
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json)
Hash identifier: PAzjpSePGEAW9k/QG2zFGdF/P2/eIXuHfBvf95qf3ag=
Subject key identifier: F6:62:2F:1E:7F:5E:81:4E:2D:37:22:41:FC:3E:9B:BC:37:AE:43:7B
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
Manifest number: E3
Signing time: Fri 27 Mar 2026 06:08:36 +0000
Manifest this update: Fri 27 Mar 2026 06:08:36 +0000
Manifest next update: Fri 03 Apr 2026 06:08:36 +0000
Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: 8nSI98QxtJFwwuUiAshXfFomNKrggbyyrHKJnRfG7t0=)
2: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: 0yX4Y6lkYKfE7kCaCRC2l6z7yMFuM+BBuRGLdbMCpNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Validity
Not Before: Mar 27 06:08:36 2026 GMT
Not After : Apr 3 06:08:36 2026 GMT
Subject: CN=69c61ee4-e494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:92:62:58:6c:dc:d9:0b:b9:76:f9:0f:5a:f0:
c5:8b:e6:f5:46:db:1c:af:e3:8f:18:b9:36:38:7f:
b6:aa:0b:8b:b9:ec:6b:39:ee:53:91:20:9c:f3:3d:
c8:c6:ad:1e:12:8f:ba:b3:ff:cc:8b:a3:06:c3:a0:
21:c0:63:62:e0:a4:b0:5c:ba:64:e8:af:c5:dc:74:
42:1c:23:c5:c6:06:40:c5:8d:4d:90:73:08:1a:33:
03:eb:20:82:b7:a6:a4:d2:0f:81:9f:f3:78:dd:05:
b5:e2:55:cb:08:4d:e6:01:29:eb:40:3f:bf:64:e9:
56:de:02:e0:e7:84:9a:6c:13:e0:22:72:79:83:eb:
7e:03:c8:a0:8c:fc:dc:44:89:b2:5f:60:39:19:72:
05:59:d8:9c:a5:d8:c9:0a:1a:2d:95:d3:f5:cc:05:
f9:f3:a9:86:af:01:50:0e:7f:1b:37:79:09:4b:78:
82:ff:7b:f0:5d:57:80:cc:a3:c2:b9:14:e6:59:75:
22:77:5d:7d:a8:56:e3:41:7d:0e:c1:29:1c:42:d0:
9d:cd:1b:39:eb:78:52:14:43:a3:c8:95:86:98:4d:
b3:d3:6e:f8:13:ad:53:eb:a7:a7:25:db:a8:11:f2:
1c:7e:59:6a:47:2c:0e:6f:2c:c9:59:f8:84:ce:1a:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:62:2F:1E:7F:5E:81:4E:2D:37:22:41:FC:3E:9B:BC:37:AE:43:7B
X509v3 Authority Key Identifier:
keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:13:f8:a8:f6:67:3f:0b:d3:00:45:d6:e1:68:47:cc:43:05:
b6:b2:23:4f:b4:e5:67:8d:46:0f:25:04:43:e1:71:f1:8f:90:
be:77:c0:6c:db:b4:8f:16:36:9d:5e:4f:f2:c4:71:82:c5:8f:
ac:c7:b8:af:38:2a:32:2b:2e:74:48:41:90:95:56:33:f5:db:
27:8a:d0:e5:aa:80:2b:a8:b2:93:0a:44:bd:6b:9a:6c:ea:ec:
8a:52:b3:1c:ae:5f:a2:1c:f9:db:d1:c9:54:cc:a2:5b:f0:d9:
1f:89:16:4b:d5:f7:0d:81:19:05:51:41:37:7a:88:57:4e:58:
6d:9c:97:ae:7d:25:3f:92:b5:cc:d2:4e:ba:04:20:f6:6b:a6:
9d:d6:e4:33:ce:ff:9a:66:13:24:bf:6f:95:4f:24:c3:50:61:
ff:14:26:a9:9a:ce:b9:3a:45:18:7d:5e:59:61:cc:bb:31:de:
60:76:6d:82:24:6a:e1:64:e0:bd:d5:19:00:57:5d:3c:22:4d:
fb:d7:9e:d3:96:16:36:ad:2b:d6:16:d1:a0:e7:7b:a0:82:3c:
b6:72:6f:9d:d3:fc:cf:14:80:f7:f9:82:80:79:b5:77:53:0e:
bf:d4:8e:c4:40:a9:12:6f:92:20:3c:0c:e2:73:a5:11:49:28:
40:21:8f:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBNDYxMTAvBgNVBAUTKEE4OEVFMjNGRjhENzA4MjhDRURCQzcwMUU3OEM4MDc0
N0ZGQzExQ0EwHhcNMjYwMzI3MDYwODM2WhcNMjYwNDAzMDYwODM2WjAYMRYwFAYD
VQQDEw02OWM2MWVlNC1lNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA75JiWGzc2Qu5dvkPWvDFi+b1Rtscr+OPGLk2OH+2qguLuexrOe5TkSCc8z3I
xq0eEo+6s//Mi6MGw6AhwGNi4KSwXLpk6K/F3HRCHCPFxgZAxY1NkHMIGjMD6yCC
t6ak0g+Bn/N43QW14lXLCE3mASnrQD+/ZOlW3gLg54SabBPgInJ5g+t+A8igjPzc
RImyX2A5GXIFWdicpdjJChotldP1zAX586mGrwFQDn8bN3kJS3iC/3vwXVeAzKPC
uRTmWXUid119qFbjQX0OwSkcQtCdzRs563hSFEOjyJWGmE2z0274E61T66enJduo
EfIcfllqRywObyzJWfiEzhpkRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZiLx5/
XoFOLTciQfw+m7w3rkN7MB8GA1UdIwQYMBaAFKiO4j/41wgoztvHAeeMgHR//BHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEE0Ni9ENjRFNUE3RURD
ODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWENDak8yOGNCNTR5QWRIXzhF
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEE0Ni9ENjRFNUE3RURDODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWEND
ak8yOGNCNTR5QWRIXzhFY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANRP4qPZnPwvTAEXW4WhHzEMFtrIjT7TlZ41GDyUEQ+Fx8Y+QvnfAbNu0jxY2
nV5P8sRxgsWPrMe4rzgqMisudEhBkJVWM/XbJ4rQ5aqAK6iykwpEvWuabOrsilKz
HK5fohz529HJVMyiW/DZH4kWS9X3DYEZBVFBN3qIV05YbZyXrn0lP5K1zNJOugQg
9mumndbkM87/mmYTJL9vlU8kw1Bh/xQmqZrOuTpFGH1eWWHMuzHeYHZtgiRq4WTg
vdUZAFddPCJN+9ee05YWNq0r1hbRoOd7oII8tnJvndP8zxSA9/mCgHm1d1MOv9SO
xECpEm+SIDwM4nOlEUkoQCGPDg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:03:01 2026 by rpki-client