
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json)
Hash identifier: jVOy6L4ERODxw5Jd2wCxPt9XpNDZvXb0kumbfIWSlxs=
Subject key identifier: 0E:A7:E0:1B:68:7F:D8:E8:7C:26:E5:D0:D8:E4:6B:C8:DE:66:51:AD
Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
Certificate serial: 0A68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
Manifest number: 0A23
Signing time: Fri 12 Jun 2026 19:55:10 +0000
Manifest this update: Fri 12 Jun 2026 19:55:09 +0000
Manifest next update: Fri 19 Jun 2026 19:55:09 +0000
Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: dHqzkgY0ebWZ2IUP29DlAcr0lvhwLcsW2ThE2gAhx4s=)
2: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: 1IEjJ30lw69ZEHMKoLQ8EMNLbhqzITtfEQNas8rt+9s=)
3: 0FD0ED72DEDF11F085D204E3526F56BC.roa (hash: pTLqg59yg6AHQtWauJEh8VBOaMqkkf2a1JioyqursTM=)
4: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: G0vU5JVbCZyLk1wSOWyQBhOy8mR2nS22Z/eltaU886M=)
5: 35E2088CDEDC11F09573FB8A516F56BC.roa (hash: Pkdcinjik27aP1313/FsgkfOJBBKQKn1ifEErEuk2l8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl
rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
Validity
Not Before: Jun 12 19:55:09 2026 GMT
Not After : Jun 19 19:55:09 2026 GMT
Subject: CN=6a2c641d-824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:0b:63:82:58:1a:2d:4b:4f:bf:e8:dc:12:
e6:93:a1:54:e2:14:58:7a:e8:96:6d:0d:2a:37:6c:
06:da:d1:9a:5a:3b:1f:5a:04:8a:83:3f:8b:7d:9b:
5b:a9:a5:af:cc:c8:69:91:fc:af:6c:da:9f:be:d6:
1f:ad:e1:12:cb:0c:75:9e:64:ea:b0:71:c3:03:e1:
40:15:b3:9a:ce:32:d4:1d:dc:3a:f3:4e:0c:ee:17:
f3:28:e9:ce:64:c3:07:fa:4f:67:ba:f2:35:22:2b:
22:f4:30:73:ed:08:fa:26:64:eb:5d:84:2e:34:f0:
7b:e9:54:8c:d2:d8:2c:89:48:81:ce:fd:a5:8f:09:
47:cf:af:a4:ba:bb:53:20:48:71:88:b0:7e:a0:db:
e6:4e:75:9f:33:13:8c:ab:a8:93:d6:d5:55:3e:7f:
a3:1b:53:9c:b3:96:96:db:32:41:fc:fb:51:4c:41:
6d:7f:b8:34:9d:84:fc:f2:f2:7b:fc:fb:05:c2:6e:
9c:3b:94:93:e4:95:a0:2e:40:58:a2:ee:27:e5:93:
13:49:ee:ac:d8:3d:de:d3:63:d4:5d:13:69:fd:d2:
e0:72:21:a4:58:0b:1b:ef:7a:e0:4f:d8:29:60:98:
26:52:b2:23:2d:f0:71:ca:8f:30:2e:ae:78:5e:62:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A7:E0:1B:68:7F:D8:E8:7C:26:E5:D0:D8:E4:6B:C8:DE:66:51:AD
X509v3 Authority Key Identifier:
keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f0:da:2f:aa:0d:e0:16:48:79:56:f9:0c:85:3f:fe:1a:12:
73:a2:bd:94:4e:2b:44:34:2e:49:ed:e9:f1:12:75:4b:74:9b:
a1:8c:1f:36:f0:ca:fc:22:3e:fa:c2:66:e9:24:54:61:bf:9e:
30:b8:5d:eb:55:9b:8f:f6:80:0e:56:67:a4:2d:a9:b4:32:2e:
63:d8:a4:be:f2:07:3b:f5:fb:e8:93:77:de:49:82:70:14:36:
c8:61:d3:f7:20:99:f2:a0:dc:2d:cd:7a:07:9a:57:91:48:89:
6f:0e:55:55:5a:78:27:2f:97:2c:88:b5:9c:16:2f:a6:4b:5f:
ea:22:96:23:68:cb:13:d3:c2:40:8b:48:61:41:66:39:55:97:
f8:0f:e5:ba:de:2e:7a:67:ea:92:af:67:b4:00:06:3d:dd:27:
8b:05:d2:a9:6d:11:25:d1:35:8a:43:41:50:1d:e3:0f:c3:ae:
cb:c0:9f:ce:f3:a4:e9:a9:f7:03:24:3d:34:e1:13:eb:b9:53:
26:2f:cc:34:53:16:28:90:ff:92:19:ea:6e:a1:3d:c0:1e:9a:
e3:1b:0d:39:a9:bc:58:70:fa:34:ec:a5:f3:20:ec:d8:b3:85:
03:75:79:af:79:7d:12:68:a8:92:a2:43:ca:b4:85:32:22:15:
bf:1c:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:13:53 2026 by rpki-client