
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: Ut/him8SrMQB5O4OM+HCM05E8eCAyBRb/dp01sEqwNI=
Subject key identifier: 28:4E:97:38:F1:D1:B9:8D:DF:45:C6:23:00:8D:88:92:40:1F:7E:95
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0DD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0D85
Signing time: Sat 28 Mar 2026 17:59:30 +0000
Manifest this update: Sat 28 Mar 2026 17:59:30 +0000
Manifest next update: Sat 04 Apr 2026 17:59:30 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: ZkEwGsRpsbeDQE2UIPgER2cwu/dw5SdUTts+dgfsNWI=)
2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WD74/2XgeAz/XgGtt1zWIcisMorpjdxcCpl+RUcYgd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 17:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3538 (0xdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Mar 28 17:59:30 2026 GMT
Not After : Apr 4 17:59:30 2026 GMT
Subject: CN=69c81702-9594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:c8:7e:ca:6e:dc:7c:1f:e2:b4:89:d1:92:
2c:13:d3:5a:22:72:02:1b:97:c5:9e:ee:8f:7f:e5:
71:25:4c:ac:12:40:b5:be:3d:dd:a0:09:f3:f4:7a:
a5:72:cd:50:ad:74:51:a5:be:97:3d:d8:e9:c6:46:
53:d4:ad:d4:64:4d:61:0e:3c:a0:5b:4c:47:7a:6c:
fb:18:86:d1:68:05:b7:ac:2e:bf:b2:59:f3:88:ba:
28:7e:7a:c4:da:fd:e7:e7:d5:b5:e1:62:62:6e:c3:
a9:1b:98:15:11:74:80:13:ca:bc:11:b3:08:fa:18:
ff:1a:6e:51:78:47:97:12:84:64:4f:11:aa:f2:d3:
c5:ea:8d:8a:66:85:fe:8f:f1:0e:e1:b7:66:4c:5b:
0f:1f:01:22:d7:a9:73:b7:93:aa:d0:db:a9:b8:7e:
9c:16:44:0d:dd:a7:4a:dd:cf:b7:16:74:b3:e1:a8:
2a:ee:ec:9c:66:f1:63:38:16:62:90:73:68:75:b8:
a9:e7:8b:b7:41:06:dc:4e:cc:de:fa:8c:d3:07:13:
fb:ba:2d:55:39:06:5a:2c:d2:29:3f:6b:e4:64:e4:
86:7f:e1:6e:69:b2:13:39:92:92:cd:84:a6:f4:e0:
86:1d:c0:e5:ba:50:56:99:d8:e4:8f:20:3a:28:26:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4E:97:38:F1:D1:B9:8D:DF:45:C6:23:00:8D:88:92:40:1F:7E:95
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4a:e8:bb:45:46:ca:2a:99:7e:9e:20:8f:42:17:a0:c5:33:
34:b0:f7:a8:e3:da:8f:8f:b0:90:a8:e9:0a:35:67:cf:d1:58:
d7:da:59:dc:4c:65:88:76:4f:a7:0a:12:ad:31:96:9b:f0:2b:
01:7f:2f:28:92:9a:b0:7e:95:99:5e:fc:d4:92:26:ea:5f:3d:
80:bc:fd:04:4f:00:bf:1e:66:78:9a:2c:aa:d6:dd:4b:03:fe:
ca:85:e8:e8:53:ec:0b:f5:f0:7b:65:2d:29:18:8b:8f:2b:69:
dd:dc:72:e1:98:38:10:db:31:0f:87:65:29:c9:b3:08:87:75:
f4:52:76:31:86:f4:3b:ea:7c:40:3d:86:aa:ac:fb:82:95:d4:
aa:57:c4:d7:5e:0c:de:07:4c:49:63:d5:55:16:07:fe:e5:4e:
87:de:e0:41:09:f0:0c:d4:8b:ed:63:58:9c:50:d3:b4:c2:f6:
09:4e:63:50:02:52:50:ad:b5:26:ae:f7:96:25:29:6d:8e:b9:
03:71:79:9c:5b:55:95:24:21:50:ab:3e:a9:14:e7:44:e2:d1:
7d:14:d6:08:a4:8c:a1:ec:04:fe:3b:7f:54:32:60:d4:6e:17:
f3:f9:2c:d4:0c:4e:23:d5:8b:50:2c:04:a2:1f:7c:cf:52:57:
68:9e:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:29:42 2026 by rpki-client