
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
File: QhQkhj78b5uyGjIfvVA2YeSoo_0.mft (raw, json)
Hash identifier: A3p69+cOTgJcMbcvBq/6KC86ruj5fVsDnieZSN1ZIhI=
Subject key identifier: 91:29:43:1D:9B:9A:13:D8:CF:10:C3:26:EF:51:6E:5B:F6:24:33:49
Authority key identifier: 42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
Certificate issuer: /CN=A9114ECC/serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
Manifest number: 37
Signing time: Sat 13 Jun 2026 08:39:12 +0000
Manifest this update: Sat 13 Jun 2026 08:39:12 +0000
Manifest next update: Sat 20 Jun 2026 08:39:12 +0000
Files and hashes: 1: QhQkhj78b5uyGjIfvVA2YeSoo_0.crl (hash: NtbkeC6TOBS00f8PlVPMaL7pTrxg/cpEhSFH86h8MMw=)
2: 7E43D97816DD11F18A14954A343D8C67.roa (hash: GHvsDod4B4M4Fvy4vn3Fb5pNbSRAj6hWau5NZwFd4IY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114ECC, serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Validity
Not Before: Jun 13 08:39:12 2026 GMT
Not After : Jun 20 08:39:12 2026 GMT
Subject: CN=6a2d1730-2b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:51:95:ae:81:08:f2:fe:07:c6:ed:37:a3:
11:64:e9:c3:bc:75:38:b7:19:15:b0:82:f1:4f:20:
75:09:a0:26:20:1b:02:25:86:2f:39:42:25:77:3e:
fa:dd:a1:c7:21:a7:4e:52:ae:aa:41:9f:e6:49:1d:
0c:55:ba:46:08:15:56:3d:75:35:63:ad:75:b2:e7:
2d:32:52:51:db:bd:c9:41:e3:46:fc:60:da:5f:d3:
fd:b7:b4:9c:a3:ac:b7:99:90:61:f6:6f:35:42:e0:
d0:30:00:d8:f5:07:27:34:b5:0f:61:06:5a:bf:4a:
49:29:b4:a9:dd:e3:51:cd:57:62:64:1c:99:04:e0:
6d:8e:18:fc:33:70:e0:36:a1:36:39:ef:ae:4a:6d:
96:2a:55:ec:12:e2:87:d8:77:8b:bf:64:a6:06:eb:
c9:49:7c:8f:d0:c8:7b:01:59:06:1b:b7:5f:82:6b:
47:e3:5e:a9:75:b9:13:06:cd:19:11:11:1f:44:6f:
28:1f:37:b1:54:32:f9:98:47:1d:04:91:ef:0a:1e:
eb:5e:69:30:a0:fa:c4:71:15:79:ab:89:ad:2f:f4:
cc:ca:cb:7e:92:13:84:02:6d:40:82:05:b9:6d:57:
34:09:c6:a2:a3:37:fb:85:13:77:87:58:77:3c:1f:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:43:1D:9B:9A:13:D8:CF:10:C3:26:EF:51:6E:5B:F6:24:33:49
X509v3 Authority Key Identifier:
keyid:42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ba:37:f9:5f:ed:fa:c4:b2:fa:2c:e7:04:68:23:92:7d:24:
90:3a:4d:b7:98:85:96:7d:d8:b4:d4:76:c7:f2:4b:76:b4:89:
d5:55:51:77:68:42:90:db:c7:0c:98:88:7d:5a:ed:29:1c:de:
15:66:47:25:41:6b:7e:15:be:b5:fe:3b:1d:6c:d5:2d:f1:b9:
50:da:35:42:da:27:3e:c4:a3:66:8c:96:fb:8c:2a:96:0c:3a:
35:96:64:9e:7b:e7:ff:3a:69:d4:9d:d3:28:45:d0:e7:56:e0:
5a:c7:a5:d6:b8:1d:02:40:53:c4:2a:ea:79:8a:a0:bc:8d:ba:
03:81:fe:cc:1b:4d:f8:ea:ea:8f:e2:8d:9c:90:25:d4:90:f7:
d0:8a:a7:00:31:0f:24:38:81:b9:b7:be:6d:86:0d:34:d7:8f:
c4:f4:47:ed:c2:ff:17:0b:24:a1:54:8a:22:e7:c3:da:bf:10:
3e:2c:d3:e5:5e:37:89:ae:5d:5a:f5:b2:29:b9:a3:0d:74:56:
7c:60:2b:85:32:f2:be:25:18:94:e4:d6:9e:01:10:7a:df:88:
e7:4e:f9:05:76:9e:bb:b7:ba:3c:dd:48:ae:f8:e8:43:62:e2:
88:79:9f:45:4c:d4:27:14:e7:76:42:1d:31:ea:83:a5:cd:c5:
1c:22:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:59:37 2026 by rpki-client