
$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json)
Hash identifier: fGMvUT3Mt+jW4xEvGCB8Ksos8IwHTfnHrqf66AooxYM=
Subject key identifier: 91:6E:F7:26:8F:3C:62:68:50:63:5D:5E:15:57:C2:4C:71:19:55:86
Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
Manifest number: 35
Signing time: Sat 13 Jun 2026 08:39:38 +0000
Manifest this update: Sat 13 Jun 2026 08:39:37 +0000
Manifest next update: Sat 20 Jun 2026 08:39:37 +0000
Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: zqr3qGUQ0X4tZxAWPcvE+xIZQ0eMxFq8oqsd03qGi6o=)
2: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=)
3: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Validity
Not Before: Jun 13 08:39:37 2026 GMT
Not After : Jun 20 08:39:37 2026 GMT
Subject: CN=6a2d174a-5e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:55:e6:89:36:df:a5:97:06:89:7d:c7:90:
27:9b:e0:c2:92:2d:a9:a7:54:61:48:67:2f:a3:d8:
a5:b4:a1:3a:62:6a:2a:ab:71:da:2d:01:6b:7e:2b:
83:4f:2a:7f:7e:c2:cc:2f:71:d9:fd:5a:13:5f:71:
0e:06:db:87:cc:6d:16:ab:2e:fb:0d:a8:8f:ab:a5:
a3:df:62:ba:06:ec:a2:9d:c7:3a:9e:39:69:3f:9a:
c9:f8:72:d6:40:05:16:ab:88:cc:b0:3a:47:89:51:
52:00:98:8e:66:c9:f8:99:77:50:44:b6:2b:39:cc:
21:05:ad:de:97:63:63:0c:85:18:b8:39:41:6e:dc:
02:75:11:80:61:b4:e3:8a:57:6f:94:0b:9e:78:0b:
17:90:4d:a8:16:bd:5e:7a:b5:99:f6:ea:8b:cc:58:
f3:8d:7b:3f:79:81:c4:f1:21:86:7c:bf:bf:99:3e:
b3:6b:22:e5:a6:bd:81:2a:ee:e8:f0:bf:cf:35:2b:
64:ec:0d:34:4e:3d:10:47:a7:5c:2a:52:56:21:26:
c7:12:7a:20:71:28:7f:83:8b:41:a4:98:fd:79:e2:
c7:27:68:68:9d:62:85:7e:b2:44:cd:ca:cd:31:8d:
5b:93:2c:9b:b7:b3:a8:c6:f9:3d:06:58:97:0b:1e:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6E:F7:26:8F:3C:62:68:50:63:5D:5E:15:57:C2:4C:71:19:55:86
X509v3 Authority Key Identifier:
keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:2f:c3:40:f1:02:4b:85:5a:db:47:54:31:78:fa:9f:4f:36:
14:01:dd:78:d0:58:3b:a4:85:c5:e0:24:da:dc:0e:dc:4f:2d:
09:7b:9f:d5:a8:4d:de:a5:55:39:ec:e4:78:00:d0:16:df:4b:
d9:ea:db:4c:35:eb:36:c6:43:12:21:5f:29:99:05:61:71:df:
64:72:20:26:98:57:4d:0b:80:74:b3:f0:da:71:55:8e:6f:13:
74:b6:f9:d8:9b:3a:20:af:8a:d7:57:f8:c5:31:fc:35:1a:ac:
23:21:9d:c6:f8:80:03:93:eb:b4:8c:63:04:18:92:f4:32:04:
6d:f5:d9:10:d1:10:e5:2f:7a:c1:ee:6d:64:63:c5:db:b7:af:
8b:4b:97:01:29:c9:77:e3:7c:c5:27:70:45:13:7f:c8:3a:0e:
9d:6f:80:26:1a:a6:75:e0:06:0f:30:1c:0f:22:3f:42:5a:e4:
5d:8b:1e:92:f1:df:b8:7e:98:77:24:d8:cf:94:06:cd:0b:5a:
0a:28:1f:4e:0f:a6:e0:34:65:a5:01:8b:7d:03:9f:d7:db:94:
52:d4:1f:ee:9f:1c:ad:9c:1a:4f:03:aa:9c:3b:26:da:15:02:
bf:64:6a:38:ab:b7:b7:4e:40:86:cf:8d:62:81:d1:64:23:3a:
2d:1b:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:46:24 2026 by rpki-client