:77:9b:
c0:e1:b6:08:3e:c6:eb:89:db:bf:97:95:83:bf:6f:
a4:e6:35:8c:96:ae:01:63:19:f3:6a:2e:c9:e0:5b:
53:39:4f:28:e1:e4:56:3b:72:b3:d2:26:4e:a5:b4:
63:a2:91:d8:68:09:ce:4a:af:c6:08:cc:fd:42:b3:
6d:c2:c4:90:7e:54:69:6a:40:bf:0e:9c:e2:a2:b6:
dd:47:c7:ce:af:24:69:a6:df:49:46:b3:b7:99:75:
b9:15:b8:46:5d:ea:d5:a1:f9:1a:5a:64:6f:7e:55:
bf:3b:dc:cb:a5:b6:58:ac:eb:98:75:ef:f3:cd:bf:
f6:19:8b:a2:df:d1:66:43:ba:ff:d5:f7:cf:77:ca:
b2:e6:1c:4e:f3:e8:49:a2:af:a0:8e:83:e4:46:af:
d5:85:a7:cc:66:91:eb:e1:d5:20:c4:c6:9b:07:68:
74:ee:a1:95:31:4a:70:66:80:a2:9f:b6:6e:21:69:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:21:0D:8A:16:3C:81:B3:79:FE:18:A1:D8:54:26:08:DE:46:4F
X509v3 Authority Key Identifier:
keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:92:90:7e:7e:b3:e5:f4:56:b7:17:e9:77:2c:90:e9:4e:a6:
7c:92:46:d7:50:3c:ea:43:bf:b2:3f:98:c4:f0:42:10:e4:2a:
15:63:08:71:be:07:7c:b6:5e:3c:b7:33:29:86:cb:2f:7d:89:
86:08:d9:df:f1:9e:28:b4:16:fd:04:9e:ea:6b:fb:2c:0d:20:
20:6c:4a:1d:e4:2d:e5:2a:d2:18:57:a6:37:9f:da:b9:96:d3:
26:3a:54:52:54:08:08:3b:a4:9b:8b:35:a2:fd:6a:03:97:a9:
d6:dd:ad:a7:7c:c6:b5:d4:cd:64:ae:60:10:5e:c9:93:b3:c3:
0c:31:fe:69:b2:02:71:cb:43:d8:e2:cc:fe:90:68:9d:d4:f5:
be:ab:c6:86:36:35:b5:8a:9a:0a:86:b2:12:18:82:47:f6:5d:
10:68:4a:d2:98:aa:c6:2d:8a:22:ae:6d:e2:a8:a7:77:24:75:
45:8d:40:8c:e1:a4:8f:d0:81:ad:0b:35:5c:61:b4:36:e0:3f:
a7:24:be:9f:89:87:fa:23:13:9a:d4:86:59:b0:37:29:4b:c3:
a4:f2:9c:4b:b2:fe:64:79:16:43:f2:55:f4:25:5f:c4:7e:b0:
68:89:2d:aa:93:b9:57:ea:76:49:49:f8:73:fb:bc:b7:e6:7b:
30:19:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:58 2026 by rpki-client