
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json)
Hash identifier: rRUI1Cmd3TSu0c92A7ql6+Y08cO5G4i15tuLsNmRkZo=
Subject key identifier: A5:49:C8:99:A1:96:B8:4A:78:C0:60:49:A6:22:63:4C:F2:C4:88:ED
Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Certificate serial: 0529
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
Manifest number: 051F
Signing time: Tue 10 Mar 2026 23:06:30 +0000
Manifest this update: Tue 10 Mar 2026 23:06:30 +0000
Manifest next update: Tue 17 Mar 2026 23:06:30 +0000
Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: pi3+PQHvKnIIJQdI8Y4VGFolTTgC9+qGNmD17gTXnhk=)
2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 23:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321 (0x529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Validity
Not Before: Mar 10 23:06:30 2026 GMT
Not After : Mar 17 23:06:30 2026 GMT
Subject: CN=69b0a3f6-3bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:36:f1:45:bd:3f:69:39:18:45:c5:bc:85:
ca:e1:7e:56:c2:db:3b:5b:b8:e2:56:04:c0:81:76:
af:35:5f:a5:87:0a:a1:0c:39:a6:3b:e0:05:5d:90:
ee:b2:9a:dd:5e:e3:da:3b:04:e6:09:d4:9f:db:b1:
eb:f2:6b:a3:c2:98:55:80:a6:97:b2:b3:c2:8a:76:
75:f2:3a:e4:a6:2c:18:bf:01:89:38:e6:da:27:15:
18:45:a3:89:cb:f7:72:d1:9b:9f:93:26:0f:78:86:
ad:7c:bb:f2:ce:42:6a:44:16:b1:73:96:81:f3:c5:
15:16:0c:85:bc:4a:ae:97:4d:f9:11:e0:c2:7a:a7:
2e:ba:58:5b:43:c0:b2:bf:e1:f3:a8:55:b9:4f:d8:
f9:3c:b0:97:f1:da:d2:2b:4f:58:a7:2f:25:c5:3f:
53:12:c9:b0:50:c8:61:c9:ec:9d:6a:a4:f0:95:a2:
cc:2e:ef:c9:ff:52:ec:20:d6:0c:2f:33:f0:69:b3:
ac:c0:5c:6a:b9:ae:78:00:c8:2e:c6:9f:1a:0d:b1:
1b:32:21:28:79:a4:0b:a6:e7:7e:bf:09:ed:55:e6:
95:01:90:5c:14:91:b7:80:05:61:b0:44:31:26:79:
89:dd:4c:33:84:a3:35:19:14:52:24:88:43:99:3d:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:49:C8:99:A1:96:B8:4A:78:C0:60:49:A6:22:63:4C:F2:C4:88:ED
X509v3 Authority Key Identifier:
keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:a0:0b:47:22:ab:13:b3:fc:8b:27:36:dd:df:89:72:05:49:
db:55:16:d7:11:bb:88:73:79:81:2e:9c:ea:ea:37:94:2e:bb:
62:23:cc:76:09:ee:e7:51:aa:59:b7:aa:30:f2:ea:9f:a5:e4:
dd:7d:f6:e6:a4:e7:d7:f8:88:3c:d1:f0:fb:ec:eb:1d:b1:c2:
38:f2:69:ec:b6:c1:f1:44:d4:aa:88:b5:41:46:ff:a2:11:c5:
08:a6:eb:cf:59:49:f9:ed:fb:1e:5f:78:48:6c:69:d3:8f:67:
1a:fc:49:0f:79:c6:5c:de:ac:55:4f:d3:f5:c7:5f:5b:2b:19:
f0:7b:05:46:85:35:42:33:9f:5b:5e:80:bb:a8:39:23:21:bd:
be:1b:84:6c:71:25:68:e0:56:77:05:67:fd:21:4d:f9:5e:7c:
ca:31:c6:d1:3c:f4:93:fc:ae:21:11:a2:c7:cd:7c:f4:69:f3:
cc:e7:8b:79:0a:e7:a6:64:83:f6:de:19:45:3b:dc:57:c7:02:
5f:cd:ba:93:f3:9e:82:41:3d:04:61:e7:a8:99:bc:fd:2d:1d:
38:1e:41:9b:dc:00:81:82:d8:36:a6:55:0c:ac:46:6d:ad:5a:
3b:a7:a6:f2:ba:d6:af:52:45:a6:aa:cd:08:e9:a6:8b:29:79:
e3:b8:ae:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJDRTMxMTAvBgNVBAUTKEFCQzZGQkE0Qjc4NDI4Mzg3OTE5MERDNzE3RTM0QjRD
RDg4MkRBMDgwHhcNMjYwMzEwMjMwNjMwWhcNMjYwMzE3MjMwNjMwWjAYMRYwFAYD
VQQDEw02OWIwYTNmNi0zYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsOE28UW9P2k5GEXFvIXK4X5Wwts7W7jiVgTAgXavNV+lhwqhDDmmO+AFXZDu
sprdXuPaOwTmCdSf27Hr8mujwphVgKaXsrPCinZ18jrkpiwYvwGJOObaJxUYRaOJ
y/dy0ZufkyYPeIatfLvyzkJqRBaxc5aB88UVFgyFvEqul035EeDCeqcuulhbQ8Cy
v+HzqFW5T9j5PLCX8drSK09Ypy8lxT9TEsmwUMhhyeydaqTwlaLMLu/J/1LsINYM
LzPwabOswFxqua54AMguxp8aDbEbMiEoeaQLpud+vwntVeaVAZBcFJG3gAVhsEQx
JnmJ3UwzhKM1GRRSJIhDmT0+2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVJyJmh
lrhKeMBgSaYiY0zyxIjtMB8GA1UdIwQYMBaAFKvG+6S3hCg4eRkNxxfjS0zYgtoI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy81RDc4OTlGNDQw
NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtEaDVHUTNIRi1OTFROaUMy
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL3E4YjdwTGVFS0RoNUdRM0hGLU5MVE5pQzJnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkNFMy81RDc4OTlGNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtE
aDVHUTNIRi1OTFROaUMyZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZaALRyKrE7P8iyc23d+JcgVJ21UW1xG7iHN5gS6c6uo3lC67YiPMdgnu51Gq
WbeqMPLqn6Xk3X325qTn1/iIPNHw++zrHbHCOPJp7LbB8UTUqoi1QUb/ohHFCKbr
z1lJ+e37Hl94SGxp049nGvxJD3nGXN6sVU/T9cdfWysZ8HsFRoU1QjOfW16Au6g5
IyG9vhuEbHElaOBWdwVn/SFN+V58yjHG0Tz0k/yuIRGix8189GnzzOeLeQrnpmSD
9t4ZRTvcV8cCX826k/OegkE9BGHnqJm8/S0dOB5Bm9wAgYLYNqZVDKxGba1aO6em
8rrWr1JFpqrNCOmmiyl547iuAA==
-----END CERTIFICATE-----
Generated at Wed Mar 11 12:32:30 2026 by rpki-client