
$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json)
Hash identifier: OnngFz4hI3KJeMxv2OnI+aqwt+c4h6lgz2imEsBFmPQ=
Subject key identifier: 9F:F7:17:C1:40:C5:34:9B:63:30:E2:8F:8A:80:0C:0C:1D:49:1D:A6
Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
Manifest number: B0
Signing time: Sat 13 Jun 2026 07:14:50 +0000
Manifest this update: Sat 13 Jun 2026 07:14:50 +0000
Manifest next update: Sat 20 Jun 2026 07:14:50 +0000
Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: P2pkIGnJh25KQNfjmAxXJ2S84brBJ/UgQOotzJVQQ04=)
2: 4DB1CEBCF44311F08E818BA85F6F56BC.roa (hash: 28TOJyzIUoQ+gHS12Ia30yDze1P2PrrZaNrtbhDyvQI=)
3: 85B52606F44311F089BA68A95F6F56BC.roa (hash: Ex29dRzH8LkzDGimmK0Vm7ywjUej+dvGo6cnaEEBQnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Validity
Not Before: Jun 13 07:14:50 2026 GMT
Not After : Jun 20 07:14:50 2026 GMT
Subject: CN=6a2d036a-7e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:3a:1b:ac:a4:aa:0d:95:a9:1b:85:32:cd:
17:af:cb:b7:6a:f1:a2:99:7b:39:6e:a3:ab:60:b2:
66:a5:38:b9:ec:82:9a:6e:67:77:a8:b4:d5:24:0f:
a1:0b:cf:f6:07:30:03:d9:59:13:d4:af:04:91:31:
a3:c5:ba:8d:2d:5e:42:13:16:d7:4d:2b:14:5b:9a:
c5:8f:cb:3b:c0:73:22:ee:b6:f6:16:5f:f6:5a:b9:
f4:4c:d3:3a:a1:e7:c2:90:7f:0c:f3:9d:0c:8a:50:
32:4c:4e:d5:d3:3c:95:bc:f2:91:a0:b1:5f:ea:da:
1f:7d:d2:fa:d9:c2:02:f2:64:42:14:b0:0f:69:20:
26:9b:2f:26:4c:bb:bc:63:1a:2e:46:4f:be:54:42:
b9:b3:fa:65:8c:2b:61:c0:b6:ad:5d:a5:20:41:12:
dd:63:7f:f2:b8:bc:19:c9:36:e4:04:25:4b:dd:11:
26:0c:f2:c2:8f:c1:2a:f5:0c:4d:9d:3c:35:dd:52:
b0:50:dc:4b:22:4e:ca:37:d2:a1:88:bc:83:70:55:
f2:5a:96:ec:79:2f:b0:ac:02:0d:19:21:04:1e:63:
32:cc:cc:d5:e2:43:f1:78:b5:20:04:9e:25:09:91:
df:16:34:d9:7b:75:16:be:82:21:b7:da:f4:95:12:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F7:17:C1:40:C5:34:9B:63:30:E2:8F:8A:80:0C:0C:1D:49:1D:A6
X509v3 Authority Key Identifier:
keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a5:ef:ae:81:eb:7c:74:a5:5b:01:11:d8:55:e7:bc:29:ec:
22:d5:8c:19:1e:b2:c6:9d:65:6b:49:06:9b:b0:d6:f8:fb:50:
ab:4d:00:58:86:a4:96:ce:6a:de:d9:ef:aa:47:36:1d:a0:f2:
ae:e6:7e:81:a1:f4:46:71:11:d2:81:55:eb:38:f2:fa:2e:56:
bc:0a:e6:da:37:8c:97:86:6e:e7:cd:62:83:05:8a:21:a3:db:
fe:9f:e4:24:50:53:86:31:ba:61:bc:ba:60:9b:45:48:45:8d:
51:11:ad:69:81:c6:70:96:08:1b:0f:d3:2d:ac:19:24:68:f0:
7d:ab:dc:1f:44:52:88:c5:62:26:81:d6:28:41:6f:46:87:aa:
74:f9:3e:cc:78:76:b9:c1:3d:87:4f:b4:65:5a:c4:ba:0f:57:
ea:47:45:8a:b1:d2:59:b6:a0:60:0f:7c:60:68:94:71:73:2e:
0a:dd:ad:ff:22:0c:24:41:0a:70:8c:57:40:c1:0e:c0:5e:d9:
f5:bb:54:3a:8d:0a:f7:00:2b:e7:7f:b8:a0:54:70:26:1a:61:
b0:12:df:9e:f5:4e:d3:5f:e3:91:8d:aa:66:b2:6e:36:fc:30:
f6:d1:09:5d:c7:59:41:59:4f:bd:3e:19:ef:f0:76:0b:98:52:
a0:cb:e3:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMwRDYxMTAvBgNVBAUTKEFBQzM5RkQ5NjNERTE3MzFEMERBM0Q0MTQxRTRBMUU0
NjlFOTg1MjMwHhcNMjYwNjEzMDcxNDUwWhcNMjYwNjIwMDcxNDUwWjAYMRYwFAYD
VQQDEw02YTJkMDM2YS03ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkp06G6ykqg2VqRuFMs0Xr8u3avGimXs5bqOrYLJmpTi57IKabmd3qLTVJA+h
C8/2BzAD2VkT1K8EkTGjxbqNLV5CExbXTSsUW5rFj8s7wHMi7rb2Fl/2Wrn0TNM6
oefCkH8M850MilAyTE7V0zyVvPKRoLFf6toffdL62cIC8mRCFLAPaSAmmy8mTLu8
YxouRk++VEK5s/pljCthwLatXaUgQRLdY3/yuLwZyTbkBCVL3REmDPLCj8Eq9QxN
nTw13VKwUNxLIk7KN9KhiLyDcFXyWpbseS+wrAINGSEEHmMyzMzV4kPxeLUgBJ4l
CZHfFjTZe3UWvoIht9r0lRJmtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/3F8FA
xTSbYzDij4qADAwdSR2mMB8GA1UdIwQYMBaAFKrDn9lj3hcx0No9QUHkoeRp6YUj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8xN0YwNkEyNDVG
RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6SFEyajFCUWVTaDVHbnBo
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzBENi8xN0YwNkEyNDVGRTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6
SFEyajFCUWVTaDVHbnBoU00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu6XvroHrfHSlWwER2FXnvCnsItWMGR6yxp1la0kGm7DW+PtQq00AWIakls5q
3tnvqkc2HaDyruZ+gaH0RnER0oFV6zjy+i5WvArm2jeMl4Zu581igwWKIaPb/p/k
JFBThjG6Yby6YJtFSEWNURGtaYHGcJYIGw/TLawZJGjwfavcH0RSiMViJoHWKEFv
RoeqdPk+zHh2ucE9h0+0ZVrEug9X6kdFirHSWbagYA98YGiUcXMuCt2t/yIMJEEK
cIxXQMEOwF7Z9btUOo0K9wAr53+4oFRwJhphsBLfnvVO01/jkY2qZrJuNvww9tEJ
XcdZQVlPvT4Z7/B2C5hSoMvjow==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:47 2026 by rpki-client