
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File: qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier: 2ybvQlU05M8Yq6l8MszpSrlh63+Joqwj95emSAOhRF8=
Subject key identifier: 04:D0:B4:79:D1:67:92:CC:6F:6D:AF:6E:9E:E2:1A:B8:E8:8F:27:9E
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial: 08F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number: 08C4
Signing time: Sat 04 Apr 2026 20:14:53 +0000
Manifest this update: Sat 04 Apr 2026 20:14:52 +0000
Manifest next update: Sat 11 Apr 2026 20:14:52 +0000
Files and hashes: 1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: l2nJKep+xR/Ol2ZiuI/I3cPGveEO+g8I03LofWJs+LI=)
2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: tazQVZXkAFkDAuLygNbIRhAUk4EIl5TN/X+HKanbw0o=)
3: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: ANvPyrpt4+aMfuxQf395OtEz75spyBRAaKqNhIGXldo=)
4: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: qLlqNwlaPLdL74Mt7s2Fed23RK/fRGvf/YX6d5A2kU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Validity
Not Before: Apr 4 20:14:52 2026 GMT
Not After : Apr 11 20:14:52 2026 GMT
Subject: CN=69d1713c-b023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:73:75:7c:8d:e8:98:31:94:90:de:d9:5a:
97:b4:5d:71:ab:9a:2f:67:37:b0:95:ae:dc:48:79:
8c:92:8b:e0:bb:33:df:2c:b9:64:ba:18:23:f6:3c:
0a:90:c1:90:33:cb:3b:ef:0b:c3:58:df:3a:19:d0:
a4:89:4c:ea:12:c9:ec:27:36:dc:19:71:50:28:67:
a9:5e:0b:65:d1:6a:7b:68:b4:9a:93:49:0d:7d:bd:
06:aa:00:a2:1f:f5:11:6a:8f:2f:5e:2d:b3:fa:a3:
7d:9c:b4:6b:a8:0b:0b:97:d4:2c:ae:fc:52:18:7f:
3d:1d:3e:b7:e0:58:4f:db:54:22:19:ab:00:e5:d3:
fd:8c:bb:b0:8e:f1:35:65:e2:98:a8:fb:d6:cb:4d:
c3:ea:60:88:69:4a:d3:44:ee:41:74:49:bb:7f:f1:
9f:05:9e:15:34:ab:f7:b1:8f:b2:72:02:bf:f5:15:
37:8f:fd:43:5c:96:28:96:6c:a3:2e:f9:ab:a6:d6:
e0:8c:8a:c4:b0:ac:61:04:58:fe:6d:fa:55:40:98:
4b:5f:ac:62:ef:62:7b:99:c7:0e:2f:7d:32:81:9a:
50:e6:46:17:72:cf:0c:bc:35:41:d5:c5:49:90:4b:
11:00:48:0e:ca:33:ac:b7:1d:14:8f:9a:80:93:f4:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D0:B4:79:D1:67:92:CC:6F:6D:AF:6E:9E:E2:1A:B8:E8:8F:27:9E
X509v3 Authority Key Identifier:
keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:71:5c:96:34:b3:01:33:94:a1:14:21:bc:a2:a5:83:14:78:
eb:40:4e:00:0d:2a:cc:a5:d3:6f:21:03:fd:79:9d:af:27:45:
25:e2:c1:e9:ce:ea:b5:f7:29:df:80:e5:20:5d:54:d5:da:31:
09:fb:a7:31:8e:ea:f6:14:45:de:42:71:2b:c2:00:97:a6:9d:
25:46:b8:e9:89:cf:f4:4d:49:35:ef:3e:1a:24:56:45:ca:6d:
05:21:90:4d:25:db:bc:97:51:bf:b4:e2:69:0c:fd:cb:cf:2f:
8d:12:c3:cf:f6:94:92:c9:31:40:8b:72:69:1e:7f:60:42:aa:
73:5f:ef:a2:27:a3:68:4b:1b:a0:6d:83:a8:54:c5:9a:ed:d6:
87:9c:43:1b:17:63:aa:e5:3a:7d:d8:c5:51:60:9f:4e:5b:76:
b2:3c:59:c9:a7:0b:1b:36:2c:0a:24:e5:bf:bf:29:6e:ad:25:
5c:f9:18:19:a7:25:dc:39:30:fd:17:cc:d0:76:73:95:61:83:
17:8b:27:79:bf:19:0f:bf:ae:bd:83:c8:5a:39:ef:b4:08:11:
9a:95:97:c7:78:18:94:93:a8:97:62:18:c1:6f:af:73:6d:9b:
99:a0:90:8a:80:a3:04:3f:0a:8a:a3:9e:f6:97:03:50:15:86:
48:0b:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:00 2026 by rpki-client