
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
File: QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json)
Hash identifier: snurxHHBUflSKSbUkXnS+UmWp921/qmSBhq0MspevgM=
Subject key identifier: 29:E1:58:8C:CD:1C:7F:93:C4:73:39:1C:7F:77:99:C1:FD:7D:03:6E
Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
Certificate issuer: /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Certificate serial: 0715
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
Manifest number: 070C
Signing time: Fri 12 Jun 2026 22:04:05 +0000
Manifest this update: Fri 12 Jun 2026 22:04:05 +0000
Manifest next update: Fri 19 Jun 2026 22:04:05 +0000
Files and hashes: 1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: R5MeEpSbElCmoDfYuZUxlZFyrOYaGA5bmM4GK6ojEkI=)
2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: MHi4TFFkjk45IS82Lk1zkWvvF71n/wv3X8tPB3ZA4gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Validity
Not Before: Jun 12 22:04:05 2026 GMT
Not After : Jun 19 22:04:05 2026 GMT
Subject: CN=6a2c8255-a129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:7a:9a:ae:cb:eb:0b:8e:02:f7:4f:60:01:
59:38:5e:65:60:5d:ec:58:97:32:6b:fc:2a:07:db:
c9:4f:67:87:50:2d:af:bd:7c:5a:b8:e5:93:bc:5f:
dd:1f:11:b4:e3:e1:c6:f7:f3:99:7a:15:f5:9c:10:
5e:ca:dd:19:5a:b5:68:df:1d:72:36:57:d7:15:5f:
1c:9b:37:39:e8:3b:14:d2:5c:d0:01:8e:e2:93:0f:
f4:6e:72:35:ac:e3:e6:3b:01:c0:b2:27:9c:fc:fa:
78:c8:26:c2:0f:84:b3:08:52:59:64:8e:c8:f9:93:
df:ca:ff:17:7b:7f:8a:f8:b0:05:3d:27:3a:da:80:
b0:c5:80:c5:4c:c5:3a:6b:67:f9:2d:fd:ef:b8:65:
96:ad:04:37:3a:5d:cc:6f:de:8e:96:ff:79:a2:e8:
b7:16:72:ef:5b:c5:92:5b:b3:3f:13:12:88:c8:63:
d4:31:54:de:e9:ac:4a:9f:d5:c4:26:a9:c9:df:7d:
99:fe:cd:9f:12:f1:d9:64:e8:72:ba:68:d7:35:bb:
b6:46:c1:cd:7a:9f:24:4d:ba:9f:c2:aa:fe:3e:33:
12:25:87:78:85:a7:d9:e6:0a:28:77:4e:c5:d7:9f:
69:8b:e5:2f:a1:75:63:46:8c:65:ea:1b:23:98:32:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E1:58:8C:CD:1C:7F:93:C4:73:39:1C:7F:77:99:C1:FD:7D:03:6E
X509v3 Authority Key Identifier:
keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:52:07:ce:9b:c6:5b:aa:5b:b7:a0:37:3c:b4:5d:cb:6c:83:
c0:90:ce:d9:91:2f:cf:dc:f4:e5:e2:98:cb:af:9a:3f:0a:77:
45:78:37:68:8c:40:ab:92:c4:f1:6c:f9:40:a8:62:3e:91:e9:
63:b1:fb:1d:3b:f2:7a:a0:c4:92:d3:70:65:2e:a1:34:e2:9d:
19:ec:cf:1e:3f:00:e9:e3:f1:73:ce:06:30:ae:6e:88:50:49:
92:12:b1:de:80:43:ac:49:c3:c9:22:6d:df:80:14:d0:04:19:
f8:8d:76:fb:d3:63:a7:cd:3b:ec:03:63:9d:63:c5:3e:93:ab:
ef:77:b6:3f:03:93:97:ef:3e:60:5a:2a:70:50:c1:be:83:cb:
a1:71:10:22:ba:7b:68:32:1d:88:81:8d:cb:cb:0f:22:5a:91:
62:6b:5d:2d:30:4f:08:05:98:0b:6c:f7:66:8a:7f:83:83:28:
2e:00:09:ef:4c:28:fc:ca:ea:ff:3d:6f:bd:ab:a2:ab:49:a2:
f1:a4:05:0b:1a:6f:3f:ea:31:9f:bc:98:55:38:ee:9d:2f:8e:
30:2f:c4:85:72:0f:25:a1:01:c1:91:c7:3f:52:62:6b:5d:0b:
c4:a6:b2:42:d8:97:af:29:1c:e6:cf:42:89:81:12:01:9a:23:
16:d4:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:44 2026 by rpki-client