
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: JxtPHvVBRCPdo66YhhfejhJNj5qMPO45HybGdhPBTHc=
Subject key identifier: 21:CB:5B:C3:E8:78:CE:A0:35:EA:0A:25:6E:9C:75:3C:E2:FE:39:07
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 0836
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 082C
Signing time: Sat 04 Apr 2026 20:47:22 +0000
Manifest this update: Sat 04 Apr 2026 20:47:22 +0000
Manifest next update: Sat 11 Apr 2026 20:47:22 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: ioGPfk8lLf6LNWnZxId90qJu2bWSLIYpk0C3EOhZmdY=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Apr 4 20:47:22 2026 GMT
Not After : Apr 11 20:47:22 2026 GMT
Subject: CN=69d178da-afcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:bc:d6:7d:8a:87:22:42:d6:fd:10:29:a7:
07:8e:76:19:2b:09:96:df:e4:a8:c1:f5:bd:38:01:
78:da:f4:d3:bf:b1:40:39:83:1c:b6:51:52:31:81:
40:d4:bc:8b:57:fb:92:fb:74:74:62:a0:70:de:43:
e6:0b:d7:2c:f4:05:16:cd:d7:d3:1a:fd:11:e4:80:
1f:af:08:e6:87:c2:85:69:76:cc:aa:67:65:a1:76:
f1:53:d3:68:a8:99:ff:7b:33:a4:41:a9:12:a0:d1:
e2:2f:ff:d3:00:bf:44:94:25:05:f1:a1:19:92:29:
74:28:39:02:ae:33:c1:53:85:21:49:48:4e:92:2d:
69:f9:14:d3:e5:c5:97:02:ef:24:a5:f6:54:e6:31:
14:7d:87:27:3e:57:80:f4:d0:bc:81:27:52:e4:8e:
c5:7b:91:fe:6d:c6:a6:44:d4:af:5f:09:1e:d2:de:
11:b4:8a:0b:2f:6e:92:5c:bb:f9:84:8e:e7:1a:22:
50:d0:20:8d:44:1d:0f:bc:ac:6c:71:fc:89:e8:bd:
cc:81:75:d0:20:44:04:5e:0b:d8:ff:07:82:f4:0e:
4a:17:97:80:71:8c:be:81:ab:9d:20:c0:93:3c:b1:
b8:0d:7a:04:fd:dc:cb:cf:d0:9f:00:b2:a1:0b:b5:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CB:5B:C3:E8:78:CE:A0:35:EA:0A:25:6E:9C:75:3C:E2:FE:39:07
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7c:55:bd:d5:fe:72:84:8a:e0:4b:84:43:5a:3c:16:1e:d5:
86:a1:a8:f6:49:53:56:c1:d6:0b:2e:c4:87:04:c6:f1:f3:3b:
70:ef:f0:e3:f2:7c:3d:89:74:d9:46:de:9c:b8:88:7e:02:b7:
a1:da:7f:7e:67:b8:c5:b1:0c:7c:af:13:8b:1d:74:c1:f6:10:
38:b9:c6:5f:8e:9f:3d:85:8e:d3:50:42:39:f7:d3:cd:30:af:
d3:a8:2c:5f:45:d9:d5:53:15:68:c9:48:24:cb:6e:4c:78:da:
b6:25:2d:4c:cd:d7:f2:64:5d:c1:3f:f9:76:34:dc:fc:23:25:
64:75:e5:8f:a7:27:6a:7d:2d:da:a1:c9:5a:14:18:d0:96:a1:
21:57:12:c2:ba:9d:59:1d:a0:02:0d:5d:91:62:15:16:cb:c4:
2c:23:b4:05:73:d4:79:1a:58:c1:e9:d4:ed:78:a8:b4:d3:27:
b4:53:37:a2:31:ff:9a:6f:a2:c6:0f:d4:16:b7:a2:8e:52:90:
a8:72:0b:66:32:18:e7:95:e0:17:22:1e:c1:bc:59:20:a5:a2:
1e:a8:65:bc:37:95:89:ba:04:8e:c4:fc:c6:00:30:a0:ad:3d:
0c:47:2c:68:eb:2d:62:ef:20:55:36:40:da:ae:bf:90:c5:fc:
3d:d1:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:11:13 2026 by rpki-client