
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json)
Hash identifier: TNdUVHYgjuFDsyUhxHqxe1OoUh/EDY+s30hAGXCQfnQ=
Subject key identifier: 3D:BE:BA:57:32:6F:DB:6A:40:84:C2:CC:62:36:B8:F4:2E:40:E0:2D
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
Manifest number: 8C
Signing time: Sat 13 Jun 2026 07:34:44 +0000
Manifest this update: Sat 13 Jun 2026 07:34:43 +0000
Manifest next update: Sat 20 Jun 2026 07:34:43 +0000
Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: ThzU98rBZuaoxG94Z3Tu23fc3q0J497cbvFUzJa93Vg=)
2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: +Obkn2kDVy3VtWSxRmw2o+KBF3RFJlPLni7LR/Uptdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Validity
Not Before: Jun 13 07:34:43 2026 GMT
Not After : Jun 20 07:34:43 2026 GMT
Subject: CN=6a2d0814-29bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c4:9d:72:a1:1d:e4:df:3b:95:bb:79:20:e1:
9d:1e:82:e2:27:52:7d:0b:f6:0a:75:91:98:1c:bb:
b6:f6:ac:60:ac:aa:04:f2:aa:e1:21:d6:cc:37:9a:
bb:52:0b:a4:37:60:4f:06:f1:6b:f1:62:22:bf:0b:
bf:e2:78:97:d7:1a:5f:9b:83:b4:30:b4:1f:aa:8e:
a4:2a:b9:b8:bf:78:a1:b2:83:cd:c0:7e:22:c7:bc:
70:c7:39:38:b7:38:e5:2c:7f:41:09:d9:2b:f9:81:
17:4c:cf:a1:79:7d:51:42:8e:ad:08:9e:25:4a:2e:
7a:6e:76:5e:b4:45:6c:11:c5:d7:f4:74:83:02:17:
73:23:1d:98:19:2c:64:4d:db:71:16:7f:a8:fb:9a:
01:45:60:3d:2a:3f:ed:55:22:1c:88:fc:35:26:73:
10:9d:08:fd:e5:2d:25:03:93:2c:16:18:61:ec:86:
ae:08:0e:7c:ea:6f:ea:57:dd:9e:2b:91:08:71:2d:
e2:14:fd:d7:ac:e3:12:03:fb:cb:a7:80:13:2c:e7:
80:20:7c:61:00:0c:61:d2:ed:f6:bc:6e:cf:15:15:
78:c0:f7:a5:06:b7:e3:c7:62:0a:7e:e3:ff:0e:ce:
e5:15:79:dc:32:bd:a9:22:fe:59:d4:04:5c:ea:8f:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BE:BA:57:32:6F:DB:6A:40:84:C2:CC:62:36:B8:F4:2E:40:E0:2D
X509v3 Authority Key Identifier:
keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d9:41:12:47:9f:a8:58:89:1b:65:8d:83:4e:52:89:30:12:
d1:e7:35:73:96:c1:8f:33:b1:49:c3:3c:7e:33:a6:ae:1a:99:
5e:87:a5:eb:fd:c3:cf:d9:59:e2:b6:91:02:ef:a7:85:58:8c:
c1:b0:1f:ec:bf:55:09:64:9f:3b:d6:f4:40:6a:9d:df:d3:4c:
9e:87:20:9e:76:fc:87:4b:a8:25:4d:e6:5c:02:1b:6a:22:1f:
eb:58:05:39:05:ff:d5:96:2b:9a:d0:77:d8:14:bf:bc:d7:ab:
99:e8:e8:d2:e8:7c:80:25:20:04:38:2f:e7:c7:78:36:30:0e:
bf:14:fd:76:5a:e7:e5:13:17:8d:c1:9b:e3:2b:a0:cc:3f:45:
66:25:10:ac:9b:f0:b1:14:ea:7c:4d:38:f4:47:fc:bf:e4:9b:
f2:a5:40:5d:14:60:90:90:f6:86:c6:3e:a4:80:7b:16:03:cf:
4b:23:fc:92:d3:53:52:a8:30:fe:39:0a:e9:a9:f6:6b:ed:93:
b8:36:c5:c2:7b:2b:72:5e:b1:8d:99:5f:2c:ad:3b:a6:ea:39:
bc:50:f7:a8:46:75:b8:b6:82:03:0d:bc:4a:ad:11:2f:71:a3:
8f:a3:ff:e9:97:c0:84:7d:b1:db:6e:83:fc:4d:f5:31:af:a5:
bf:a8:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:57:57 2026 by rpki-client